Skip to content

Commit 41e4699

Browse files
committed
Introduce new Level - [1] Low - Security setting for client-connect
| [0] Lowest - Allow all valid TLS-AUTH/Crypt/V2 keys to connect. | ALL TLS-Crypt-V2 key extended tests are NOT peformed. *New* | [1] Low - Functionally equivalent to [0] Low - Allow all.. | Except, ALL TLS-Crypt-V2 key extended tests are peformed. | Same as default [2], except hwaddr-mismatches are IGNORED. *Bumped* from [1] | [2] Default - Do not require clients to push a hwaddr. | TLS-Crypt-V2 keys with a hwaddr mismatch will be disconnected. | TLS-Crypt-V2 keys without a hwaddr can connect. | TLS Auth and Crypt-v1 keys can connect. Bumps all higher levels up by one. Signed-off-by: Richard T Bonhomme <[email protected]>
1 parent e844371 commit 41e4699

File tree

1 file changed

+22
-18
lines changed

1 file changed

+22
-18
lines changed

easytls

Lines changed: 22 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -7790,30 +7790,30 @@ interactive_hw_required ()
77907790
ia_question_help="
77917791
* Select the level of hardware-address verification required ?
77927792
+----------------------------------------
7793-
| TLS-Auth/Crypt and TLS-Crypt-V2 Server
7793+
| TLS-Auth/Crypt and TLS-Crypt-V2
77947794
+----------------------------------------
7795-
| [0] Low - Allow all keys to connect, hwaddr verification is not enforced.
7796-
|
7797-
| [1] Default - Do not require clients to push a hwaddr.
7795+
| [0] Lowest - Allow all valid TLS-AUTH/Crypt/V2 keys to connect.
7796+
| ALL TLS-Crypt-V2 key extended tests are NOT peformed.
7797+
| [1] Low - Functionally equivalent to [0] Low - Allow all..
7798+
| Except, ALL TLS-Crypt-V2 key extended tests are peformed.
7799+
| Same as default [2], except hwaddr-mismatches are IGNORED.
7800+
| [2] Default - Do not require clients to push a hwaddr.
77987801
| TLS-Crypt-V2 keys with a hwaddr mismatch will be disconnected.
77997802
| TLS-Crypt-V2 keys without a hwaddr can connect.
78007803
| TLS Auth and Crypt-v1 keys can connect.
7801-
|
7802-
| [2] Medium - Require all clients to push a hwaddr.
7804+
| [3] Medium - Require all clients to push a hwaddr.
78037805
| TLS-Crypt-V2 keys with a hwaddr mismatch will be disconnected.
78047806
| TLS-Crypt-V2 keys without a hwaddr can connect but must push a hwaddr.
78057807
| TLS Auth and Crypt-v1 keys can connect but must push a hwaddr.
78067808
+----------------------------------------
7807-
| TLS-Crypt-V2 ONLY Server
7809+
| TLS-Crypt-V2 ONLY
78087810
+----------------------------------------
7809-
| [3] Medium-High - Do not require clients to push a hwaddr.
7810-
| TLS-Crypt-V2 keys without a Hardware-address can connect.
7811-
|
7812-
| [4] High - Require all clients to push a hwaddr.
7813-
| TLS-Crypt-v2 keys without a hwaddr can connect but must push a hwaddr.
7814-
|
7815-
| [5] Very High - hwaddr verification is enforced on all clients.
7816-
| TLS-Crypt-V2 key must have a hwaddr and client must push a hwaddr.
7811+
|| [4] Medium-High - Do not require clients to push a hwaddr.
7812+
|| TLS-Crypt-V2 keys without a Hardware-address can connect.
7813+
|| [5] High - Require all clients to push a hwaddr.
7814+
|| TLS-Crypt-v2 keys without a hwaddr can connect but must push a hwaddr.
7815+
|| [6] Very-High - hwaddr verification is enforced on all clients.
7816+
|| TLS-Crypt-V2 key must have a hwaddr and client must push a hwaddr.
78177817
78187818
Leave this blank to use the default
78197819
@@ -7830,21 +7830,25 @@ interactive_hw_required ()
78307830
break
78317831
;;
78327832
1)
7833+
opt_hw_required='-M'
78337834
break
78347835
;;
78357836
2)
7836-
opt_hw_required='-p'
78377837
break
78387838
;;
78397839
3)
7840-
opt_hw_required='-c'
7840+
opt_hw_required='-p'
78417841
break
78427842
;;
78437843
4)
7844-
opt_hw_required='-p -c'
7844+
opt_hw_required='-c'
78457845
break
78467846
;;
78477847
5)
7848+
opt_hw_required='-p -c'
7849+
break
7850+
;;
7851+
6)
78487852
opt_hw_required='-k'
78497853
break
78507854
;;

0 commit comments

Comments
 (0)