diff options
| author | Martin Willi <martin@revosec.ch> | 2013-02-28 12:03:40 +0100 |
|---|---|---|
| committer | Martin Willi <martin@revosec.ch> | 2013-02-28 16:46:08 +0100 |
| commit | 61f1693df1d260055ab696e1894251b8f5cc3197 (patch) | |
| tree | e5fc1fd8e2a27ecc8d4dd9340cacb9d439ef84f3 /src/libpttls/pt_tls_dispatcher.c | |
| parent | 807f2facd0283ef19eb33deb59d1128e691647f3 (diff) | |
| download | strongswan-61f1693df1d260055ab696e1894251b8f5cc3197.tar.bz2 strongswan-61f1693df1d260055ab696e1894251b8f5cc3197.tar.xz | |
Support different authentication schemes for PT-TLS
Diffstat (limited to 'src/libpttls/pt_tls_dispatcher.c')
| -rw-r--r-- | src/libpttls/pt_tls_dispatcher.c | 10 |
1 files changed, 8 insertions, 2 deletions
diff --git a/src/libpttls/pt_tls_dispatcher.c b/src/libpttls/pt_tls_dispatcher.c index 813580cd0..469951616 100644 --- a/src/libpttls/pt_tls_dispatcher.c +++ b/src/libpttls/pt_tls_dispatcher.c @@ -42,6 +42,11 @@ struct private_pt_tls_dispatcher_t { int fd; /** + * Client authentication requirements + */ + pt_tls_auth_t auth; + + /** * Server identity */ identification_t *server; @@ -141,7 +146,7 @@ METHOD(pt_tls_dispatcher_t, dispatch, void, close(fd); continue; } - connection = pt_tls_server_create(this->server, fd, tnccs); + connection = pt_tls_server_create(this->server, fd, this->auth, tnccs); if (!connection) { close(fd); @@ -171,7 +176,7 @@ METHOD(pt_tls_dispatcher_t, destroy, void, * See header */ pt_tls_dispatcher_t *pt_tls_dispatcher_create(host_t *address, - identification_t *id) + identification_t *id, pt_tls_auth_t auth) { private_pt_tls_dispatcher_t *this; @@ -184,6 +189,7 @@ pt_tls_dispatcher_t *pt_tls_dispatcher_create(host_t *address, /* we currently don't authenticate the peer, use %any identity */ .peer = identification_create_from_encoding(ID_ANY, chunk_empty), .fd = -1, + .auth = auth, ); if (!open_socket(this, address)) |