t->mode = EAP_FAST_PROVISIONING_AUTH;
}
- if (!t->pac.expires || t->pac.expired || t->pac.expires - time(NULL) < t->pac_lifetime * 0.6)
+ if (!t->pac.expires || t->pac.expired || t->pac.expires - time(NULL) < t->pac_lifetime * 0.6) {
t->pac.send = true;
+ }
}
eap_fast_init_keys(request, tls_session);
RDEBUG("Got Tunneled FAST TLVs");
rdebug_pair_list(L_DBG_LVL_1, request, fast_vps, NULL);
-
code = eap_fast_process_tlvs(request, eap_session, tls_session, fast_vps);
-
fr_pair_list_free(&fast_vps);
if (code == PW_CODE_ACCESS_REJECT) return PW_CODE_ACCESS_REJECT;
case EAP_FAST_AUTHENTICATION:
code = PW_CODE_ACCESS_CHALLENGE;
break;
+
case EAP_FAST_CRYPTOBIND_CHECK:
{
if (t->mode != EAP_FAST_PROVISIONING_ANON && !t->pac.send)