tree c85724461f8d16a0f75d1f910a583dc60ae0d7f5
parent 85e2c42e591515d57b41a2ebaec8d15a10d98ce1
author Jimmy Chen <jimmycmchen@google.com> 1672211948 +0800
committer Android Build Coastguard Worker <android-build-coastguard-worker@google.com> 1673986323 +0000

[TOFU] Don't send credentials in an unauthenticated TLS tunnel

Fix the security vulnerability reported in the security report.
Do not send the user credentials in phase2 before the user
approves the server certificate. This is done by connecting
with no credentials for the purpose of getting the server
certificate chain only, and reconnecting once the user approves
with full certificate chain authentication.

Updated-PDD: TRUE
Bug: 250574778
Bug: 251910611
Test: atest InsecureEapNetworkHandlerTest ClientModeImplTest
Test: Integration test with WPA-Enterprise network with an S
device and a T device.

Change-Id: Ib3501f5e04881b11ea9ab52472dd233f2aa82c7a
Merged-In: Ib3501f5e04881b11ea9ab52472dd233f2aa82c7a
(cherry picked from commit fb630e6a13189321d0e83037adc9e7b30dc6d796)
Merged-In: Ib3501f5e04881b11ea9ab52472dd233f2aa82c7a