Support EAP-TLS in Moonshot (requires OpenSSL)
remember to duplicate clientCertificate
Allow certificate/private key to contain binary data
remove ~/.gss_eap_id PKCS#12 directive for now
channel binding WIP: add chbind_data, chbind_data_len to eap_peer_config
eap channel binding support.
eap channel bindings: use ukerna vsa to encapsulate ttls chbind messages.
EAP Channel binding
Eap channel bindings fixes

Only specify GSS_C_MUTUAL_FLAG return flag on successful eap channel
binding.
Fix pointer signedness issues
Fix libeap/src/utils/common.h to support windows+ipv6.

Use winsock2.h + ws2tcpip.h instead of winsock.h

Signed-off-by: Kevin Wasserman <kevin.wasserman@painless-security.com>
Simplify and document radius_utils.c and radius_utils.h
Eap channel bindings cleanup

Simplify radius buffer construction and parse service-specifics correctly.
Fix bug in eap_ttls_avp_encapsulate() when >248 bytes are encapsulated.

src pointer wasn't being advanced, so the first 248 bytes were duplicated
in place of the remainder of the message.
Set GSS_C_MUTUAL_FLAG only on successful channel binding.

Previously, GSS_C_MUTUAL_FLAG was always set in the initiator context;
CTX_FLAG_EAP_CHBIND_ACCEPT was also set on successful channel binding.
Then GSS_C_MUTUAL_FLAG was properly specified in the return flags to
gssEapInitSecContext() depending on whether CTX_FLAG_EAP_CHBIND was set,
but eapGssSmInitGssFlags() was improperly sending GSS_C_MUTUAL_FLAG to
the acceptor even when no channel binding had occured.
chbind: use IETF attributes

Use non-VSA IETF attributes for channel binding. Also, permit more
attributes in response than request.
libeap: use attribute 135 not 134 for ttls chbind
libeap: ttls: encapsulate using RADIUS VSA

It turns out that older version of FreeRADIUS will fail if they
receive a diameter VSA not in their dictionary.  A RADIUS VSA is fine
though.  This does not comply with the TTLS spec, but is the best we
can do in terms of interoperability, so do that.
libeap: Use AM_CFLAGS not CFLAGS
ttls: chbind_hdr is packed