EAP-TTLS peer: Handle Commitment Message for TLS 1.3

Recognize the explicitly defined Commitment Message per
draft-ietf-emu-eap-tls13-13 at the conclusion of the EAP-TTLS with TLS
1.3.

Signed-off-by: Alexander Clouter <alex@digriz.org.uk>

diff --git a/src/eap_peer/eap_ttls.c b/src/eap_peer/eap_ttls.c
index b8e33217b735d716bb6abcbaa9ff40e2eef66419..c4019154d9556f5b9a0056eefe561abba592cfa0 100644 (file)
--- a/src/eap_peer/eap_ttls.c
+++ b/src/eap_peer/eap_ttls.c
@@ -1473,6 +1473,16 @@ start:
                goto start;
        }
 
+       /* draft-ietf-emu-eap-tls13-13 Section 2.5 */
+       if (data->ssl.tls_v13 && wpabuf_len(in_decrypted) == 1 &&
+           *wpabuf_head_u8(in_decrypted) == 0) {
+               wpa_printf(MSG_DEBUG,
+                          "EAP-TTLS: ACKing EAP-TLS Commitment Message");
+               eap_peer_tls_reset_output(&data->ssl);
+               wpabuf_free(in_decrypted);
+               return 1;
+       }
+
 continue_req:
        data->phase2_start = 0;