<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Hi Heikki,<div class=""><br class=""></div><div class="">thanks. the eaptl_resume_post_auth_hook.pl works perfectly in our setup.</div><div class=""><br class=""></div><div class="">We fetch certificate issuer and policy in the EAPTLS_CertificateVerifyHook and use the eaptl_resume_post_auth_hook.pl with very minor adjustments for our use case.</div><div class=""><br class=""></div><div class="">Greetings</div><div class="">Christian</div><div class=""><br class=""><div class=""><div class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">— </div><div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">Christian Kratzer CK Software GmbH<br class=""><a href="mailto:ck@cksoft.de" class="">Email: ck@cksoft.de</a> Wildberger Weg 24/2<br class="">Phone: +49 7032 893 997 - 0 D-71126 Gaeufelden<br class="">Fax: +49 7032 893 997 - 9 HRB 245288, Amtsgericht Stuttgart<br class="">Mobile: +49 171 1947 843 Geschaeftsfuehrer: Christian Kratzer<br class="">Web: <a href="http://www.cksoft.de/" class="">http://www.cksoft.de/</a><br class=""></div>
</div>
<div><br class=""><blockquote type="cite" class=""><div class="">On 28. Feb 2018, at 20:56, Heikki Vatiainen <<a href="mailto:hvn@open.com.au" class="">hvn@open.com.au</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="">On 27.02.2018 18:05, Christian Kratzer wrote:<br class=""><br class=""><blockquote type="cite" class="">we need to store something between individual sessions with tls session resumption.<br class=""></blockquote><br class="">See goodies/eaptls_resume_post_auth_hook.pl for an example of how it should be done with current versions. The data to store over resumed authentications is now kept separate from the EAPContext that can be accessed from $p.<br class=""><br class="">In other words, an EAPContext is only alive during one EAP authentication exchange. When a new session is created, a separate store is created and associated with an EAP context. When the this authentication is finished, EAP context is discarded but the separate store remains. When the session is resumed, the separate store is retrieved and associated with an EAP context created anew for this authentication.<br class=""><br class="">The hook shows how to use an API to store and retrieve information from the session's separate store. You can use it to store values with a key and then later retrieve them with the same key.<br class=""><br class=""><blockquote type="cite" class="">But the auth.hook cannot access issuer and policy in the EAPContext and later authorization fails because they are missing.<br class=""></blockquote><br class="">Correct. This EAP context is not the same than the context in the first authentication. The separate store means a bit more work, but a good thing is that there's now an API for this.<br class=""><br class=""><blockquote type="cite" class="">The question is how can we store the two strings extracted in EAPTLS_CertificateVerifyHook on first connect so they are available for use on session resumption.<br class=""></blockquote><br class="">The hook in question should show answer this. Please let us know how it goes.<br class=""><br class="">Thanks,<br class="">Heikki<br class=""><br class="">-- <br class="">Heikki Vatiainen<br class=""><a href="mailto:hvn@open.com.au" class="">hvn@open.com.au</a><br class="">_______________________________________________<br class="">radiator mailing list<br class="">radiator@lists.open.com.au<br class="">http://lists.open.com.au/mailman/listinfo/radiator<br class=""></div></div></blockquote></div><br class=""></div></div></body></html>