Andreas Wolf <[EMAIL PROTECTED]> wrote:
> > Patch #3 was addressed (I thought) by changes to ttls.c on Nov. 6.
>
> I saw your check-in but I still got an error ("Diameter Attribute
> overflows packet!"). However, by
> examining the tunneled attributes the data seemed to be correct.
> I think 'data_len' needs to be adjusted when the padding (rounding up
> to the nearest 4 byte boundary)
> is in effect. I think in this case 'data_len < length' is true.
Ah. The client implementation is broken. They SHOULD have been
padding the data structure to a 4 octet boundary.
I'll add a hack in to the server to deal with this. It's ugly, but
not terribly so.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html