EAP-TTLS as defined by RFC 5281. More...

#include <freeradius-devel/eap/tls.h>
#include "eap_ttls.h"

Include dependency graph for rlm_eap_ttls.c:

Data Structures
struct	rlm_eap_ttls_t

struct	rlm_eap_ttls_thread_t

Functions
static unlang_action_t	mod_handshake_process (UNUSED rlm_rcode_t p_result, UNUSED module_ctx_t const mctx, request_t *request)

static unlang_action_t	mod_handshake_resume (rlm_rcode_t p_result, module_ctx_t const mctx, request_t *request)

static int	mod_instantiate (module_inst_ctx_t const *mctx)

static unlang_action_t	mod_session_init (rlm_rcode_t p_result, module_ctx_t const mctx, request_t *request)

static int	mod_thread_detach (module_thread_inst_ctx_t const *mctx)

static int	mod_thread_instantiate (module_thread_inst_ctx_t const *mctx)

static ttls_tunnel_t *	ttls_alloc (TALLOC_CTX ctx, rlm_eap_ttls_t inst)

Variables
fr_dict_attr_t const *	attr_chap_challenge

fr_dict_attr_t const *	attr_eap_channel_binding_message

fr_dict_attr_t const *	attr_eap_message

fr_dict_attr_t const *	attr_eap_tls_require_client_cert

fr_dict_attr_t const *	attr_freeradius_proxied_to

fr_dict_attr_t const *	attr_ms_chap2_success

fr_dict_attr_t const *	attr_ms_chap_challenge

fr_dict_attr_t const *	attr_proxy_to_realm

fr_dict_attr_t const *	attr_reply_message

fr_dict_attr_t const *	attr_user_name

fr_dict_attr_t const *	attr_user_password

fr_dict_attr_t const *	attr_vendor_specific

static fr_dict_t const *	dict_freeradius

static fr_dict_t const *	dict_radius

rlm_eap_submodule_t	rlm_eap_ttls

fr_dict_autoload_t	rlm_eap_ttls_dict []

fr_dict_attr_autoload_t	rlm_eap_ttls_dict_attr []

static conf_parser_t	submodule_config []

Detailed Description

EAP-TTLS as defined by RFC 5281.

Id: 1bd95d5a2af0feb68ef92609078a82b778b620f6

Copyright: 2003 Alan DeKok (aland.nosp@m.@fre.nosp@m.eradi.nosp@m.us.o.nosp@m.rg); 2006 The FreeRADIUS server project

Definition in file rlm_eap_ttls.c.

Data Structure Documentation

◆ rlm_eap_ttls_t

struct rlm_eap_ttls_t

Definition at line 36 of file rlm_eap_ttls.c.

Data Fields
bool	include_length
bool	req_client_cert
fr_tls_conf_t *	tls_conf
char const *	tls_conf_name
char const *	virtual_server

◆ rlm_eap_ttls_thread_t

struct rlm_eap_ttls_thread_t

Definition at line 32 of file rlm_eap_ttls.c.

Data Fields
SSL_CTX *	ssl_ctx	Thread local SSL_CTX.

Function Documentation

◆ mod_handshake_process()

static unlang_action_t mod_handshake_process	(	UNUSED rlm_rcode_t *	p_result,
		UNUSED module_ctx_t const *	mctx,
		request_t *	request
	)

static

Definition at line 267 of file rlm_eap_ttls.c.

Here is the call graph for this function:

Here is the caller graph for this function:

◆ mod_handshake_resume()

static unlang_action_t mod_handshake_resume	(	rlm_rcode_t *	p_result,
		module_ctx_t const *	mctx,
		request_t *	request
	)

static

Definition at line 131 of file rlm_eap_ttls.c.

Here is the call graph for this function:

Here is the caller graph for this function:

◆ mod_instantiate()

static int mod_instantiate ( module_inst_ctx_t const * mctx )

static

Definition at line 356 of file rlm_eap_ttls.c.

Here is the call graph for this function:

◆ mod_session_init()

static unlang_action_t mod_session_init	(	rlm_rcode_t *	p_result,
		module_ctx_t const *	mctx,
		request_t *	request
	)

static

Definition at line 286 of file rlm_eap_ttls.c.

Here is the call graph for this function:

◆ mod_thread_detach()

static int mod_thread_detach ( module_thread_inst_ctx_t const * mctx )

static

Definition at line 343 of file rlm_eap_ttls.c.

◆ mod_thread_instantiate()

static int mod_thread_instantiate ( module_thread_inst_ctx_t const * mctx )

static

Definition at line 332 of file rlm_eap_ttls.c.

◆ ttls_alloc()

static ttls_tunnel_t* ttls_alloc	(	TALLOC_CTX *	ctx,
		rlm_eap_ttls_t *	inst
	)

static

Definition at line 121 of file rlm_eap_ttls.c.

Here is the caller graph for this function:

Variable Documentation

◆ attr_chap_challenge

fr_dict_attr_t const* attr_chap_challenge

Definition at line 89 of file rlm_eap_ttls.c.

◆ attr_eap_channel_binding_message

fr_dict_attr_t const* attr_eap_channel_binding_message

Definition at line 95 of file rlm_eap_ttls.c.

◆ attr_eap_message

fr_dict_attr_t const* attr_eap_message

Definition at line 91 of file rlm_eap_ttls.c.

◆ attr_eap_tls_require_client_cert

fr_dict_attr_t const* attr_eap_tls_require_client_cert

Definition at line 86 of file rlm_eap_ttls.c.

◆ attr_freeradius_proxied_to

fr_dict_attr_t const* attr_freeradius_proxied_to

Definition at line 92 of file rlm_eap_ttls.c.

◆ attr_ms_chap2_success

fr_dict_attr_t const* attr_ms_chap2_success

Definition at line 90 of file rlm_eap_ttls.c.

◆ attr_ms_chap_challenge

fr_dict_attr_t const* attr_ms_chap_challenge

Definition at line 93 of file rlm_eap_ttls.c.

◆ attr_proxy_to_realm

fr_dict_attr_t const* attr_proxy_to_realm

Definition at line 87 of file rlm_eap_ttls.c.

◆ attr_reply_message

fr_dict_attr_t const* attr_reply_message

Definition at line 94 of file rlm_eap_ttls.c.

◆ attr_user_name

fr_dict_attr_t const* attr_user_name

Definition at line 96 of file rlm_eap_ttls.c.

◆ attr_user_password

fr_dict_attr_t const* attr_user_password

Definition at line 97 of file rlm_eap_ttls.c.

◆ attr_vendor_specific

fr_dict_attr_t const* attr_vendor_specific

Definition at line 98 of file rlm_eap_ttls.c.

◆ dict_freeradius

fr_dict_t const* dict_freeradius

static

Definition at line 76 of file rlm_eap_ttls.c.

◆ dict_radius

fr_dict_t const* dict_radius

static

Definition at line 77 of file rlm_eap_ttls.c.

◆ rlm_eap_ttls

rlm_eap_submodule_t rlm_eap_ttls

Initial value:

= {
        .common = {
                .magic                  = MODULE_MAGIC_INIT,
                .name                   = "eap_ttls",
 
                .inst_size              = sizeof(rlm_eap_ttls_t),
                .config                 = submodule_config,
                .instantiate            = mod_instantiate,      
 
                .thread_inst_size       = sizeof(rlm_eap_ttls_thread_t),
                .thread_instantiate     = mod_thread_instantiate,
                .thread_detach          = mod_thread_detach,
        },
        .provides               = { FR_EAP_METHOD_TTLS },
        .session_init           = mod_session_init,     
}

Definition at line 384 of file rlm_eap_ttls.c.

◆ rlm_eap_ttls_dict

fr_dict_autoload_t rlm_eap_ttls_dict

Initial value:

= {
        { .out = &dict_freeradius, .proto = "freeradius" },
        { .out = &dict_radius, .proto = "radius" },
        { NULL }
}

Definition at line 80 of file rlm_eap_ttls.c.

◆ rlm_eap_ttls_dict_attr

fr_dict_attr_autoload_t rlm_eap_ttls_dict_attr

Initial value:

= {
        { .out = &attr_eap_tls_require_client_cert, .name = "EAP-TLS-Require-Client-Cert", .type = FR_TYPE_UINT32, .dict = &dict_freeradius },
        { .out = &attr_proxy_to_realm, .name = "Proxy-To-Realm", .type = FR_TYPE_STRING, .dict = &dict_freeradius },
 
        { .out = &attr_chap_challenge, .name = "CHAP-Challenge", .type = FR_TYPE_OCTETS, .dict = &dict_radius },
        { .out = &attr_eap_message, .name = "EAP-Message", .type = FR_TYPE_OCTETS, .dict = &dict_radius },
        { .out = &attr_freeradius_proxied_to, .name = "Vendor-Specific.FreeRADIUS.Proxied-To", .type = FR_TYPE_IPV4_ADDR, .dict = &dict_radius },
        { .out = &attr_ms_chap_challenge, .name = "Vendor-Specific.Microsoft.CHAP-Challenge", .type = FR_TYPE_OCTETS, .dict = &dict_radius },
        { .out = &attr_ms_chap2_success, .name = "Vendor-Specific.Microsoft.CHAP2-Success", .type = FR_TYPE_OCTETS, .dict = &dict_radius },
        { .out = &attr_reply_message, .name = "Reply-Message", .type = FR_TYPE_STRING, .dict = &dict_radius },
        { .out = &attr_eap_channel_binding_message, .name = "Vendor-Specific.UKERNA.EAP-Channel-Binding-Message", .type = FR_TYPE_OCTETS, .dict = &dict_radius },
        { .out = &attr_user_name, .name = "User-Name", .type = FR_TYPE_STRING, .dict = &dict_radius },
        { .out = &attr_user_password, .name = "User-Password", .type = FR_TYPE_STRING, .dict = &dict_radius },
        { .out = &attr_vendor_specific, .name = "Vendor-Specific", .type = FR_TYPE_VSA, .dict = &dict_radius },
        { NULL }
}

Definition at line 101 of file rlm_eap_ttls.c.

◆ submodule_config

conf_parser_t submodule_config[]

static

Initial value:

= {
        { FR_CONF_OFFSET("tls", rlm_eap_ttls_t, tls_conf_name) },
        { FR_CONF_DEPRECATED("copy_request_to_tunnel", rlm_eap_ttls_t, NULL), .dflt = "no" },
        { FR_CONF_DEPRECATED("use_tunneled_reply", rlm_eap_ttls_t, NULL), .dflt = "no" },
        { FR_CONF_OFFSET_FLAGS("virtual_server", CONF_FLAG_REQUIRED | CONF_FLAG_NOT_EMPTY, rlm_eap_ttls_t, virtual_server) },
        { FR_CONF_OFFSET("include_length", rlm_eap_ttls_t, include_length), .dflt = "yes" },
        { FR_CONF_OFFSET("require_client_cert", rlm_eap_ttls_t, req_client_cert), .dflt = "no" },
        CONF_PARSER_TERMINATOR
}

Definition at line 66 of file rlm_eap_ttls.c.

Data Structures

Functions

Variables

Detailed Description

Data Structure Documentation

◆ rlm_eap_ttls_t

◆ rlm_eap_ttls_thread_t

Function Documentation

◆ mod_handshake_process()

◆ mod_handshake_resume()

◆ mod_instantiate()

◆ mod_session_init()

◆ mod_thread_detach()

◆ mod_thread_instantiate()

◆ ttls_alloc()

Variable Documentation

◆ attr_chap_challenge

◆ attr_eap_channel_binding_message

◆ attr_eap_message

◆ attr_eap_tls_require_client_cert

◆ attr_freeradius_proxied_to

◆ attr_ms_chap2_success

◆ attr_ms_chap_challenge

◆ attr_proxy_to_realm

◆ attr_reply_message

◆ attr_user_name

◆ attr_user_password

◆ attr_vendor_specific

◆ dict_freeradius

◆ dict_radius

◆ rlm_eap_ttls

◆ rlm_eap_ttls_dict

◆ rlm_eap_ttls_dict_attr

◆ submodule_config