Parcourir la source

EAP-FAST server: Add I-ID into PAC-Info

This indicates that the peer identity is associated with the
credential and will be required to match with the identity used
during authentication when the PAC is used (RFC 5422, 4.2.4).
Jouni Malinen il y a 14 ans
Parent
commit
8cbd92ee29
1 fichiers modifiés avec 5 ajouts et 0 suppressions
  1. 5 0
      src/eap_server/eap_server_fast.c

+ 5 - 0
src/eap_server/eap_server_fast.c

@@ -791,6 +791,11 @@ static struct wpabuf * eap_fast_build_pac(struct eap_sm *sm,
 	
 	/* Note: headers may be misaligned after A-ID */
 
+	if (sm->identity) {
+		eap_fast_put_tlv(buf, PAC_TYPE_I_ID, sm->identity,
+				 sm->identity_len);
+	}
+
 	/* A-ID-Info (inside PAC-Info) */
 	eap_fast_put_tlv(buf, PAC_TYPE_A_ID_INFO, data->srv_id_info,
 			 srv_id_info_len);