From: Sam Hartman <hartmans@debian.org>
Date: Mon, 28 Oct 2013 17:21:25 +0000 (-0400)
Subject: setting flags in verify MIC too late
X-Git-Tag: 0.9.2~30
X-Git-Url: http://www.project-moonshot.org/gitweb/?a=commitdiff_plain;ds=sidebyside;h=2f0adc94a5965c697da8ba859bee1cd7095e4f09;p=mech_eap.git

setting flags in verify MIC too late

We've been force setting mutual authentication in the verify mic SM callback.  We need to set mutual authentication prior to sending the flags token.
---

diff --git a/mech_eap/init_sec_context.c b/mech_eap/init_sec_context.c
index 60d15ba..fb2f6c8 100644
--- a/mech_eap/init_sec_context.c
+++ b/mech_eap/init_sec_context.c
@@ -1101,11 +1101,6 @@ eapGssSmInitAcceptorMIC(OM_uint32 *minor,
     if (GSS_ERROR(major))
         return major;
 
-    /*
-     * As a temporary measure, force mutual authentication until channel binding is
-     * more widely deployed.
-     */
-    ctx->gssFlags |= GSS_C_MUTUAL_FLAG;
     GSSEAP_SM_TRANSITION(ctx, GSSEAP_STATE_ESTABLISHED);
 
     *minor = 0;