Use tls_connection_prf() for all EAP TLS-based key derivation
authorJouni Malinen <jouni@qca.qualcomm.com>
Tue, 31 Mar 2015 12:47:32 +0000 (15:47 +0300)
committerJouni Malinen <j@w1.fi>
Tue, 31 Mar 2015 12:47:32 +0000 (15:47 +0300)
commitfa0e715100b0e6fd956b6de67c3cdf908437436a
tree6b123651543179add8277a928d1b261aa14a77f6
parentdf8191d0b8fbf340da9a5443870858cb38394170
Use tls_connection_prf() for all EAP TLS-based key derivation

tls_openssl.c is the only remaining TLS/crypto wrapper that needs the
internal PRF implementation for EAP-FAST (since
SSL_export_keying_material() is not available in older versions and does
not support server-random-before-client case). As such, it is cleaner to
assume that TLS libraries support tls_connection_prf() and move the
additional support code for the otherwise unsupported cases into
tls_openssl.c.

Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
src/crypto/tls_openssl.c
src/eap_common/eap_fast_common.c
src/eap_peer/eap_tls_common.c
src/eap_server/eap_server_tls_common.c