projects / mech_eap.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 411f567) | patch
Do not export TLS keys in FIPS mode
authorJouni Malinen <j@w1.fi>
Thu, 16 Aug 2012 16:38:15 +0000 (19:38 +0300)
committerJouni Malinen <j@w1.fi>
Thu, 16 Aug 2012 16:38:15 +0000 (19:38 +0300)
commitc9e08af24fd7dda3f21674cdc744579b8c38fa28
treefa7dc0e7c4e569f02780bee58a837bf69e3f8988tree | snapshot
parent411f56705019ac5b13b4daf62f423fceb3c703e2commit | diff
Do not export TLS keys in FIPS mode

Only allow the TLS library keying material exporter functionality to be
used for MSK derivation with TLS-based EAP methods to avoid exporting
internal TLS keys from the library.

Signed-hostap: Jouni Malinen <j@w1.fi>
src/crypto/tls_openssl.c diff | blob | history
src/eap_peer/eap_tls_common.c diff | blob | history
wpa_supplicant/Makefile diff | blob | history
Moonshot GSS-API mechanism