instead of using the TLS session ID as session identifier prior to authentication use the webvpncontext cookie.

This commit is contained in:
Nikos Mavrogiannopoulos
2014-01-19 02:59:04 +01:00
parent 90a9286b88
commit b9fe6b6263
8 changed files with 121 additions and 60 deletions
+3 -3
View File
@@ -26,7 +26,7 @@
*
* (worker terminates as client disconnects)
*
* <------ AUTH_REINIT (password)
* <------ AUTH_REINIT (password, sid)
* AUTH_REP(ΟΚ) ------>
*
*/
@@ -40,7 +40,7 @@ message auth_init_msg
optional string cert_user_name = 4;
optional string cert_group_name = 5;
optional string hostname = 6;
required bytes session_id = 7; /* TLS */
optional bytes sid = 7;
}
/* AUTH_REINIT - used in cisco compatible clients, to
@@ -49,7 +49,7 @@ message auth_reinit_msg
{
required bool tls_auth_ok = 1 [default = false];
required string password = 2;
required bytes session_id = 3;
required bytes sid = 3;
}
/* AUTH_COOKIE_REQ */