PEAPv0: Added crypto_binding configuration option (part of phase1)

[libeap.git] / src / eap_peer / eap_peap.c

diff --git a/src/eap_peer/eap_peap.c b/src/eap_peer/eap_peap.c
index 47a6c35..c9e6db5 100644 (file)
--- a/src/eap_peer/eap_peap.c
+++ b/src/eap_peer/eap_peap.c
@@ -101,6 +101,17 @@ static int eap_peap_parse_phase1(struct eap_peap_data *data,
                           "receiving tunneled EAP-Success");
        }
 
+       if (os_strstr(phase1, "crypto_binding=0")) {
+               data->crypto_binding = NO_BINDING;
+               wpa_printf(MSG_DEBUG, "EAP-PEAP: Do not use cryptobinding");
+       } else if (os_strstr(phase1, "crypto_binding=1")) {
+               data->crypto_binding = OPTIONAL_BINDING;
+               wpa_printf(MSG_DEBUG, "EAP-PEAP: Optional cryptobinding");
+       } else if (os_strstr(phase1, "crypto_binding=2")) {
+               data->crypto_binding = REQUIRE_BINDING;
+               wpa_printf(MSG_DEBUG, "EAP-PEAP: Require cryptobinding");
+       }
+
        return 0;
 }