From 5ff8c62707530031b0e05345bd496154738542a6 Mon Sep 17 00:00:00 2001 From: Martin Willi Date: Mon, 23 Aug 2010 14:22:54 +0200 Subject: EAP-TLS clients send an empty packet on failure to properly shut down a TLS session --- src/libcharon/plugins/eap_tls/eap_tls.c | 6 ++++++ 1 file changed, 6 insertions(+) (limited to 'src/libcharon/plugins/eap_tls/eap_tls.c') diff --git a/src/libcharon/plugins/eap_tls/eap_tls.c b/src/libcharon/plugins/eap_tls/eap_tls.c index fa0babe26..77458007e 100644 --- a/src/libcharon/plugins/eap_tls/eap_tls.c +++ b/src/libcharon/plugins/eap_tls/eap_tls.c @@ -382,6 +382,12 @@ METHOD(eap_method_t, process, status_t, { *out = read_buf(this, pkt->identifier); } + else if (status == FAILED && !this->is_server) + { /* client sends an empty TLS message, waits for a EAP-Failure */ + chunk_free(&this->output); + *out = read_buf(this, pkt->identifier); + return NEED_MORE; + } return status; } -- cgit v1.2.3