hostapd/src
Jouni Malinen 2be1bcaf74 EAP-TLS peer: Fix protected success indication check for resumed session
The internal flag prot_success_received was not cleared between the
sessions and that resulted in the resumed session not mandating the
protected success indication to be received. Fix this by clearing the
internal flag so that the EAP-TLS handshake using session resumption
with TLS 1.3 takes care of the required check before marking the
authentication successfully completed. This will make the EAP-TLS peer
reject an EAP-Success message should it be received without the
protected success indication.

Signed-off-by: Jouni Malinen <quic_jouni@quicinc.com>
2022-05-02 17:16:44 +03:00
..
ap Check the return of pbkdf2_sha1() for errors 2022-05-01 17:13:31 +03:00
common EHT: Additions to hostapd_set_freq_params() 2022-04-29 17:40:13 +03:00
crypto OpenSSL: Limit the number of TLS 1.3 session tickets to one 2022-05-02 17:16:39 +03:00
drivers EHT: Additions to hostapd_set_freq_params() 2022-04-29 17:40:13 +03:00
eap_common EAP-TLS: Update specification references to RFC 5216 and 9190 2022-04-05 22:57:51 +03:00
eap_peer EAP-TLS peer: Fix protected success indication check for resumed session 2022-05-02 17:16:44 +03:00
eap_server EAP-TLS server: Send final TLS message for resumed session with TLS 1.3 2022-05-02 17:16:44 +03:00
eapol_auth EAP-TLS: Testing functionality to skip protected success indication 2022-04-07 00:43:12 +03:00
eapol_supp build: Make more library things common 2020-10-12 20:20:35 +03:00
fst FST: Convert Boolean to C99 bool 2020-04-24 17:06:50 +03:00
l2_packet Replace "dummy" with "stub" in comments/documentation 2021-10-11 20:52:50 +03:00
p2p P2P: Copy only valid opclasses while filtering out 6 GHz channels 2022-03-30 20:42:14 +03:00
pae MACsec: Support GCM-AES-256 cipher suite 2022-02-16 22:54:49 +02:00
radius RADIUS attributes for EAPOL-Key message details 2022-04-15 18:40:55 +03:00
rsn_supp Add support for not transmitting EAPOL-Key group msg 2/2 2022-04-05 17:06:32 +03:00
tls TLS: Fix highest TLS version disabling with internal TLS client 2021-03-14 13:08:04 +02:00
utils DPP: Allow a list of supported curves to be used in bootstrapping URI 2022-04-14 16:57:11 +03:00
wps Replace "dummy" with "stub" in comments/documentation 2021-10-11 20:52:50 +03:00
build.rules build: Rebuild libs all the time 2020-10-12 20:18:02 +03:00
lib.rules build: lib.rules: Add common-clean 2020-10-16 12:51:12 +03:00
Makefile build: Add a common-clean target 2020-10-10 12:48:41 +03:00
objs.mk build: Fix dependency file inclusion 2020-10-12 11:05:16 +03:00