search

coova / jradius

JRadius is a Java RADIUS framework for client and server.
Other
92 stars 92 forks source link

EAP-(T)TLS issue: KeyManager & TrustManager not used during handshake #23

Open Sovietaced opened 7 years ago

Sovietaced commented 7 years ago

Hi all, I was attempting to verify the authenticity of a RADIUS server's certificate during an EAP-TTLS request and I found that the server certificate was never verified. Regardless of the trust manager configured, my requests were always successful.

Looking at the code it appears that TlsProtocolHandler does not make any use of the local KeyManager[] and TrustManager[] fields.