Amebis/GEANTLink
Amebis/GEANTLink
1
1
Fork 0
Code Issues 3 Pull Requests Actions Packages Projects Releases 50 Wiki Activity

Windows Credential Manager credential retrieval disabled when <allow-save> is false, to prevent loading stale credentials from previous configuration when <allow-save> was true and credentials got stored to Windows Credential Manager

Browse Source
This commit is contained in:
Simon Rozman 2016-09-28 10:45:06 +02:00
parent 6471a200c6
commit 2684c6b7de
1 changed files with 8 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
lib/TTLS_UI/src/Module.cpp
View File

@ -205,6 +205,12 @@ void eap::peer_ttls_ui::invoke_identity_ui(
bool has_cached = cred_in.m_cred && cred_in.match(*cfg_prov); bool has_cached = cred_in.m_cred && cred_in.match(*cfg_prov);
#endif #endif
if (dwFlags & EAP_FLAG_GUEST_ACCESS) {
// Disable credential saving for guests.
cfg_method-> m_allow_save = false;
cfg_method->m_inner->m_allow_save = false;
}
// Combine outer credentials. // Combine outer credentials.
eap::credentials::source_t src_outer = _cred_method->credentials_tls::combine( eap::credentials::source_t src_outer = _cred_method->credentials_tls::combine(
#ifdef EAP_USE_NATIVE_CREDENTIAL_CACHE #ifdef EAP_USE_NATIVE_CREDENTIAL_CACHE
@ -213,7 +219,7 @@ void eap::peer_ttls_ui::invoke_identity_ui(
NULL, NULL,
#endif #endif
*cfg_method, *cfg_method,
_target_name); cfg_method->m_allow_save ? target_name.c_str() : NULL);
// Combine inner credentials. // Combine inner credentials.
eap::credentials::source_t src_inner = _cred_method->m_inner->combine( eap::credentials::source_t src_inner = _cred_method->m_inner->combine(
@ -223,13 +229,7 @@ void eap::peer_ttls_ui::invoke_identity_ui(
NULL, NULL,
#endif #endif
*cfg_method->m_inner, *cfg_method->m_inner,
_target_name); cfg_method->m_inner->m_allow_save ? target_name.c_str() : NULL);
if (dwFlags & EAP_FLAG_GUEST_ACCESS) {
// Disable credential saving for guests.
cfg_method->m_allow_save = false;
cfg_method->m_inner->m_allow_save = false;
}
// Create method credentials panel. // Create method credentials panel.
wxTTLSCredentialsPanel *panel = new wxTTLSCredentialsPanel(*cfg_prov, *cfg_method, *_cred_method, dlg.m_providers); wxTTLSCredentialsPanel *panel = new wxTTLSCredentialsPanel(*cfg_prov, *cfg_method, *_cred_method, dlg.m_providers);