From: Tobias Brunner <tobias@strongswan.org>
Date: Thu, 18 Feb 2021 09:46:56 +0000 (+0100)
Subject: tls-eap: Only servers conclude EAP method after processing packets
X-Git-Tag: 5.9.2rc1^2~7
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=024120f8ea3e3faab4d87a2f083c3da16e15b91a;p=thirdparty%2Fstrongswan.git

tls-eap: Only servers conclude EAP method after processing packets

As client with older TLS versions, we have to ack the receipt of the server's
Finished message instead.

Fixes: 083f38259c79 ("tls-eap: Conclude EAP method also after processing packets")
---

diff --git a/src/libtls/tls_eap.c b/src/libtls/tls_eap.c
index 196cf92fee..a784c4b471 100644
--- a/src/libtls/tls_eap.c
+++ b/src/libtls/tls_eap.c
@@ -394,7 +394,7 @@ METHOD(tls_eap_t, process, status_t,
 	switch (status)
 	{
 		case INVALID_STATE:
-			if (this->tls->is_complete(this->tls))
+			if (this->is_server && this->tls->is_complete(this->tls))
 			{
 				return SUCCESS;
 			}