AMajor/SoftEtherVPN
1
0
Fork 0
mirror of https://github.com/SoftEtherVPN/SoftEtherVPN.git synced 2025-07-07 08:14:58 +03:00
Code Releases Activity

Hiding the EAP-TLS match user by certificate behind an admin option, disabled by default

Browse Source
This commit is contained in:
Evengard
2023-01-24 11:31:10 +03:00
parent 149096e13c
commit 0a60cdf141
9 changed files with 9 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
src/Cedar/Hub.c
View File

@ -45,6 +45,7 @@ static bool g_vgs_emb_tag = false;
ADMIN_OPTION admin_options[] =
{
{"allow_hub_admin_change_option", 0},
{"allow_eap_tls_match_user_by_cert", 0},
{"max_users", 0},
{"max_multilogins_per_user", 0},
{"max_groups", 0},

2
src/Cedar/Proto_PPP.c
View File

@ -1295,7 +1295,7 @@ bool PPPProcessEAPResponsePacket(PPP_SESSION *p, PPP_PACKET *pp, PPP_PACKET *req
AcLock(hub);
{
USER *user = AcGetUser(hub, p->Eap_Identity.UserName);
if (user == NULL)
if (user == NULL && GetHubAdminOption(hub, "allow_eap_tls_match_user_by_cert") == true)
{
user = AcGetUserByCert(hub, p->Eap_Identity.UserName);
if (user != NULL)