]> git.ipfire.org Git - thirdparty/hostap.git/commit
mka: Fix an incorrect update of participant->to_use_sak
authorBadrish Adiga H R <badrish.adigahr@gmail.com>
Fri, 6 Jan 2017 12:17:51 +0000 (17:47 +0530)
committerJouni Malinen <j@w1.fi>
Mon, 6 Feb 2017 18:37:58 +0000 (20:37 +0200)
commit7faf403f9fb39fea9a0545025cc284ef05e022a7
tree19112212c6bdf6285006979cb8a71d2934beafb0
parent00e0f0b010d1ede25642c21f0256e27a13b15bb1
mka: Fix an incorrect update of participant->to_use_sak

API ieee802_1x_mka_decode_dist_sak_body() wrongly puts
participant->to_use_sak to TRUE, if Distributed SAK Parameter Set of
length 0 is received. In MACsec PSK mode, this stale incorrect value can
create problems while re-establishing CA. In MACsec PSK mode, CA goes
down if interface goes down and ideally we should be able to
re-establish the CA once interface comes up.

Signed-off-by: Badrish Adiga H R <badrish.adigahr@gmail.com>
src/pae/ieee802_1x_kay.c