]> git.ipfire.org Git - thirdparty/hostap.git/commit
Add peer certificate alt subject name information to EAP events
authorJouni Malinen <j@w1.fi>
Wed, 14 Jan 2015 11:29:40 +0000 (13:29 +0200)
committerJouni Malinen <j@w1.fi>
Wed, 14 Jan 2015 13:45:18 +0000 (15:45 +0200)
commitd07d3fbda2466d1778ecdf36e2986c5d9b3c1a53
tree535c7b00dc08025ec32d559b2472a587910c2178
parent98a4cd447e9f1322f9f1e93a4deb34a51b10ca4d
Add peer certificate alt subject name information to EAP events

A new "CTRL-EVENT-EAP-PEER-ALT depth=<i> <alt name>" event is now used
to provide information about server certificate chain alternative
subject names for upper layers, e.g., to make it easier to configure
constraints on the server certificate. For example:
CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:server.example.com

Currently, this includes DNS, EMAIL, and URI components from the
certificates. Similar information is priovided to D-Bus Certification
signal in the new altsubject argument which is a string array of these
items.

Signed-off-by: Jouni Malinen <j@w1.fi>
13 files changed:
doc/dbus.doxygen
src/common/wpa_ctrl.h
src/crypto/tls.h
src/crypto/tls_openssl.c
src/eap_peer/eap.c
src/eap_peer/eap.h
src/eapol_supp/eapol_supp_sm.c
src/eapol_supp/eapol_supp_sm.h
wpa_supplicant/dbus/dbus_new.c
wpa_supplicant/dbus/dbus_new.h
wpa_supplicant/notify.c
wpa_supplicant/notify.h
wpa_supplicant/wpas_glue.c