]> git.ipfire.org Git - thirdparty/hostap.git/commit
SAE: Use open authentication to reassociate for PMKSA caching
authorSergey Matyukevich <sergey.matyukevich.os@quantenna.com>
Fri, 29 Mar 2019 11:22:32 +0000 (11:22 +0000)
committerJouni Malinen <j@w1.fi>
Mon, 15 Apr 2019 22:53:21 +0000 (01:53 +0300)
commiteb3234c07b9e0ae80e27c559dc5cc29feefaed87
tree98b05a0628115277a182e8899c799593992c0bda
parentfe01cd0067e8046c744201f2d55dde3619fc7102
SAE: Use open authentication to reassociate for PMKSA caching

For reassociation with the same AP wpa_supplicant attempts to use cached
PMKSA. For this purpose PMKID is passed in RSNE in (Re)Association
Request frame. In the case of SAE AP, open authentication shall be used
during reassociation. Otherwise cached PMKID becomes invalid after full
SAE authentication.

The previous implementation correctly handles SME-in-wpa_supplicant
cases. However SME-in-driver cases, complete SAE authentication is
performed. As a result, first reassociation attempt fails.

Fix SME-in-driver behavior by reseting authentication algorithm to
WPA_AUTH_ALG_OPEN when reassociating with SAE AP with an existing PMKSA
cache entry.

Signed-off-by: Sergey Matyukevich <sergey.matyukevich.os@quantenna.com>
wpa_supplicant/wpa_supplicant.c