diff options
| author | Martin Willi <martin@revosec.ch> | 2010-08-31 16:10:55 +0200 |
|---|---|---|
| committer | Martin Willi <martin@revosec.ch> | 2010-08-31 16:17:01 +0200 |
| commit | f9fc5f2045b18b4e51c43848ef0cb19d9cd223ad (patch) | |
| tree | c044bf47b89f3747e115e3908f7695f7f002ff6a /src/libtls/tls_eap.c | |
| parent | 743f94067e6737c2aa40cc598f48d02f51533ed7 (diff) | |
| download | strongswan-f9fc5f2045b18b4e51c43848ef0cb19d9cd223ad.tar.bz2 strongswan-f9fc5f2045b18b4e51c43848ef0cb19d9cd223ad.tar.xz | |
Added strongswan.conf options for EAP-TLS/TTLS fragment size
Diffstat (limited to 'src/libtls/tls_eap.c')
| -rw-r--r-- | src/libtls/tls_eap.c | 12 |
1 files changed, 8 insertions, 4 deletions
diff --git a/src/libtls/tls_eap.c b/src/libtls/tls_eap.c index 027929806..1f90855ee 100644 --- a/src/libtls/tls_eap.c +++ b/src/libtls/tls_eap.c @@ -22,8 +22,6 @@ /** Size limit for a single TLS message */ #define MAX_TLS_MESSAGE_LEN 65536 -/** Size of a EAP-TLS fragment */ -#define EAP_TLS_FRAGMENT_LEN 1014 typedef struct private_tls_eap_t private_tls_eap_t; @@ -56,6 +54,11 @@ struct private_tls_eap_t { * First fragment of a multi-fragment record? */ bool first_fragment; + + /** + * Maximum size of an outgoing EAP-TLS fragment + */ + size_t frag_size; }; /** @@ -139,7 +142,7 @@ static status_t process_pkt(private_tls_eap_t *this, eap_tls_packet_t *pkt) static status_t build_pkt(private_tls_eap_t *this, u_int8_t identifier, chunk_t *out) { - char buf[EAP_TLS_FRAGMENT_LEN]; + char buf[this->frag_size]; eap_tls_packet_t *pkt; size_t len, reclen; status_t status; @@ -293,7 +296,7 @@ METHOD(tls_eap_t, destroy, void, */ tls_eap_t *tls_eap_create(eap_type_t type, bool is_server, identification_t *server, identification_t *peer, - tls_application_t *application) + tls_application_t *application, size_t frag_size) { private_tls_eap_t *this; tls_purpose_t purpose; @@ -320,6 +323,7 @@ tls_eap_t *tls_eap_create(eap_type_t type, bool is_server, .type = type, .is_server = is_server, .first_fragment = TRUE, + .frag_size = frag_size, .tls = tls_create(is_server, server, peer, purpose, application), ); if (!this->tls) |