]> git.ipfire.org Git - thirdparty/hostap.git/commit - src/crypto/tls_openssl.c
OpenSSL: Simplify EAP-FAST peer workaround
authorJouni Malinen <j@w1.fi>
Tue, 9 Dec 2014 21:55:41 +0000 (23:55 +0200)
committerJouni Malinen <j@w1.fi>
Tue, 9 Dec 2014 21:55:41 +0000 (23:55 +0200)
commit6a31a31da1e5814e48aefa468283cda7b3f0e8fd
tree1ddae01fc6e9266be1b1b0b17717c6cef856f084
parent2fc4749c916aef298fb6173fcc7e5fa611d7f68b
OpenSSL: Simplify EAP-FAST peer workaround

Commit d4913c585ec9b62a667473878a7fd7d8600d3388 ('OpenSSL: Fix EAP-FAST
peer regression') introduced a workaround to use a new SSL_CTX instance
set for TLSv1_method() when using EAP-FAST. While that works, it is
unnecessarily complex since there is not really a need to use a separate
SSL_CTX to be able to do that. Instead, simply use SSL_set_ssl_method()
to update the ssl_method for the SSL instance. In practice, this commit
reverts most of the tls_openssl.c changes from that earlier commit and
adds that single call into tls_connection_set_params() based on EAP-FAST
flag.

Signed-off-by: Jouni Malinen <j@w1.fi>
src/crypto/tls_openssl.c