Define attributes for setting TLS min/max versions

diff --git a/share/dictionary/tls/dictionary.freeradius b/share/dictionary/tls/dictionary.freeradius
index 8dee103a460ffe1da7922c7539539ea67377b95b..f38e6744f8174135eec2606df547475f63d0d26e 100644 (file)
--- a/share/dictionary/tls/dictionary.freeradius
+++ b/share/dictionary/tls/dictionary.freeradius
@@ -28,3 +28,6 @@ ATTRIBUTE     Session-Id                              10      octets
 ATTRIBUTE      Session-Data                            11      octets
 ATTRIBUTE      Session-Resumed                         12      bool
 ATTRIBUTE      Session-TTL                             13      time_delta
+
+ATTRIBUTE      Min-Version                             14      float32
+ATTRIBUTE      Max-Version                             15      float32

diff --git a/src/lib/eap/attrs.h b/src/lib/eap/attrs.h
index d783dd969c58bd52e2074316754de6502787685f..4b4223354f6fc2e045cf6f47f7449e3278b257a9 100644 (file)
--- a/src/lib/eap/attrs.h
+++ b/src/lib/eap/attrs.h
@@ -45,3 +45,5 @@ extern HIDDEN fr_dict_attr_t const *attr_ms_mppe_send_key;
 extern HIDDEN fr_dict_attr_t const *attr_ms_mppe_recv_key;
 extern HIDDEN fr_dict_attr_t const *attr_user_name;
 extern HIDDEN fr_dict_attr_t const *attr_state;
+extern HIDDEN fr_dict_attr_t const *attr_tls_max_version;
+extern HIDDEN fr_dict_attr_t const *attr_tls_min_version;

diff --git a/src/lib/eap/base.c b/src/lib/eap/base.c
index b561ea4260a13afd7f5ccf4e1e11b3e202addbcf..55db89cc494d1ee0b3de0f628947dcd2e23021f2 100644 (file)
--- a/src/lib/eap/base.c
+++ b/src/lib/eap/base.c
@@ -76,11 +76,13 @@ RCSID("$Id$")
 
 fr_dict_t const *dict_freeradius;
 fr_dict_t const *dict_radius;
+fr_dict_t const *dict_tls;
 
 extern fr_dict_autoload_t eap_base_dict[];
 fr_dict_autoload_t eap_base_dict[] = {
        { .out = &dict_freeradius, .proto = "freeradius" },
        { .out = &dict_radius, .proto = "radius" },
+       { .out = &dict_tls, .proto = "tls" },
        { NULL }
 };
 
@@ -100,6 +102,8 @@ fr_dict_attr_t const *attr_ms_mppe_send_key;
 fr_dict_attr_t const *attr_ms_mppe_recv_key;
 fr_dict_attr_t const *attr_state;
 fr_dict_attr_t const *attr_user_name;
+fr_dict_attr_t const *attr_tls_min_version;
+fr_dict_attr_t const *attr_tls_max_version;
 
 extern fr_dict_attr_autoload_t eap_base_dict_attr[];
 fr_dict_attr_autoload_t eap_base_dict_attr[] = {
@@ -119,6 +123,8 @@ fr_dict_attr_autoload_t eap_base_dict_attr[] = {
        { .out = &attr_ms_mppe_send_key, .name = "Vendor-Specific.Microsoft.MPPE-Send-Key", .type = FR_TYPE_OCTETS, .dict = &dict_radius },
        { .out = &attr_ms_mppe_recv_key, .name = "Vendor-Specific.Microsoft.MPPE-Recv-Key", .type = FR_TYPE_OCTETS, .dict = &dict_radius },
        { .out = &attr_user_name, .name = "User-Name", .type = FR_TYPE_STRING, .dict = &dict_radius },
+       { .out = &attr_tls_min_version, .name = "Min-Version", .type = FR_TYPE_FLOAT32, .dict = &dict_tls },
+       { .out = &attr_tls_max_version, .name = "Max-Version", .type = FR_TYPE_FLOAT32, .dict = &dict_tls },
 
        { NULL }
 };