projects / mech_eap.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: bf7579b) | patch
Set GSS_C_MUTUAL_FLAG only on successful channel binding.
authorKevin Wasserman <kevin.wasserman@painless-security.com>
Fri, 17 Feb 2012 19:30:56 +0000 (14:30 -0500)
committerSam Hartman <hartmans@debian.org>
Tue, 19 Mar 2013 17:02:29 +0000 (13:02 -0400)
commitbe398286f2d3be6e9744a038fe4b80612b39b10a
treef3287ed9b9dbbe7df1bd850d90c5659473b70745tree | snapshot
parentbf7579b592fff7e6b8f398fb6d125b8ff20b53a9commit | diff
Set GSS_C_MUTUAL_FLAG only on successful channel binding.

Previously, GSS_C_MUTUAL_FLAG was always set in the initiator context;
CTX_FLAG_EAP_CHBIND_ACCEPT was also set on successful channel binding.
Then GSS_C_MUTUAL_FLAG was properly specified in the return flags to
gssEapInitSecContext() depending on whether CTX_FLAG_EAP_CHBIND was set,
but eapGssSmInitGssFlags() was improperly sending GSS_C_MUTUAL_FLAG to
the acceptor even when no channel binding had occured.
mech_eap/init_sec_context.c diff | blob | history
Moonshot GSS-API mechanism