58 static void eap_tls_params_flags(struct tls_connection_params *params,  in eap_tls_params_flags()  argument
64 		params->flags |= TLS_CONN_ALLOW_SIGN_RSA_MD5;  in eap_tls_params_flags()
66 		params->flags |= TLS_CONN_DISABLE_TIME_CHECKS;  in eap_tls_params_flags()
68 		params->flags |= TLS_CONN_DISABLE_SESSION_TICKET;  in eap_tls_params_flags()
70 		params->flags &= ~TLS_CONN_DISABLE_SESSION_TICKET;  in eap_tls_params_flags()
72 		params->flags |= TLS_CONN_DISABLE_TLSv1_0;  in eap_tls_params_flags()
74 		params->flags &= ~TLS_CONN_DISABLE_TLSv1_0;  in eap_tls_params_flags()
76 		params->flags |= TLS_CONN_DISABLE_TLSv1_1;  in eap_tls_params_flags()
78 		params->flags &= ~TLS_CONN_DISABLE_TLSv1_1;  in eap_tls_params_flags()
80 		params->flags |= TLS_CONN_DISABLE_TLSv1_2;  in eap_tls_params_flags()
82 		params->flags &= ~TLS_CONN_DISABLE_TLSv1_2;  in eap_tls_params_flags()
86 static void eap_tls_params_from_conf1(struct tls_connection_params *params,  in eap_tls_params_from_conf1()  argument
89 	params->ca_cert = (char *) config->ca_cert;  in eap_tls_params_from_conf1()
90 	params->ca_path = (char *) config->ca_path;  in eap_tls_params_from_conf1()
91 	params->client_cert = (char *) config->client_cert;  in eap_tls_params_from_conf1()
92 	params->private_key = (char *) config->private_key;  in eap_tls_params_from_conf1()
93 	params->private_key_passwd = (char *) config->private_key_passwd;  in eap_tls_params_from_conf1()
94 	params->dh_file = (char *) config->dh_file;  in eap_tls_params_from_conf1()
95 	params->subject_match = (char *) config->subject_match;  in eap_tls_params_from_conf1()
96 	params->altsubject_match = (char *) config->altsubject_match;  in eap_tls_params_from_conf1()
97 	params->suffix_match = config->domain_suffix_match;  in eap_tls_params_from_conf1()
98 	params->domain_match = config->domain_match;  in eap_tls_params_from_conf1()
99 	params->engine = config->engine;  in eap_tls_params_from_conf1()
100 	params->engine_id = config->engine_id;  in eap_tls_params_from_conf1()
101 	params->pin = config->pin;  in eap_tls_params_from_conf1()
102 	params->key_id = config->key_id;  in eap_tls_params_from_conf1()
103 	params->cert_id = config->cert_id;  in eap_tls_params_from_conf1()
104 	params->ca_cert_id = config->ca_cert_id;  in eap_tls_params_from_conf1()
105 	eap_tls_params_flags(params, config->phase1);  in eap_tls_params_from_conf1()
109 static void eap_tls_params_from_conf2(struct tls_connection_params *params,  in eap_tls_params_from_conf2()  argument
112 	params->ca_cert = (char *) config->ca_cert2;  in eap_tls_params_from_conf2()
113 	params->ca_path = (char *) config->ca_path2;  in eap_tls_params_from_conf2()
114 	params->client_cert = (char *) config->client_cert2;  in eap_tls_params_from_conf2()
115 	params->private_key = (char *) config->private_key2;  in eap_tls_params_from_conf2()
116 	params->private_key_passwd = (char *) config->private_key2_passwd;  in eap_tls_params_from_conf2()
117 	params->dh_file = (char *) config->dh_file2;  in eap_tls_params_from_conf2()
118 	params->subject_match = (char *) config->subject_match2;  in eap_tls_params_from_conf2()
119 	params->altsubject_match = (char *) config->altsubject_match2;  in eap_tls_params_from_conf2()
120 	params->suffix_match = config->domain_suffix_match2;  in eap_tls_params_from_conf2()
121 	params->domain_match = config->domain_match2;  in eap_tls_params_from_conf2()
122 	params->engine = config->engine2;  in eap_tls_params_from_conf2()
123 	params->engine_id = config->engine2_id;  in eap_tls_params_from_conf2()
124 	params->pin = config->pin2;  in eap_tls_params_from_conf2()
125 	params->key_id = config->key2_id;  in eap_tls_params_from_conf2()
126 	params->cert_id = config->cert2_id;  in eap_tls_params_from_conf2()
127 	params->ca_cert_id = config->ca_cert2_id;  in eap_tls_params_from_conf2()
128 	eap_tls_params_flags(params, config->phase2);  in eap_tls_params_from_conf2()
134 				    struct tls_connection_params *params,  in eap_tls_params_from_conf()  argument
137 	os_memset(params, 0, sizeof(*params));  in eap_tls_params_from_conf()
148 		params->flags |= TLS_CONN_DISABLE_SESSION_TICKET;  in eap_tls_params_from_conf()
152 		eap_tls_params_from_conf2(params, config);  in eap_tls_params_from_conf()
155 		eap_tls_params_from_conf1(params, config);  in eap_tls_params_from_conf()
157 			params->flags |= TLS_CONN_EAP_FAST;  in eap_tls_params_from_conf()
164 	if (eap_tls_check_blob(sm, &params->ca_cert, &params->ca_cert_blob,  in eap_tls_params_from_conf()
165 			       &params->ca_cert_blob_len) ||  in eap_tls_params_from_conf()
166 	    eap_tls_check_blob(sm, &params->client_cert,  in eap_tls_params_from_conf()
167 			       &params->client_cert_blob,  in eap_tls_params_from_conf()
168 			       &params->client_cert_blob_len) ||  in eap_tls_params_from_conf()
169 	    eap_tls_check_blob(sm, &params->private_key,  in eap_tls_params_from_conf()
170 			       &params->private_key_blob,  in eap_tls_params_from_conf()
171 			       &params->private_key_blob_len) ||  in eap_tls_params_from_conf()
172 	    eap_tls_check_blob(sm, &params->dh_file, &params->dh_blob,  in eap_tls_params_from_conf()
173 			       &params->dh_blob_len)) {  in eap_tls_params_from_conf()
178 	params->openssl_ciphers = config->openssl_ciphers;  in eap_tls_params_from_conf()
187 				   struct tls_connection_params *params)  in eap_tls_init_connection()  argument
192 		params->flags |= TLS_CONN_REQUEST_OCSP;  in eap_tls_init_connection()
194 		params->flags |= TLS_CONN_REQUIRE_OCSP;  in eap_tls_init_connection()
202 	res = tls_connection_set_params(data->ssl_ctx, data->conn, params);  in eap_tls_init_connection()
247 	struct tls_connection_params params;  in eap_peer_tls_ssl_init()  local
257 	if (eap_tls_params_from_conf(sm, data, &params, config, data->phase2) <  in eap_peer_tls_ssl_init()
261 	if (eap_tls_init_connection(sm, data, config, &params) < 0)  in eap_peer_tls_ssl_init()