]> git.ipfire.org Git - thirdparty/hostap.git/commit
OpenSSL: Do not accept SSL Client certificate for server
authorJouni Malinen <jouni@qca.qualcomm.com>
Sat, 14 Dec 2013 03:20:01 +0000 (19:20 -0800)
committerJouni Malinen <j@w1.fi>
Thu, 26 Dec 2013 20:26:05 +0000 (22:26 +0200)
commit51e3eafb68e15e78e98ca955704be8a6c3a7b304
treef6cf8d314a334413b41cf133f0f978d51a04a5c0
parent6bf61fb288823734bf96afa356542c3e821233ac
OpenSSL: Do not accept SSL Client certificate for server

If the extended key usage of the AAA server certificate indicates
that the certificate is for client use, reject the TLS handshake.

Signed-hostap: Jouni Malinen <jouni@qca.qualcomm.com>
src/crypto/tls.h
src/crypto/tls_openssl.c