diff options
| author | Reto Buerki <reet@codelabs.ch> | 2012-09-06 18:17:26 +0200 |
|---|---|---|
| committer | Tobias Brunner <tobias@strongswan.org> | 2013-03-19 15:23:47 +0100 |
| commit | 39727696904fafbda04fbc02ccd058b12ec2a99a (patch) | |
| tree | de10feaa09259208be898082b034b81e7eec280b /src | |
| parent | 9df5645623aa19959eaa7648f15caff6387f8fd0 (diff) | |
| download | strongswan-39727696904fafbda04fbc02ccd058b12ec2a99a.tar.bz2 strongswan-39727696904fafbda04fbc02ccd058b12ec2a99a.tar.xz | |
Call ike_isa_auth_psk in listener authorize hook
This exchange initiates the AUTH verification in the TKM.
Diffstat (limited to 'src')
| -rw-r--r-- | src/charon-tkm/src/tkm/tkm_listener.c | 21 |
1 files changed, 18 insertions, 3 deletions
diff --git a/src/charon-tkm/src/tkm/tkm_listener.c b/src/charon-tkm/src/tkm/tkm_listener.c index 536ba78b2..557b276b8 100644 --- a/src/charon-tkm/src/tkm/tkm_listener.c +++ b/src/charon-tkm/src/tkm/tkm_listener.c @@ -18,9 +18,12 @@ #include <encoding/payloads/auth_payload.h> #include <utils/chunk.h> #include <tkm/types.h> +#include <tkm/constants.h> +#include <tkm/client.h> #include "tkm_listener.h" #include "tkm_keymat.h" +#include "tkm_utils.h" typedef struct private_tkm_listener_t private_tkm_listener_t; @@ -56,9 +59,21 @@ METHOD(listener_t, authorize, bool, *success = FALSE; } - DBG1(DBG_IKE, "TKM based authentication successful" - " for ISA context %llu", isa_id); - *success = TRUE; + signature_type signature; + chunk_to_sequence(auth, &signature); + if (ike_isa_auth_psk(isa_id, signature) != TKM_OK) + { + DBG1(DBG_IKE, "TKM based authentication failed" + " for ISA context %llu", isa_id); + *success = FALSE; + } + else + { + DBG1(DBG_IKE, "TKM based authentication successful" + " for ISA context %llu", isa_id); + *success = TRUE; + } + return TRUE; } |