tls-psk-identity fix
Currently, the tls-psk-identity attribute is determined while the tls connection is established, but then discarded prior to packet decode. The attached patch makes the tls-psk-identity attribute available during request processing. This is important for implementing constraint enforcement policy in Moonshot. Kevin Wasserman Painless Security, LLC --- This email is free from viruses and malware because avast! Antivirus protection is active. http://www.avast.com
Kevin Wasserman wrote:
Currently, the tls-psk-identity attribute is determined while the tls connection is established, but then discarded prior to packet decode. The attached patch makes the tls-psk-identity attribute available during request processing. This is important for implementing constraint enforcement policy in Moonshot.
I've pushed a related fix. We're trying to lower the number of #ifdef's in the code. Alan DeKok.
"Alan" == Alan DeKok <aland@deployingradius.com> writes:
Alan> Kevin Wasserman wrote: >> Currently, the tls-psk-identity attribute is determined while the >> tls connection is established, but then discarded prior to packet >> decode. The attached patch makes the tls-psk-identity attribute >> available during request processing. This is important for >> implementing constraint enforcement policy in Moonshot. Alan> I've pushed a related fix. We're trying to lower the number Alan> of #ifdef's in the code. I don't see this on v3.0.x.
Maybe I didn't push it back. Give me a bit and I'll do it. On Jul 24, 2014, at 10:10 AM, Sam Hartman <hartmans@mit.edu> wrote:
"Alan" == Alan DeKok <aland@deployingradius.com> writes:
Alan> Kevin Wasserman wrote:
Currently, the tls-psk-identity attribute is determined while the tls connection is established, but then discarded prior to packet decode. The attached patch makes the tls-psk-identity attribute available during request processing. This is important for implementing constraint enforcement policy in Moonshot.
Alan> I've pushed a related fix. We're trying to lower the number Alan> of #ifdef's in the code.
I don't see this on v3.0.x. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html
participants (3)
-
Alan DeKok -
Kevin Wasserman -
Sam Hartman