mirror of
https://github.com/strongswan/strongswan.git
synced 2025-12-07 00:00:13 -05:00
Do not return shared secret in TKM Diffie-Hellman
Since the TKM handles all relevant key material, charon-tkm must not have access to it anymore. Thus the ike_dh_get_shared_secret operation is not available anymore.
This commit is contained in:
parent
a61ae27d16
commit
db97fd74d3
@ -61,13 +61,7 @@ METHOD(diffie_hellman_t, get_my_public_value, void,
|
|||||||
METHOD(diffie_hellman_t, get_shared_secret, status_t,
|
METHOD(diffie_hellman_t, get_shared_secret, status_t,
|
||||||
private_tkm_diffie_hellman_t *this, chunk_t *secret)
|
private_tkm_diffie_hellman_t *this, chunk_t *secret)
|
||||||
{
|
{
|
||||||
dh_key_type shared_secret;
|
*secret = chunk_empty;
|
||||||
if (ike_dh_get_shared_secret(this->context_id, &shared_secret) != TKM_OK)
|
|
||||||
{
|
|
||||||
return FAILED;
|
|
||||||
}
|
|
||||||
|
|
||||||
sequence_to_chunk(&shared_secret.data[0], shared_secret.size, secret);
|
|
||||||
return SUCCESS;
|
return SUCCESS;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user