KumiSystems/openwrtv4
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

wpa_supplicant: add support for EAP-TLS phase2

Browse source 
Introduce config options client_cert2, priv_key2 and priv_key2_pwd
used for EAP-TLS phase2 authentication in WPA-EAP client mode.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

SVN-Revision: 48345
This commit is contained in:
Felix Fietkau 2016-01-19 10:06:29 +00:00
parent 3b15eb0ade
commit faad8b68a4
1 changed files with 12 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

14
package/network/services/hostapd/files/netifd.sh
View file

@ -634,8 +634,19 @@ wpa_supplicant_add_network() {
append network_data "private_key_passwd=\"$priv_key_pwd\"" "$N$T" append network_data "private_key_passwd=\"$priv_key_pwd\"" "$N$T"
;; ;;
fast|peap|ttls) fast|peap|ttls)
json_get_vars auth password json_get_vars auth password ca_cert2 client_cert2 priv_key2 priv_key2_pwd
set_default auth MSCHAPV2 set_default auth MSCHAPV2
if [ "$auth" = "EAP-TLS" ]; then
[ -n "$ca_cert2" ] &&
append network_data "ca_cert2=\"$ca_cert2\"" "$N$T"
append network_data "client_cert2=\"$client_cert2\"" "$N$T"
append network_data "private_key2=\"$priv_key2\"" "$N$T"
append network_data "private_key2_passwd=\"$priv_key2_pwd\"" "$N$T"
else
append network_data "password=\"$password\"" "$N$T"
fi
phase2proto="auth=" phase2proto="auth="
case "$auth" in case "$auth" in
"auth"*) "auth"*)
@ -648,7 +659,6 @@ wpa_supplicant_add_network() {
;; ;;
esac esac
append network_data "phase2=\"$phase2proto$auth\"" "$N$T" append network_data "phase2=\"$phase2proto$auth\"" "$N$T"
append network_data "password=\"$password\"" "$N$T"
;; ;;
esac esac
append network_data "eap=$(echo $eap_type | tr 'a-z' 'A-Z')" "$N$T" append network_data "eap=$(echo $eap_type | tr 'a-z' 'A-Z')" "$N$T"