mirror of
https://gitlab.com/openconnect/ocserv.git
synced 2026-10-14 02:22:03 +08:00
instead of using the TLS session ID as session identifier prior to authentication use the webvpncontext cookie.
This commit is contained in:
+3
-3
@@ -26,7 +26,7 @@
|
||||
*
|
||||
* (worker terminates as client disconnects)
|
||||
*
|
||||
* <------ AUTH_REINIT (password)
|
||||
* <------ AUTH_REINIT (password, sid)
|
||||
* AUTH_REP(ΟΚ) ------>
|
||||
*
|
||||
*/
|
||||
@@ -40,7 +40,7 @@ message auth_init_msg
|
||||
optional string cert_user_name = 4;
|
||||
optional string cert_group_name = 5;
|
||||
optional string hostname = 6;
|
||||
required bytes session_id = 7; /* TLS */
|
||||
optional bytes sid = 7;
|
||||
}
|
||||
|
||||
/* AUTH_REINIT - used in cisco compatible clients, to
|
||||
@@ -49,7 +49,7 @@ message auth_reinit_msg
|
||||
{
|
||||
required bool tls_auth_ok = 1 [default = false];
|
||||
required string password = 2;
|
||||
required bytes session_id = 3;
|
||||
required bytes sid = 3;
|
||||
}
|
||||
|
||||
/* AUTH_COOKIE_REQ */
|
||||
|
||||
Reference in New Issue
Block a user