From 083f38259c79ee5d1ac443bbfd0146c1fa03978e Mon Sep 17 00:00:00 2001
From: Tobias Brunner <tobias@strongswan.org>
Date: Thu, 14 Jan 2021 18:02:00 +0100
Subject: [PATCH] tls-eap: Conclude EAP method also after processing packets

With TLS 1.3, the server sends its Finished message first, so the
session is complete after processing the client's Finished message,
without having to send anything else (in particular no acknowledgement
as the last message from the client is no fragment).
---
 src/libtls/tls_eap.c | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/libtls/tls_eap.c b/src/libtls/tls_eap.c
index 12d5aed53..196cf92fe 100644
--- a/src/libtls/tls_eap.c
+++ b/src/libtls/tls_eap.c
@@ -394,6 +394,10 @@ METHOD(tls_eap_t, process, status_t,
 	switch (status)
 	{
 		case INVALID_STATE:
+			if (this->tls->is_complete(this->tls))
+			{
+				return SUCCESS;
+			}
 			*out = create_ack(this);
 			return NEED_MORE;
 		case FAILED: