Support RADIUS messages up to 4096 bytes, RADIUS EAP-Message fragmentation

diff --git a/src/charon/plugins/eap_radius/eap_radius.c b/src/charon/plugins/eap_radius/eap_radius.c
index 4978a51..f041fda 100644 (file)
--- a/src/charon/plugins/eap_radius/eap_radius.c
+++ b/src/charon/plugins/eap_radius/eap_radius.c
@@ -117,22 +117,26 @@ static bool radius2ike(private_eap_radius_t *this,
 {
        enumerator_t *enumerator;
        eap_payload_t *payload;
-       chunk_t data;
+       chunk_t data, message = chunk_empty;
        int type;
 
        enumerator = msg->create_enumerator(msg);
        while (enumerator->enumerate(enumerator, &type, &data))
        {
-               if (type == RAT_EAP_MESSAGE)
+               if (type == RAT_EAP_MESSAGE && data.len)
                {
-                       *out = payload = eap_payload_create_data(data);
-                       /* apply EAP method selected by RADIUS server */
-                       this->type = payload->get_type(payload, &this->vendor);
-                       enumerator->destroy(enumerator);
-                       return TRUE;
+                       message = chunk_cat("mc", message, data);
                }
        }
        enumerator->destroy(enumerator);
+       if (message.len)
+       {
+               *out = payload = eap_payload_create_data(message);
+               free(message.ptr);
+               /* apply EAP method selected by RADIUS server */
+               this->type = payload->get_type(payload, &this->vendor);
+               return TRUE;
+       }
        return FALSE;
 }
 
@@ -180,10 +184,18 @@ static status_t process(private_eap_radius_t *this,
 {
        radius_message_t *request, *response;
        status_t status = FAILED;
+       chunk_t data;
 
        request = radius_message_create_request();
        request->add(request, RAT_USER_NAME, this->peer->get_encoding(this->peer));
-       request->add(request, RAT_EAP_MESSAGE, in->get_data(in));
+       data = in->get_data(in);
+       /* fragment data suitable for RADIUS (not more than 253 bytes) */
+       while (data.len > 253)
+       {
+               request->add(request, RAT_EAP_MESSAGE, chunk_create(data.ptr, 253));
+               data = chunk_skip(data, 253);
+       }
+       request->add(request, RAT_EAP_MESSAGE, data);
 
        response = this->client->request(this->client, request);
        if (response)

diff --git a/src/charon/plugins/eap_radius/radius_client.c b/src/charon/plugins/eap_radius/radius_client.c
index a28f805..1d1f217 100644 (file)
--- a/src/charon/plugins/eap_radius/radius_client.c
+++ b/src/charon/plugins/eap_radius/radius_client.c
@@ -295,7 +295,7 @@ static radius_message_t* request(private_radius_client_t *this,
                radius_message_t *response;
                bool retransmit = FALSE;
                struct timeval tv;
-               char buf[1024];
+               char buf[4096];
                fd_set fds;
                int res;
 

diff --git a/src/charon/plugins/eap_radius/radius_message.c b/src/charon/plugins/eap_radius/radius_message.c
index 8b7ef12..11a1d8d 100644 (file)
--- a/src/charon/plugins/eap_radius/radius_message.c
+++ b/src/charon/plugins/eap_radius/radius_message.c
@@ -269,6 +269,7 @@ static void add(private_radius_message_t *this, radius_attribute_type_t type,
 {
        rattr_t *attribute;
 
+       data.len = min(data.len, 253);
        this->msg = realloc(this->msg,
                                                ntohs(this->msg->length) + sizeof(rattr_t) + data.len);
        attribute = ((void*)this->msg) + ntohs(this->msg->length);