1f6716b279
Cleanup WINSTD_NOVTABLE/__declspec(novtable)
...
This was originally intended as a compiler hint.
Signed-off-by: Simon Rozman <simon@rozman.si>
2021-11-19 15:48:06 +01:00
71976a8a0b
wxExtend: bump
...
Signed-off-by: Simon Rozman <simon@rozman.si>
2021-11-19 15:46:04 +01:00
78478a203f
Delegate memory leak detection to CRT
...
_CrtDumpMemoryLeaks() direct call misreports heap allocations owned by
globally initialized objects.
Using _CRTDBG_LEAK_CHECK_DF delays the memory leak check until after
globally initialized objects are destroyed.
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-06-29 15:46:00 +02:00
682dc048e9
Migrate manual DLL registration to DllRegisterServer()
...
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-06-29 15:45:44 +02:00
51fa08cc71
wxExtend: bump
...
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-06-29 15:40:15 +02:00
2e9f073e94
Fix Events project and move .rc to res
...
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-06-29 15:40:15 +02:00
d62089d5bd
Fix initial keyboard focus
...
After rearranging the configuration dialog panels, the inner
authentication (PAP) is no longer the topmost panel/control.
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-05-13 09:07:54 +02:00
a6bdb42ece
Deprecate encrypted BLOB checksum
...
The MD5 checksum was calculated on unencrypted data. This offered a
possibility for a dictionary attack.
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-05-13 08:26:07 +02:00
3f4afdcb9a
Add support for Romanian
...
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-04-20 16:17:27 +02:00
45ee84f9ac
Hide GTC response while typing
...
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-04-20 11:28:49 +02:00
96b104f0a6
Prevent empty GTC responses
...
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-04-20 11:28:49 +02:00
8b8690c71a
Touch-up radio button and checkbox spacing
...
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-04-17 15:48:41 +02:00
d945ccac73
Prevent empty credentials
...
Always require identity (username).
Zero passwords are no security. Prevent zero passwords too.
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-04-17 14:56:26 +02:00
a7dc7d2525
Make Wingdings icons non-localizable
...
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-04-17 07:01:11 +02:00
fdc1e5cb73
Resolve C5205 warning
...
Reference: https://developercommunity.visualstudio.com/content/problem/893960/compiling-atlsecurityh-raises-several-c5205-warnin.html
Reference: https://developercommunity.visualstudio.com/idea/937938/msvc-version-1650-preview-20-introduces-a-new-c-wa.html
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-04-14 08:51:34 +02:00
90e21bd6e6
Makefile: Optimize building
...
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-03-03 13:28:13 +01:00
3fc0f89291
wxExtend: Bump
...
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-02-28 10:39:48 +01:00
96fede14ed
Pull translations from Transifex
...
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-02-28 10:14:30 +01:00
9c50c949b1
wxExtend: Bump
...
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-02-28 08:22:21 +01:00
61d3ef43ad
WinStd: Bump
...
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-02-28 08:22:03 +01:00
152e3a9176
Unify platform designations
...
- .sln uses the same as .vcxproj and Makefile
- Output MSI files use the same as %PROCESSOR_ARCHITECTURE%
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-02-08 08:23:08 +01:00
8c2225992e
TLS: Revise Schannel flags
...
- SCH_USE_STRONG_CRYPTO is now declared in the Windows SDK included with
Visual Studio 2019. No need to enter this flag numerically any more.
- m_sc_ctx.initialize() and m_sc_ctx.process() should use same flags.
They are actually. Rather than copy&paste them, declare them in a
single place.
- Add ISC_REQ_USE_SUPPLIED_CREDS flag. Use the client certificate we
supply or none at all.
- Add ISC_REQ_MANUAL_CRED_VALIDATION flag. We validate the server
certificate.
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-02-07 13:10:59 +01:00
dedaee0693
UI: Upgrade wxFromBuilder
...
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-02-07 13:10:59 +01:00
fdb1340b9d
EAP-GTC UI: Prevent wxChoicebook from stretching pages
...
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-02-07 13:10:59 +01:00
f98996c13d
UI: Reorder outer and inner configuration panels
...
This follows the natural workflow.
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-02-07 13:10:58 +01:00
0aab5f2e94
UI touch-up
...
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-02-07 13:10:58 +01:00
8d42db2f56
TLS: Use protocol version enabled on the system by default
...
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-02-07 13:10:58 +01:00
4dad574377
Rename StdAfx.h to PCH.h
...
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-02-07 13:10:58 +01:00
cd0a99c518
wxUICanceller: Move upstream and make reusable
...
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-02-07 13:10:58 +01:00
3bd2d1fd09
credentials_tls: Update documentation
...
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-02-07 13:10:57 +01:00
d4c01a5345
config_method_tls: Cleanup
...
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-02-07 13:10:57 +01:00
6e97a04bfe
credentials_tls: Keep thumbprint rather than client certificate
...
By storing the client certificate the certificate became detached from
its private key stored in user certificate store. This rendered client
certificates useless for client TLS authentication.
Now, the client certificate thumbprint is stored instead. The client
certificate is looked up in the user certificate store as required.
This breaks profile XML and BLOB backward compatibility. Since the
client certificate support was broken, nobody probably used those in
the settings before.
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-02-07 13:10:57 +01:00
75488ba870
credentials: Move user impersonation to peer::get_identity()
...
To retrieve user credentials, EapHost provides us the interactive user's
token we can use to impersonate.
By doing the impersonation early in peer::get_identity(), we don't need
to pass the token down the lower methods. This is rather a
simplification than a performance optimization.
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-02-07 13:10:57 +01:00
e2eb41e811
credentials_tls: Use WinCrypt to get client certificate name
...
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-02-07 13:10:57 +01:00
e8b1e157d9
module: Make make_config() pure virtual
...
It is important to implement this method in derived classes. When we
provided default implementation returning NULL, introducing new methods
might leave this method not implemented without a compiler error.
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-02-07 13:10:57 +01:00
6511d826a0
peer: Move all generic methods upstream from peer_tls_base
...
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-02-07 13:10:57 +01:00
33e765adcd
Cleanup
...
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-02-07 13:10:56 +01:00
5b02352f1a
Resolve the make_...() methods
...
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-02-07 13:10:56 +01:00
5195b79eed
method_ttls: Reintroduce
...
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-02-07 13:10:56 +01:00
d400901c52
Rename peer_tls to peer_tls_base
...
peer_tls is actually not a complete EAP-TLS implementation.
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-02-07 13:10:38 +01:00
570eb83558
peer_tls: Move all applicable methods upstream to make reusable
...
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-02-07 13:10:38 +01:00
db056f5150
Cleanup
...
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-02-07 13:10:38 +01:00
1d558c939e
Rename method_tls_tunnel to method_tls and move upstream
...
CRL checking was also moved upstream as method_tls triggers it.
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-02-07 13:10:37 +01:00
5c0299197b
method_defrag: Move upstream to make reusable
...
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-02-07 13:09:43 +01:00
383a85c18b
method: Merge with method_tunnel
...
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-02-07 13:09:43 +01:00
c40f71462f
ui_context: Merge with ui_context_tls_tunnel
...
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-02-07 13:09:43 +01:00
bef455e5a6
method_defrag: Check minimum send packet size and revise the calculation
...
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-02-07 13:09:43 +01:00
737f51b815
method_tls_tunnel: Cleanup
...
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-02-07 13:09:43 +01:00
7706e54294
method_tls_tunnel: Revise inner response packet generation
...
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-02-07 13:09:42 +01:00
d2a0c034c1
method_tls_tunnel: Declare authentication success according to EAP
...
It is usually the outer EAP-Success/Failure message that confirm the
authentication is gracefully over.
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-02-07 13:09:42 +01:00
