src/eap_server/eap_server_tls.c

17 static void eap_tls_reset(struct eap_sm *sm, void *priv);
57 static void eap_tls_valid_session(struct eap_sm *sm, struct eap_tls_data *data)
61 	if (!sm->tls_session_lifetime)
72 static void * eap_tls_init(struct eap_sm *sm)
81 	if (eap_server_tls_ssl_init(sm, &data->ssl, 1, EAP_TYPE_TLS)) {
83 		eap_tls_reset(sm, data);
89 	data->phase2 = sm->init_phase2;
96 static void * eap_unauth_tls_init(struct eap_sm *sm)
105 	if (eap_server_tls_ssl_init(sm, &data->ssl, 0, EAP_UNAUTH_TLS_TYPE)) {
107 		eap_tls_reset(sm, data);
118 static void * eap_wfa_unauth_tls_init(struct eap_sm *sm)
127 	if (eap_server_tls_ssl_init(sm, &data->ssl, 0,
130 		eap_tls_reset(sm, data);
140 static void eap_tls_reset(struct eap_sm *sm, void *priv)
145 	eap_server_tls_ssl_deinit(sm, &data->ssl);
150 static struct wpabuf * eap_tls_build_start(struct eap_sm *sm,
171 static struct wpabuf * eap_tls_buildReq(struct eap_sm *sm, void *priv, u8 id)
188 		return eap_tls_build_start(sm, data, id);
190 		if (tls_connection_established(sm->ssl_ctx, data->ssl.conn))
207 		eap_tls_valid_session(sm, data);
208 		if (sm->serial_num) {
213 					       sm->serial_num);
214 			if (eap_user_get(sm, (const u8 *) user, user_len,
228 static Boolean eap_tls_check(struct eap_sm *sm, void *priv,
255 static void eap_tls_process_msg(struct eap_sm *sm, void *priv,
264 	if (eap_server_tls_phase1(sm, &data->ssl) < 0) {
270 	    tls_connection_established(sm->ssl_ctx, data->ssl.conn)) {
286 		encr = eap_server_tls_encrypt(sm, &data->ssl, plain);
304 static void eap_tls_process(struct eap_sm *sm, void *priv,
311 	if (eap_server_tls_process(sm, &data->ssl, respData, data,
318 	if (!tls_connection_established(sm->ssl_ctx, data->ssl.conn) ||
319 	    !tls_connection_resumed(sm->ssl_ctx, data->ssl.conn))
348 static Boolean eap_tls_isDone(struct eap_sm *sm, void *priv)
355 static u8 * eap_tls_getKey(struct eap_sm *sm, void *priv, size_t *len)
374 	eapKeyData = eap_server_tls_derive_key(sm, &data->ssl, label,
390 static u8 * eap_tls_get_emsk(struct eap_sm *sm, void *priv, size_t *len)
409 	eapKeyData = eap_server_tls_derive_key(sm, &data->ssl, label,
433 static Boolean eap_tls_isSuccess(struct eap_sm *sm, void *priv)
440 static u8 * eap_tls_get_session_id(struct eap_sm *sm, void *priv, size_t *len)
447 	return eap_server_tls_derive_session_id(sm, &data->ssl, EAP_TYPE_TLS,