Kernel/iwd
3
0
Fork 0
mirror of https://git.kernel.org/pub/scm/network/wireless/iwd.git synced 2024-12-22 13:02:44 +01:00
Code Releases Activity

eap-peap: configure Protected EAP

Browse Source
This commit is contained in:
Tim Kourt 2018-01-23 15:29:13 -08:00 committed by Denis Kenzior
parent 20e74e8679
commit ba8857d2f4
1 changed files with 84 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

84
src/eap-peap.c
View File

@ -31,18 +31,102 @@
#include "eap.h"
enum peap_version {
PEAP_VERSION_0 = 0x00,
PEAP_VERSION_1 = 0x01,
__PEAP_VERSION_MAX_SUPPORTED = PEAP_VERSION_1,
PEAP_VERSION_MASK = 0x07,
PEAP_VERSION_NOT_NEGOTIATED = 0x08,
};
struct eap_peap_state {
enum peap_version version;
char *ca_cert;
char *client_cert;
char *client_key;
char *passphrase;
};
static void eap_peap_free(struct eap_state *eap)
{
struct eap_peap_state *peap = eap_get_data(eap);
eap_set_data(eap, NULL);
l_free(peap->ca_cert);
l_free(peap->client_cert);
l_free(peap->client_key);
l_free(peap->passphrase);
l_free(peap);
}
static void eap_peap_handle_request(struct eap_state *eap,
const uint8_t *pkt, size_t len)
{
eap_method_error(eap);
}
static bool eap_peap_load_settings(struct eap_state *eap,
struct l_settings *settings,
const char *prefix)
{
struct eap_peap_state *peap;
char entry[64];
peap = l_new(struct eap_peap_state, 1);
peap->version = PEAP_VERSION_NOT_NEGOTIATED;
snprintf(entry, sizeof(entry), "%sPEAP-CACert", prefix);
peap->ca_cert = l_strdup(l_settings_get_value(settings, "Security",
entry));
snprintf(entry, sizeof(entry), "%sPEAP-ClientCert", prefix);
peap->client_cert = l_strdup(l_settings_get_value(settings, "Security",
entry));
snprintf(entry, sizeof(entry), "%sPEAP-ClientKey", prefix);
peap->client_key = l_strdup(l_settings_get_value(settings, "Security",
entry));
snprintf(entry, sizeof(entry), "%sPEAP-ClientKeyPassphrase", prefix);
peap->passphrase = l_strdup(l_settings_get_value(settings, "Security",
entry));
if (!peap->client_cert && peap->client_key) {
l_error("Client key present but no client certificate");
goto error;
}
if (!peap->client_key && peap->passphrase) {
l_error("Passphrase present but no client private key");
goto error;
}
eap_set_data(eap, peap);
return true;
error:
l_free(peap->ca_cert);
l_free(peap->client_cert);
l_free(peap->client_key);
l_free(peap->passphrase);
l_free(peap);
return false;
}
static struct eap_method eap_peap = {
.request_type = EAP_TYPE_PEAP,
.name = "PEAP",
.exports_msk = true,
.handle_request = eap_peap_handle_request,
.load_settings = eap_peap_load_settings,
.free = eap_peap_free,
};
static int eap_peap_init(void)