Jouni Malinen 390b92913a TLS testing: Allow hostapd to be used as a TLS testing tool ... The internal TLS server implementation and RADIUS server implementation in hostapd can be configured to allow EAP clients to be tested to perform TLS validation steps correctly. This functionality is not included in the default build; CONFIG_TESTING_OPTIONS=y in hostapd/.config can be used to enable this. When enabled, the RADIUS server will configure special TLS test modes based on the received User-Name attribute value in this format: <user>@test-tls-<id>.<rest-of-realm>. For example, anonymous@test-tls-1.example.com. When this special format is used, TLS test modes are enabled. For other cases, the RADIUS server works normally. The following TLS test cases are enabled in this commit: 1 - break verify_data in the server Finished message 2 - break signed_params hash in ServerKeyExchange 3 - break Signature in ServerKeyExchange Correctly behaving TLS client must abort connection if any of these failures is detected and as such, shall not transmit continue the session. Signed-off-by: Jouni Malinen <j@w1.fi>		2014-03-09 18:47:09 +02:00
..
eap_i.h	TLS testing: Allow hostapd to be used as a TLS testing tool	2014-03-09 18:47:09 +02:00
eap_methods.h	HS 2.0R2: Add WFA server-only EAP-TLS server method	2014-02-26 01:24:25 +02:00
eap_server_aka.c	EAP-AKA server: Fix AUTS processing	2013-09-29 18:39:14 +03:00
eap_server_eke.c	EAP-EKE: Add server implementation	2013-07-07 20:30:10 +03:00
eap_server_fast.c	Remove the GPL notification from files contributed by Jouni Malinen	2012-02-11 19:39:36 +02:00
eap_server_gpsk.c	EAP-GPSK server: Use configured server identity	2013-07-07 20:30:10 +03:00
eap_server_gtc.c	Remove the GPL notification from files contributed by Jouni Malinen	2012-02-11 19:39:36 +02:00
eap_server_identity.c	RADIUS server: Allow EAP methods to log into SQLite DB	2014-03-09 18:21:13 +02:00
eap_server_ikev2.c	EAP-IKEv2 server: Use configured server identity	2013-07-07 20:30:10 +03:00
eap_server_md5.c	EAP-MD5: Verify that CHAP operation succeeds	2012-08-16 18:49:02 +03:00
eap_server_methods.c	Remove the GPL notification from files contributed by Jouni Malinen	2012-02-11 19:39:36 +02:00
eap_server_mschapv2.c	RADIUS server: Allow EAP methods to log into SQLite DB	2014-03-09 18:21:13 +02:00
eap_server_pax.c	Remove the GPL notification from files contributed by Jouni Malinen	2012-02-11 19:39:36 +02:00
eap_server_peap.c	Remove PEAPv2 support	2014-01-07 10:45:11 +02:00
eap_server_psk.c	EAP-PSK: Use configured server identity	2013-07-07 20:30:10 +03:00
eap_server_pwd.c	EAP-pwd: Replace direct OpenSSL HMAC use with wrapper	2012-07-02 22:10:03 +03:00
eap_server_sake.c	EAP-SAKE: Use configured server identity	2013-07-07 20:30:10 +03:00
eap_server_sim.c	EAP-SIM/AKA server: Fix memory leak in error path	2012-11-11 13:15:49 +02:00
eap_server_tls_common.c	TLS testing: Allow hostapd to be used as a TLS testing tool	2014-03-09 18:47:09 +02:00
eap_server_tls.c	HS 2.0R2: Add WFA server-only EAP-TLS server method	2014-02-26 01:24:25 +02:00
eap_server_tnc.c	Remove unnecessary base64.h inclusion	2012-08-19 18:41:45 +03:00
eap_server_ttls.c	RADIUS server: Allow EAP methods to log into SQLite DB	2014-03-09 18:21:13 +02:00
eap_server_vendor_test.c	Use proper private enterprise number for EAP VENDOR-TEST	2012-08-22 21:37:19 +03:00
eap_server_wsc.c	Remove the GPL notification from files contributed by Jouni Malinen	2012-02-11 19:39:36 +02:00
eap_server.c	TLS testing: Allow hostapd to be used as a TLS testing tool	2014-03-09 18:47:09 +02:00
eap_sim_db.c	EAP-SIM DB: Remove client socket file on connect() error	2014-02-15 21:39:31 +02:00
eap_sim_db.h	EAP-SIM DB: Use pointer to struct eap_sim_db_data instead of void*	2012-09-01 21:48:48 +03:00
eap_tls_common.h	HS 2.0R2: Add WFA server-only EAP-TLS server method	2014-02-26 01:24:25 +02:00
eap.h	TLS testing: Allow hostapd to be used as a TLS testing tool	2014-03-09 18:47:09 +02:00
ikev2.c	EAP-IKEV2 server: Fix invalid memory freeing operation	2013-02-09 01:20:36 +02:00
ikev2.h	Remove the GPL notification from files contributed by Jouni Malinen	2012-02-11 19:39:36 +02:00
Makefile	Add CONFIG_CODE_COVERAGE=y option for gcov	2013-11-24 19:16:12 +02:00
tncs.c	Add dup_binstr() to help common binary string tasks	2013-04-27 23:44:59 +03:00
tncs.h	Remove the GPL notification from files contributed by Jouni Malinen	2012-02-11 19:39:36 +02:00