diff options
| author | 2022-02-28 18:02:27 +0900 | |
|---|---|---|
| committer | 2022-04-07 01:18:19 +0000 | |
| commit | 4f319df8ff5a4b9f2bc62cb17df972e40b57fc81 (patch) | |
| tree | 68dd975c1f1cbb4cb3d99bb68a243621a3a81636 /api/api.go | |
| parent | 74f9b7f43225ac6e4bd88d4e344158cff2417a6d (diff) | |
Disallow PAP authentication when MPPE is requested
MPPE cannot work if PAP is used as authentication, so it is not useful
to allow PAP authentication when MPPE is enforced: establishing the
tunnel would fail anyway with "MPPE required, but MS-CHAP[v2] auth not
performed".
Also users enforcing MPPE may assume that this means PAP will not be
used for authentication, so without this change MPPE enforcement gives a
false sense of security, as PAP uses plain-text credentials.
Bug: 201660636
Test: atest VpnTest
Merged-In: Ie318d45fe44294e97cf38da7f1834cf014cb4417
Change-Id: Ie318d45fe44294e97cf38da7f1834cf014cb4417
(cherry picked from commit 997a4a39268b4f3af7ccc388269b5eb1972d3624)
Diffstat (limited to 'api/api.go')
0 files changed, 0 insertions, 0 deletions