User should validate the server certificate, not the CA certificate
authorDan Breslau <dbreslau@painless-security.com>
Fri, 30 Sep 2016 20:55:18 +0000 (16:55 -0400)
committerDan Breslau <dbreslau@painless-security.com>
Fri, 30 Sep 2016 20:55:18 +0000 (16:55 -0400)
commit0184c4f9fb6c01465aec4088e2b3466afc92333b
tree5b25a05ed96feff83f067898a28893072c908282
parent344d7f981a4d7d1ef7d8f8d7645aa9c1d153b6cf
User should validate the server certificate, not the CA certificate
libeap/src/crypto/tls.h
libeap/src/crypto/tls_openssl.c
libeap/src/eap_peer/eap_config.h
libeap/src/eap_peer/eap_tls_common.c
mech_eap/init_sec_context.c