Joey Nix <[EMAIL PROTECTED]> wrote:
>
> So will it be:
> case handshake:
> if (tls_session->info.handshake_type == finished) {
> DEBUG2(" rlm_eap_tls: ack handshake is finished");
> return EAPTLS_SUCCESS;
> }
>
> DEBUG2(" rlm_eap_tls: ack handshake fragment handler");
> /* Fragmentation handler, send next fragment */
> return EAPTLS_REQUEST;
Yes.
> or will it be:
> case handshake:
> if (tls_session->info.handshake_type == finished) {
> DEBUG2(" rlm_eap_tls: ack handshake is finished");
> return EAPTLS_SUCCESS;
> }
>
> default:
> DEBUG2(" rlm_eap_tls: ack default");
> radlog(L_ERR, "rlm_eap_tls: Invalid ACK received: %d",
No. That would make it impossible for multi-ack sessions to work,
and would require that everything be sent in only one SSL packet.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
