Corrected use of PB-TNC CRETRY and SRETRY batches
authorAndreas Steffen <andreas.steffen@strongswan.org>
Fri, 29 Mar 2019 14:33:24 +0000 (15:33 +0100)
committerAndreas Steffen <andreas.steffen@strongswan.org>
Fri, 29 Mar 2019 16:04:43 +0000 (17:04 +0100)
commit6fcb3baae8e266f1d07b042881a797fe62e00c00
treec71044764930a20280b189a76503c8075010894d
parent35b82000f1a7252eee8235691576da4669f2bdae
Corrected use of PB-TNC CRETRY and SRETRY batches

The PB-TNC finite state machine according to section 3.2 of RFC 5793
was not correctly implemented when sending either a CRETRY or SRETRY
batch. These batches can only be sent in the "Decided" state and a
CRETRY batch can immediately carry all messages usually transported
by a CDATA batch. strongSwan currently is not able to send a SRETRY
batch since full-duplex mode for PT-TLS isn't supported yet.
NEWS
src/libtnccs/plugins/tnccs_20/state_machine/pb_tnc_state_machine.c
src/libtnccs/plugins/tnccs_20/tnccs_20_client.c
src/libtnccs/plugins/tnccs_20/tnccs_20_server.c