peap: Fail auth. if invalid compound MAC is received

Since the interoperability with the Windows server has been achieved,
witch back to failing authentication if invalid compound MAC is
received.
This commit is contained in:
Tim Kourt 2020-01-31 14:25:17 -08:00 committed by Denis Kenzior
parent bdf328320d
commit 49607880fc
1 changed files with 1 additions and 5 deletions

View File

@ -244,11 +244,7 @@ static int eap_extensions_handle_cryptobinding_tlv(struct eap_state *eap,
cryptobinding_compound_mac_len)) {
l_error("PEAP: Generated compound MAC and server compound MAC "
"don't match.");
/*
* Ignore the Crypto-Binding TLV in the case of unmatched
* compound MACs.
*/
return 0;
return -EIO;
}
/* Build response Crypto-Binding TLV */