aboutsummaryrefslogtreecommitdiffstats
path: root/wpa_supplicant/wpa_supplicant.conf
diff options
context:
space:
mode:
authorDmitry Shmidt <dimitrysh@google.com>2014-02-19 21:21:58 (GMT)
committerJouni Malinen <j@w1.fi>2014-02-20 13:28:57 (GMT)
commite9a6f18385e67c29d3c7921d0a502f630a364fa2 (patch)
tree36c956319d8d4944cd046b814f7dede4328688c7 /wpa_supplicant/wpa_supplicant.conf
parent41ff0fa64c814ca4b8898f5121ad23d866c28a02 (diff)
downloadhostap-e9a6f18385e67c29d3c7921d0a502f630a364fa2.zip
hostap-e9a6f18385e67c29d3c7921d0a502f630a364fa2.tar.gz
hostap-e9a6f18385e67c29d3c7921d0a502f630a364fa2.tar.bz2
TLS: Add tls_disable_tlsv1_1 and tls_disable_tlsv1_2 phase1 params
These can be used to disable TLSv1.1 and TLSv1.2 as a workaround for AAA servers that have issues interoperating with newer TLS versions. Signed-off-by: Dmitry Shmidt <dimitrysh@google.com>
Diffstat (limited to 'wpa_supplicant/wpa_supplicant.conf')
-rw-r--r--wpa_supplicant/wpa_supplicant.conf4
1 files changed, 4 insertions, 0 deletions
diff --git a/wpa_supplicant/wpa_supplicant.conf b/wpa_supplicant/wpa_supplicant.conf
index 9d3bf6d..b627632 100644
--- a/wpa_supplicant/wpa_supplicant.conf
+++ b/wpa_supplicant/wpa_supplicant.conf
@@ -800,6 +800,10 @@ fast_reauth=1
# EAP workarounds are disabled with eap_workarounds=0.
# For EAP-FAST, this must be set to 0 (or left unconfigured for the
# default value to be used automatically).
+# tls_disable_tlsv1_1=1 - disable use of TLSv1.1 (a workaround for AAA servers
+# that have issues interoperating with updated TLS version)
+# tls_disable_tlsv1_2=1 - disable use of TLSv1.2 (a workaround for AAA servers
+# that have issues interoperating with updated TLS version)
#
# Following certificate/private key fields are used in inner Phase2
# authentication when using EAP-TTLS or EAP-PEAP.