added TLS_PURPOSE_EAP_PEAP

diff --git a/src/libtls/tls.c b/src/libtls/tls.c
index 20141f2356156975b4b1b7acc21ee71762eb800d..363722b9a2071ad63eb8376c3591c13d8f2c9c64 100644 (file)
--- a/src/libtls/tls.c
+++ b/src/libtls/tls.c
@@ -433,6 +433,7 @@ tls_t *tls_create(bool is_server, identification_t *server,
        {
                case TLS_PURPOSE_EAP_TLS:
                case TLS_PURPOSE_EAP_TTLS:
+               case TLS_PURPOSE_EAP_PEAP:
                case TLS_PURPOSE_GENERIC:
                        break;
                default:

diff --git a/src/libtls/tls.h b/src/libtls/tls.h
index e2c377ad3f695ae843b1baa78dbc2f094b108c2c..af24cfc319199057d40e2a9d61d022d60fa1c781 100644 (file)
--- a/src/libtls/tls.h
+++ b/src/libtls/tls.h
@@ -96,6 +96,8 @@ enum tls_purpose_t {
        TLS_PURPOSE_EAP_TLS,
        /** outer authentication and protection in EAP-TTLS */
        TLS_PURPOSE_EAP_TTLS,
+       /** outer authentication and protection in EAP-PEAP */
+       TLS_PURPOSE_EAP_PEAP,
        /** non-EAP TLS */
        TLS_PURPOSE_GENERIC,
        /** EAP binding for TNC */

diff --git a/src/libtls/tls_crypto.c b/src/libtls/tls_crypto.c
index b4eaf4d79518ffe82f7661296f6f3f0eaadb1202..b000f9d47c5f956ac6f631189cbba9481646850a 100644 (file)
--- a/src/libtls/tls_crypto.c
+++ b/src/libtls/tls_crypto.c
@@ -1659,6 +1659,7 @@ tls_crypto_t *tls_crypto_create(tls_t *tls)
        switch (tls->get_purpose(tls))
        {
                case TLS_PURPOSE_EAP_TLS:
+               case TLS_PURPOSE_EAP_PEAP:
                        /* MSK PRF ASCII constant label according to EAP-TLS RFC 5216 */
                        this->msk_label = "client EAP encryption";
                        build_cipher_suite_list(this, FALSE);