diff options
| author | Michael Brown <mcb30@ipxe.org> | 2024-02-23 12:33:57 +0000 |
|---|---|---|
| committer | Michael Brown <mcb30@ipxe.org> | 2024-02-23 16:24:44 +0000 |
| commit | 25ffcd79bfd38da96f9905b78e3d5c3cab33dad3 (patch) | |
| tree | f19e4a09d18890608775e3acbefbe12ca1b6da77 /src/config | |
| parent | 834f319f87bd2a1135c51375774f6bfe17a244cc (diff) | |
| download | ipxe-25ffcd79bfd38da96f9905b78e3d5c3cab33dad3.tar.gz | |
[eap] Allow MD5-Challenge authentication method to be disabled
RFC 3748 states that implementations must support the MD5-Challenge
method. However, some network environments may wish to disable it as
a matter of policy.
Allow support for MD5-Challenge to be controllable via the build
configuration option EAP_METHOD_MD5 in config/general.h.
Signed-off-by: Michael Brown <mcb30@ipxe.org>
Diffstat (limited to 'src/config')
| -rw-r--r-- | src/config/config_eap.c | 39 | ||||
| -rw-r--r-- | src/config/general.h | 6 |
2 files changed, 45 insertions, 0 deletions
diff --git a/src/config/config_eap.c b/src/config/config_eap.c new file mode 100644 index 000000000..d3fd77aa2 --- /dev/null +++ b/src/config/config_eap.c @@ -0,0 +1,39 @@ +/* + * This program is free software; you can redistribute it and/or + * modify it under the terms of the GNU General Public License as + * published by the Free Software Foundation; either version 2 of the + * License, or (at your option) any later version. + * + * This program is distributed in the hope that it will be useful, but + * WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU + * General Public License for more details. + * + * You should have received a copy of the GNU General Public License + * along with this program; if not, write to the Free Software + * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA + * 02110-1301, USA. + * + * You can also choose to distribute this program under the terms of + * the Unmodified Binary Distribution Licence (as given in the file + * COPYING.UBDL), provided that you have satisfied its requirements. + */ + +FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL ); + +#include <config/general.h> + +/** @file + * + * EAP configuration options + * + */ + +PROVIDE_REQUIRING_SYMBOL(); + +/* + * Drag in EAP authentication methods + */ +#ifdef EAP_METHOD_MD5 +REQUIRE_OBJECT ( eap_md5 ); +#endif diff --git a/src/config/general.h b/src/config/general.h index 6e8e86b2b..de009a878 100644 --- a/src/config/general.h +++ b/src/config/general.h @@ -92,6 +92,12 @@ FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL ); #define CRYPTO_80211_WPA2 /* Add support for stronger WPA cryptography */ /* + * 802.1x EAP authentication methods + * + */ +#define EAP_METHOD_MD5 /* MD5-Challenge port authentication */ + +/* * Name resolution modules * */ |