From 7973a8d59b8b892b69267d1d50e874bd6653ccaa Mon Sep 17 00:00:00 2001
From: Simon Rozman <simon@rozman.si>
Date: Thu, 25 Aug 2016 12:57:47 +0200
Subject: [PATCH] Handshake log events are a bit more specific now

---
 lib/Events/res/EventsETW.man | Bin 91238 -> 92454 bytes
 lib/TLS/src/Method.cpp       |   5 ++++-
 2 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/lib/Events/res/EventsETW.man b/lib/Events/res/EventsETW.man
index a66984845a44806f480eee7086f6a291a4759602..cd64a9693211fbcbd1d8c47cb43646ce18c707e9 100644
GIT binary patch
delta 350
zcmaEMf_2#?)(vH6Coh_zG3jXDWSMgjlO49RO;$L|#~#n%$>7J}IeFnUaYoC@g8jw_
zMSQHD40#NhlO1;lgOpA-*dj7HX@bz?d4e31#rpM-6izOZ6`H(6NNlsixgc>)69z*D
zJrJDyaI@&<4Nv2WCI{?b0ouyP4mOaXWb(qFs?!A=8QJQg0t}f9i3~Xm3Je)QI*%cR
zp%~1{W=I8!r7#pR<TDfiVJeWVz@Wj9#83&Oi-G(ihB7dz3FPMkd8nca45dKR5`k(G
zfi~m-$s{0|3Ur$igFb^D1Ml?8AV%}aa_4wJKA7(0%&0KkDTGl(6{HYkTnRoaw^xTV
HzUBb{5<_A^

delta 49
zcmV-10M7rW(go(o1+aF_lMt<-lfcjvlWq|fli<@xvqaGf7Xvc@II~gcd2*8=)eyJd
HTmeW7SJ)N}

diff --git a/lib/TLS/src/Method.cpp b/lib/TLS/src/Method.cpp
index c63f32e..29f83aa 100644
--- a/lib/TLS/src/Method.cpp
+++ b/lib/TLS/src/Method.cpp
@@ -729,7 +729,10 @@ void eap::method_tls::get_result(
     }
 
     case EapPeerMethodResultFailure:
-        m_module.log_event(&EAPMETHOD_TLS_FAILURE, event_data((unsigned int)eap_type_tls), event_data::blank);
+        m_module.log_event(
+            m_phase_prev < phase_handshake_cont   ? &EAPMETHOD_TLS_FAILURE_INIT :
+            m_phase_prev < phase_application_data ? &EAPMETHOD_TLS_FAILURE_HANDSHAKE : &EAPMETHOD_TLS_FAILURE,
+            event_data((unsigned int)eap_type_tls), event_data::blank);
 
 #if EAP_TLS < EAP_TLS_SCHANNEL
         // Clear session resumption data.