projects / mech_eap.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 3712968) | patch
OpenSSL: Use internal keying material exporter when possible
authorJouni Malinen <j@w1.fi>
Thu, 16 Aug 2012 16:29:34 +0000 (19:29 +0300)
committerJouni Malinen <j@w1.fi>
Thu, 16 Aug 2012 16:29:34 +0000 (19:29 +0300)
commit68770ccd6ef5274ee2ad541ce01a7a14d0affab4
treeeb7c1e251839e0349e5b846197642ee03a9bb8fbtree | snapshot
parent371296881a75da685b9d19eceb77f93a7b26fef3commit | diff
OpenSSL: Use internal keying material exporter when possible

Use SSL_export_keying_material() if possible, i.e., if OpenSSL is
version 1.0.1 or newer and if client random value is used first. This
allows MSK derivation with TLS-based EAP methods (apart from EAP-FAST)
without exporting the master key from OpenSSL.

Signed-hostap: Jouni Malinen <j@w1.fi>
src/crypto/tls_openssl.c diff | blob | history
Moonshot GSS-API mechanism