Amazing-Mirror/fragattacks
1
0
Fork 0
mirror of https://github.com/vanhoefm/fragattacks.git synced 2024-11-29 10:48:22 -05:00
Code Issues Projects Releases Wiki Activity
27ce1d64c4
fragattacks/src/eap_peer
History
Jouni Malinen 080585c01a Add support for OCSP stapling to validate server certificate 
When using OpenSSL with TLS-based EAP methods, wpa_supplicant can now be
configured to use OCSP stapling (TLS certificate status request) with
ocsp=1 network block parameter. ocsp=2 can be used to require valid OCSP
response before connection is allowed to continue.

hostapd as EAP server can be configured to return cached OCSP response
using the new ocsp_stapling_response parameter and an external mechanism
for updating the response data (e.g., "openssl ocsp ..." command).

This allows wpa_supplicant to verify that the server certificate has not
been revoked as part of the EAP-TLS/PEAP/TTLS/FAST handshake before
actual data connection has been established (i.e., when a CRL could not
be fetched even if a distribution point were specified).

Signed-hostap: Jouni Malinen <j@w1.fi>
2013-06-30 01:01:15 +03:00
..
eap_aka.c EAP peer: Add Session-Id derivation to more EAP methods 2013-02-09 01:20:45 +02:00
eap_config.h Add support for OCSP stapling to validate server certificate 2013-06-30 01:01:15 +03:00
eap_fast_pac.c EAP-FAST: Allow empty PAC file to be used 2013-01-12 17:33:22 +02:00
eap_fast_pac.h Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
eap_fast.c EAP peer: Add Session-Id derivation 2013-02-09 01:20:38 +02:00
eap_gpsk.c EAP peer: Add Session-Id derivation 2013-02-09 01:20:38 +02:00
eap_gtc.c Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
eap_i.h EAP peer: Add Session-Id derivation 2013-02-09 01:20:38 +02:00
eap_ikev2.c EAP peer: Add Session-Id derivation 2013-02-09 01:20:38 +02:00
eap_leap.c Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
eap_md5.c EAP-MD5: Verify that CHAP operation succeeds 2012-08-16 18:49:02 +03:00
eap_methods.c Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
eap_methods.h Add UNAUTH-TLS vendor specific EAP type 2012-08-22 22:34:11 +03:00
eap_mschapv2.c Add dup_binstr() to help common binary string tasks 2013-04-27 23:44:59 +03:00
eap_otp.c Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
eap_pax.c Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
eap_peap.c EAP peer: Add Session-Id derivation 2013-02-09 01:20:38 +02:00
eap_proxy_dummy.c eap_proxy: Add a dummy implementation for compilation testing 2013-02-08 11:54:05 +02:00
eap_proxy.h eap_proxy: Add mechanism for allowing EAP methods to be offloaded 2013-02-08 11:54:01 +02:00
eap_psk.c EAP peer: Add Session-Id derivation to more EAP methods 2013-02-09 01:20:45 +02:00
eap_pwd.c EAP-pwd: Replace direct OpenSSL HMAC use with wrapper 2012-07-02 22:10:03 +03:00
eap_sake.c EAP peer: Add Session-Id derivation to more EAP methods 2013-02-09 01:20:45 +02:00
eap_sim.c EAP peer: Add Session-Id derivation to more EAP methods 2013-02-09 01:20:45 +02:00
eap_tls_common.c Add support for OCSP stapling to validate server certificate 2013-06-30 01:01:15 +03:00
eap_tls_common.h EAP peer: Add Session-Id derivation 2013-02-09 01:20:38 +02:00
eap_tls.c EAP peer: Add Session-Id derivation 2013-02-09 01:20:38 +02:00
eap_tnc.c Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
eap_ttls.c EAP peer: Add Session-Id derivation 2013-02-09 01:20:38 +02:00
eap_vendor_test.c Use proper private enterprise number for EAP VENDOR-TEST 2012-08-22 21:37:19 +03:00
eap_wsc.c WPS: Add more helpful debug for invalid WPS_REG command parsing 2013-03-31 12:34:35 +03:00
eap.c EAP peer: Add check before calling getSessionId method 2013-04-26 12:30:01 +03:00
eap.h EAP peer: Add Session-Id derivation 2013-02-09 01:20:38 +02:00
ikev2.c Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
ikev2.h Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
Makefile Remove unnecessary SUBDIRS loops from src/*/Makefile 2010-04-17 17:10:31 +03:00
mschapv2.c MSCHAPv2: Check operation success for NT response generation 2012-08-16 18:42:27 +03:00
mschapv2.h Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
tncc.c Add dup_binstr() to help common binary string tasks 2013-04-27 23:44:59 +03:00
tncc.h Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00