Amebis/GEANTLink
1
1
Fork 0
Code Issues 3 Pull Requests Actions Packages Projects Releases 50 Wiki Activity

method_eap: Support EAP identity exchange

Browse Source 
Although, EapHost takes care for EAP identity exchange for us, it does
so for the outer-most method only. When using EAP inside a TLS tunnel,
we are responsible for EAP identity exchange ourselves.

Signed-off-by: Simon Rozman <simon@rozman.si>
This commit is contained in:
Simon Rozman
2020-01-20 13:18:21 +01:00
parent 1c295360fc
commit e5e5f1c63e
3 changed files with 59 additions and 25 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
lib/EAPBase/include/Method.h
View File

@@ -280,9 +280,10 @@ namespace eap
///
/// \param[in] mod Module to use for global services
/// \param[in] eap_method EAP method type
/// \param[in] cred User credentials
/// \param[in] inner Inner method
///
method_eap(_In_ module &mod, _In_ winstd::eap_type_t eap_method, _In_ method *inner);
method_eap(_In_ module &mod, _In_ winstd::eap_type_t eap_method, _In_ credentials &cred, _In_ method *inner);
/// \name Session management
/// @{
@@ -310,8 +311,18 @@ namespace eap
protected:
const winstd::eap_type_t m_eap_method; ///< EAP method type
credentials &m_cred; ///< User credentials
unsigned char m_id; ///< Request packet ID
bool m_send_nak; ///< Are we sending Legacy Nak response?
///
/// Communication phase
///
enum class phase_t {
unknown = -1, ///< Unknown phase
identity = 0, ///< Send identity
inner, ///< Send inner method response
nak, ///< Send Legacy Nak response
} m_phase; ///< What phase is our communication at?
};
/// @}