diff options
| author | Vladislav Grishenko <themiron@mail.ru> | 2020-06-28 20:57:57 +0500 |
|---|---|---|
| committer | Vladislav Grishenko <themiron@mail.ru> | 2020-06-29 04:38:42 +0500 |
| commit | 7dd9766a72d9ad26f4db09c8a52067d1dd4e777c (patch) | |
| tree | d66af95e18d13175ba055c36386c677ff63fdcd7 /accel-pppd/include/ap_session.h | |
| parent | 38af8fca2c87d4e1afff4cb612de871941a36301 (diff) | |
| download | accel-ppp-7dd9766a72d9ad26f4db09c8a52067d1dd4e777c.tar.gz accel-ppp-7dd9766a72d9ad26f4db09c8a52067d1dd4e777c.zip | |
sstp: fix compound mac validation with broken clients
sstp-client sends SSTP_MSG_CALL_CONNECTED message too early,
before auth response, so HLAK can't be known yet and subsequent
HLAK-based validation fails.
workaround the issue by defer accepting SSTP_MSG_CALL_CONNECTED
after auth either has been succeeded or bypassed.
Diffstat (limited to 'accel-pppd/include/ap_session.h')
0 files changed, 0 insertions, 0 deletions