Jouni Malinen 7f7bfba919 Add an option allow canned EAP-Success for wired IEEE 802.1X ...

For wired IEEE 802.1X authentication, phase1="allow_canned_success=1"
can now be used to configure a mode that allows EAP-Success (and
EAP-Failure) without going through authentication step. Some switches
use such sequence when forcing the port to be authorized/unauthorized or
as a fallback option if the authentication server is unreachable. By
default, wpa_supplicant discards such frames to protect against
potential attacks by rogue devices, but this option can be used to
disable that protection for cases where the server/authenticator does
not need to be authenticated.

When enabled, this mode allows EAP-Success/EAP-Failure as an immediate
response to EAPOL-Start (or even without EAPOL-Start) and EAP-Success is
also allowed immediately after EAP-Identity exchange (fallback case for
authenticator not being able to connect to authentication server).

Signed-off-by: Jouni Malinen <j@w1.fi>

2015-02-01 19:22:54 +02:00

..

eap_aka.c

EAP peer: Clear keying material on deinit

2014-07-02 12:38:48 +03:00

eap_config.h

Add an option allow canned EAP-Success for wired IEEE 802.1X

2015-02-01 19:22:54 +02:00

eap_eke.c

EAP peer: Clear keying material on deinit

2014-07-02 12:38:48 +03:00

eap_fast_pac.c

Check os_snprintf() result more consistently - automatic 1

2014-12-08 11:42:07 +02:00

eap_fast_pac.h

Remove the GPL notification from files contributed by Jouni Malinen

2012-02-11 19:39:36 +02:00

eap_fast.c

Check os_snprintf() result more consistently - automatic 1

2014-12-08 11:42:07 +02:00

eap_gpsk.c

EAP peer: Clear keying material on deinit

2014-07-02 12:38:48 +03:00

eap_gtc.c

Remove the GPL notification from files contributed by Jouni Malinen

2012-02-11 19:39:36 +02:00

eap_i.h

ERP: Add support for ERP on EAP peer

2014-12-04 12:16:29 +02:00

eap_ikev2.c

EAP-IKEv2 peer: Fix fragmentation reassembly

2014-12-21 00:48:24 +02:00

eap_leap.c

EAP peer: Clear keying material on deinit

2014-07-02 12:38:48 +03:00

eap_md5.c

EAP-MD5: Verify that CHAP operation succeeds

2012-08-16 18:49:02 +03:00

eap_methods.c

Check os_snprintf() result more consistently - automatic 1

2014-12-08 11:42:07 +02:00

eap_methods.h

HS 2.0R2: Add WFA server-only EAP-TLS peer method

2014-02-26 01:24:23 +02:00

eap_mschapv2.c

EAP-MSCHAPv2 peer: Add option to disable password retry query

2015-02-01 17:45:19 +02:00

eap_otp.c

Remove the GPL notification from files contributed by Jouni Malinen

2012-02-11 19:39:36 +02:00

eap_pax.c

EAP-PAX: Derive EAP Session-Id

2014-12-01 01:46:07 +02:00

eap_peap.c

Check os_snprintf() result more consistently - automatic 1

2014-12-08 11:42:07 +02:00

eap_proxy_dummy.c

eap_proxy: Add context data pointer to the get_imsi call

2013-10-23 20:51:46 +03:00

eap_proxy.h

eap_proxy: Add context data pointer to the get_imsi call

2013-10-23 20:51:46 +03:00

eap_psk.c

EAP peer: Clear keying material on deinit

2014-07-02 12:38:48 +03:00

eap_pwd.c

EAP-pwd: Remove unnecessary OpenSSL EVP_sha256() registration

2014-11-17 01:20:10 +02:00

eap_sake.c

EAP peer: Clear keying material on deinit

2014-07-02 12:38:48 +03:00

eap_sim.c

EAP peer: Clear keying material on deinit

2014-07-02 12:38:48 +03:00

eap_tls_common.c

Add domain_match network profile parameter

2015-01-14 15:45:18 +02:00

eap_tls_common.h

HS 2.0R2: Add WFA server-only EAP-TLS peer method

2014-02-26 01:24:23 +02:00

eap_tls.c

EAP peer: Clear keying material on deinit

2014-07-02 12:38:48 +03:00

eap_tnc.c

EAP-TNC: Limit maximum message buffer to 75000 bytes (CID 62873)

2014-06-13 16:03:45 +03:00

eap_ttls.c

EAP: Fix possible memory leak in eap_ttls_process_decrypted()

2015-01-20 02:13:15 +02:00

eap_vendor_test.c

tests: Pending EAP peer processing with VENDOR-TEST

2015-01-28 13:09:31 +02:00

eap_wsc.c

WPS: Add explicit message length limit of 50000 bytes

2014-11-23 21:03:40 +02:00

eap.c

Add an option allow canned EAP-Success for wired IEEE 802.1X

2015-02-01 19:22:54 +02:00

eap.h

Add peer certificate alt subject name information to EAP events

2015-01-14 15:45:18 +02:00

ikev2.c

EAP-IKEv2: Fix a typo in a debug message

2014-12-21 13:19:14 +02:00

ikev2.h

Remove the GPL notification from files contributed by Jouni Malinen

2012-02-11 19:39:36 +02:00

Makefile

Add CONFIG_CODE_COVERAGE=y option for gcov

2013-11-24 19:16:12 +02:00

mschapv2.c

EAP-MSCHAPv2: Use os_memcmp_const() for hash/password comparisons

2014-07-02 12:38:48 +03:00

mschapv2.h

Remove the GPL notification from files contributed by Jouni Malinen

2012-02-11 19:39:36 +02:00

tncc.c

TNC: Fix minor memory leak (CID 62848)

2014-06-12 19:44:58 +03:00

tncc.h

Remove the GPL notification from files contributed by Jouni Malinen

2012-02-11 19:39:36 +02:00