EAP-FAST server: Add I-ID into PAC-Info

This indicates that the peer identity is associated with the
credential and will be required to match with the identity used
during authentication when the PAC is used (RFC 5422, 4.2.4).

diff --git a/src/eap_server/eap_server_fast.c b/src/eap_server/eap_server_fast.c
index 74bef17ea9fed5df966687a153a888959e2a6658..39beb33056fb7c5f57deb841c32b94617cf1883b 100644 (file)
--- a/src/eap_server/eap_server_fast.c
+++ b/src/eap_server/eap_server_fast.c
@@ -791,6 +791,11 @@ static struct wpabuf * eap_fast_build_pac(struct eap_sm *sm,
        
        /* Note: headers may be misaligned after A-ID */
 
+       if (sm->identity) {
+               eap_fast_put_tlv(buf, PAC_TYPE_I_ID, sm->identity,
+                                sm->identity_len);
+       }
+
        /* A-ID-Info (inside PAC-Info) */
        eap_fast_put_tlv(buf, PAC_TYPE_A_ID_INFO, data->srv_id_info,
                         srv_id_info_len);