mirror of
https://github.com/vanhoefm/fragattacks.git
synced 2024-11-25 08:48:31 -05:00
EAP-TLS peer: Support fragmentation of last message
With TLS v1.3, the Finished message from the client can require fragmentation. Postpone key derivation and marking of the EAP session fully completed until all the fragments of that last message are sent to avoid losing all the subsequent fragments. Signed-off-by: Jouni Malinen <j@w1.fi>
This commit is contained in:
parent
a80423b521
commit
6dd98483eb
@ -175,6 +175,11 @@ static void eap_tls_success(struct eap_sm *sm, struct eap_tls_data *data,
|
||||
{
|
||||
wpa_printf(MSG_DEBUG, "EAP-TLS: Done");
|
||||
|
||||
if (data->ssl.tls_out) {
|
||||
wpa_printf(MSG_DEBUG, "EAP-TLS: Fragment(s) remaining");
|
||||
return;
|
||||
}
|
||||
|
||||
ret->methodState = METHOD_DONE;
|
||||
ret->decision = DECISION_UNCOND_SUCC;
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user