]> git.ipfire.org Git - thirdparty/hostap.git/commit
EAP-SIM/AKA: Do not allow anonymous@realm "pseudonym" to be cleared
authorJouni Malinen <jouni@codeaurora.org>
Wed, 31 Jul 2019 19:33:04 +0000 (22:33 +0300)
committerJouni Malinen <j@w1.fi>
Wed, 31 Jul 2019 19:33:04 +0000 (22:33 +0300)
commitc1b2365214beacd834811fad2774e03177e008ce
tree94e8ab3f8f3823ad379646800a5c08036e5a8a0a
parentcc2fd94258c528a576c94c2fe133a2c47c965b84
EAP-SIM/AKA: Do not allow anonymous@realm "pseudonym" to be cleared

If the EAP-SIM/AKA server does not provide a new pseudonym and the
locally configured "pseudonym" in anonymous_identity is actually an
anonymous identitity instead of a real EAP-SIM/AKA pseudonym, do not
clear the anonymous_identity network profile parameter. This is needed
to avoid forgetting the anonymous identity when going through
EAP-SIM/AKA authentication and then reverting back to using IMSI-based
(e.g., encrypted) identity.

Fixes: 4df4133917ab ("EAP-SIM/AKA: Add support for anonymous@realm")
Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
src/eap_peer/eap_aka.c
src/eap_peer/eap_sim.c