habsi/authentik
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

this might actually be cooking

Browse Source 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
This commit is contained in:
Jens Langhammer
2025-05-15 01:53:14 +02:00
parent ae59a3e576
commit 8a80f07db2
2 changed files with 8 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
internal/outpost/radius/eap/tls/payload.go
View File

@ -101,7 +101,9 @@ func (p *Payload) Handle(stt any) (*Payload, *State) {
err := st.TLS.HandshakeContext(st.Context) err := st.TLS.HandshakeContext(st.Context)
if err != nil { if err != nil {
log.WithError(err).Debug("TLS: Handshake error") log.WithError(err).Debug("TLS: Handshake error")
return
} }
st.HandshakeDone = true
}() }()
} else if len(p.Data) > 0 { } else if len(p.Data) > 0 {
log.Debug("TLS: Updating buffer with new TLS data from packet") log.Debug("TLS: Updating buffer with new TLS data from packet")
@ -129,6 +131,9 @@ func (p *Payload) Handle(stt any) (*Payload, *State) {
if st.HasMore() { if st.HasMore() {
return p.sendNextChunk(st) return p.sendNextChunk(st)
} }
if st.HandshakeDone {
// return
}
if len(st.Conn.OutboundData()) > 0 { if len(st.Conn.OutboundData()) > 0 {
return p.startChunkedTransfer(st.Conn.OutboundData(), st) return p.startChunkedTransfer(st.Conn.OutboundData(), st)
} }
@ -136,11 +141,11 @@ func (p *Payload) Handle(stt any) (*Payload, *State) {
} }
func (p *Payload) startChunkedTransfer(data []byte, st *State) (*Payload, *State) { func (p *Payload) startChunkedTransfer(data []byte, st *State) (*Payload, *State) {
flags := FlagLengthIncluded flags := FlagNone
var dataToSend []byte var dataToSend []byte
if len(data) > maxChunkSize { if len(data) > maxChunkSize {
log.WithField("length", len(data)).Debug("TLS: Data needs to be chunked") log.WithField("length", len(data)).Debug("TLS: Data needs to be chunked")
flags += FlagMoreFragments flags += FlagMoreFragments + FlagLengthIncluded
// Chunk data into correct chunks and add them to the list // Chunk data into correct chunks and add them to the list
st.RemainingChunks = append(st.RemainingChunks, slices.Collect(slices.Chunk(data, maxChunkSize))...) st.RemainingChunks = append(st.RemainingChunks, slices.Collect(slices.Chunk(data, maxChunkSize))...)
dataToSend = st.RemainingChunks[0] dataToSend = st.RemainingChunks[0]

1
internal/outpost/radius/eap/tls/state.go
View File

@ -8,6 +8,7 @@ import (
type State struct { type State struct {
HasStarted bool HasStarted bool
RemainingChunks [][]byte RemainingChunks [][]byte
HandshakeDone bool
TotalPayloadSize int TotalPayloadSize int
TLS *tls.Conn TLS *tls.Conn
Conn *TLSConnection Conn *TLSConnection