684 Commits

Author SHA1 Message Date
47b602e1fa WinStd: Update
Signed-off-by: Simon Rozman <simon@rozman.si>
2022-02-03 15:42:04 +01:00
19c523509b Move Hex from WinStd to stdex
Signed-off-by: Simon Rozman <simon@rozman.si>
2022-02-03 15:42:04 +01:00
a254dd527a Move Base64 from WinStd to stdex
Signed-off-by: Simon Rozman <simon@rozman.si>
2022-02-03 14:16:47 +01:00
6f92e82598 WinStd: Update
Signed-off-by: Simon Rozman <simon@rozman.si>
2022-02-03 13:03:59 +01:00
5e7f55880a Update Copyright and build year
Signed-off-by: Simon Rozman <simon@rozman.si>
2022-01-07 11:21:33 +01:00
0e7a9c7448 Redirect output files to the output folder
Thou linker can locate the output .lib file of referenced projects
wherever .lib is just fine, this helps us to gather all .pdb files in
the output folder.

Signed-off-by: Simon Rozman <simon@rozman.si>
2021-12-01 07:20:50 +01:00
0d905f414e Cleanup project files
Signed-off-by: Simon Rozman <simon@rozman.si>
2021-12-01 06:28:32 +01:00
174baa36c1 Rebuild credentials if EapPeerBeginSession() did not provide them
Signed-off-by: Simon Rozman <simon@rozman.si>
2021-11-23 14:11:57 +01:00
67805dc9d1 Add missing data length check
Signed-off-by: Simon Rozman <simon@rozman.si>
2021-11-23 13:35:48 +01:00
b55ddd7d86 Update Copyright and build year
Signed-off-by: Simon Rozman <simon@rozman.si>
2021-11-22 15:31:23 +01:00
b96ebfbce4 Switch to SPDX license notice
Signed-off-by: Simon Rozman <simon@rozman.si>
2021-11-22 15:20:57 +01:00
12ef3059e9 Backport EAPSup code changes
This introduces some PEAP/EAP-TTLS split code, but helps maintain shared
code base.

Signed-off-by: Simon Rozman <simon@rozman.si>
2021-11-22 15:20:56 +01:00
2862faba73 Fix UTF-8 encoding
Signed-off-by: Simon Rozman <simon@rozman.si>
2021-11-20 08:14:44 +01:00
1f6716b279 Cleanup WINSTD_NOVTABLE/__declspec(novtable)
This was originally intended as a compiler hint.

Signed-off-by: Simon Rozman <simon@rozman.si>
2021-11-19 15:48:06 +01:00
71976a8a0b wxExtend: bump
Signed-off-by: Simon Rozman <simon@rozman.si>
2021-11-19 15:46:04 +01:00
78478a203f Delegate memory leak detection to CRT
_CrtDumpMemoryLeaks() direct call misreports heap allocations owned by
globally initialized objects.

Using _CRTDBG_LEAK_CHECK_DF delays the memory leak check until after
globally initialized objects are destroyed.

Signed-off-by: Simon Rozman <simon@rozman.si>
2020-06-29 15:46:00 +02:00
682dc048e9 Migrate manual DLL registration to DllRegisterServer()
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-06-29 15:45:44 +02:00
51fa08cc71 wxExtend: bump
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-06-29 15:40:15 +02:00
2e9f073e94 Fix Events project and move .rc to res
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-06-29 15:40:15 +02:00
d62089d5bd Fix initial keyboard focus
After rearranging the configuration dialog panels, the inner
authentication (PAP) is no longer the topmost panel/control.

Signed-off-by: Simon Rozman <simon@rozman.si>
2020-05-13 09:07:54 +02:00
a6bdb42ece Deprecate encrypted BLOB checksum
The MD5 checksum was calculated on unencrypted data. This offered a
possibility for a dictionary attack.

Signed-off-by: Simon Rozman <simon@rozman.si>
2020-05-13 08:26:07 +02:00
3f4afdcb9a Add support for Romanian
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-04-20 16:17:27 +02:00
45ee84f9ac Hide GTC response while typing
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-04-20 11:28:49 +02:00
96b104f0a6 Prevent empty GTC responses
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-04-20 11:28:49 +02:00
8b8690c71a Touch-up radio button and checkbox spacing
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-04-17 15:48:41 +02:00
d945ccac73 Prevent empty credentials
Always require identity (username).

Zero passwords are no security. Prevent zero passwords too.

Signed-off-by: Simon Rozman <simon@rozman.si>
2020-04-17 14:56:26 +02:00
a7dc7d2525 Make Wingdings icons non-localizable
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-04-17 07:01:11 +02:00
fdc1e5cb73 Resolve C5205 warning
Reference: https://developercommunity.visualstudio.com/content/problem/893960/compiling-atlsecurityh-raises-several-c5205-warnin.html
Reference: https://developercommunity.visualstudio.com/idea/937938/msvc-version-1650-preview-20-introduces-a-new-c-wa.html
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-04-14 08:51:34 +02:00
90e21bd6e6 Makefile: Optimize building
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-03-03 13:28:13 +01:00
3fc0f89291 wxExtend: Bump
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-02-28 10:39:48 +01:00
96fede14ed Pull translations from Transifex
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-02-28 10:14:30 +01:00
9c50c949b1 wxExtend: Bump
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-02-28 08:22:21 +01:00
61d3ef43ad WinStd: Bump
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-02-28 08:22:03 +01:00
152e3a9176 Unify platform designations
- .sln uses the same as .vcxproj and Makefile
- Output MSI files use the same as %PROCESSOR_ARCHITECTURE%

Signed-off-by: Simon Rozman <simon@rozman.si>
2020-02-08 08:23:08 +01:00
8c2225992e TLS: Revise Schannel flags
- SCH_USE_STRONG_CRYPTO is now declared in the Windows SDK included with
  Visual Studio 2019. No need to enter this flag numerically any more.

- m_sc_ctx.initialize() and m_sc_ctx.process() should use same flags.
  They are actually. Rather than copy&paste them, declare them in a
  single place.

- Add ISC_REQ_USE_SUPPLIED_CREDS flag. Use the client certificate we
  supply or none at all.

- Add ISC_REQ_MANUAL_CRED_VALIDATION flag. We validate the server
  certificate.

Signed-off-by: Simon Rozman <simon@rozman.si>
2020-02-07 13:10:59 +01:00
dedaee0693 UI: Upgrade wxFromBuilder
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-02-07 13:10:59 +01:00
fdb1340b9d EAP-GTC UI: Prevent wxChoicebook from stretching pages
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-02-07 13:10:59 +01:00
f98996c13d UI: Reorder outer and inner configuration panels
This follows the natural workflow.

Signed-off-by: Simon Rozman <simon@rozman.si>
2020-02-07 13:10:58 +01:00
0aab5f2e94 UI touch-up
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-02-07 13:10:58 +01:00
8d42db2f56 TLS: Use protocol version enabled on the system by default
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-02-07 13:10:58 +01:00
4dad574377 Rename StdAfx.h to PCH.h
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-02-07 13:10:58 +01:00
cd0a99c518 wxUICanceller: Move upstream and make reusable
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-02-07 13:10:58 +01:00
3bd2d1fd09 credentials_tls: Update documentation
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-02-07 13:10:57 +01:00
d4c01a5345 config_method_tls: Cleanup
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-02-07 13:10:57 +01:00
6e97a04bfe credentials_tls: Keep thumbprint rather than client certificate
By storing the client certificate the certificate became detached from
its private key stored in user certificate store. This rendered client
certificates useless for client TLS authentication.

Now, the client certificate thumbprint is stored instead. The client
certificate is looked up in the user certificate store as required.

This breaks profile XML and BLOB backward compatibility. Since the
client certificate support was broken, nobody probably used those in
the settings before.

Signed-off-by: Simon Rozman <simon@rozman.si>
2020-02-07 13:10:57 +01:00
75488ba870 credentials: Move user impersonation to peer::get_identity()
To retrieve user credentials, EapHost provides us the interactive user's
token we can use to impersonate.

By doing the impersonation early in peer::get_identity(), we don't need
to pass the token down the lower methods. This is rather a
simplification than a performance optimization.

Signed-off-by: Simon Rozman <simon@rozman.si>
2020-02-07 13:10:57 +01:00
e2eb41e811 credentials_tls: Use WinCrypt to get client certificate name
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-02-07 13:10:57 +01:00
e8b1e157d9 module: Make make_config() pure virtual
It is important to implement this method in derived classes. When we
provided default implementation returning NULL, introducing new methods
might leave this method not implemented without a compiler error.

Signed-off-by: Simon Rozman <simon@rozman.si>
2020-02-07 13:10:57 +01:00
6511d826a0 peer: Move all generic methods upstream from peer_tls_base
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-02-07 13:10:57 +01:00
33e765adcd Cleanup
Signed-off-by: Simon Rozman <simon@rozman.si>
2020-02-07 13:10:56 +01:00