]> git.ipfire.org Git - thirdparty/hostap.git/commit
FT: Do not expose GTK/IGTK in FT Reassociation Response frame in OSEN
authorJouni Malinen <jouni@codeaurora.org>
Fri, 29 May 2020 18:23:09 +0000 (21:23 +0300)
committerJouni Malinen <j@w1.fi>
Fri, 29 May 2020 18:25:02 +0000 (21:25 +0300)
commit2d6cc0e67066ce76a01d776cbf9f1281adf2ac9f
treec3e9f2ab9d89540c23c578351aa12cbddbe64bcb
parenta998337895714a71381d554d70b9c8dbb36bce27
FT: Do not expose GTK/IGTK in FT Reassociation Response frame in OSEN

Do not include the actual GTK/IGTK value in FT protocol cases in OSEN or
with DGAF disabled (Hotspot 2.0). This was already the case for the
EAPOL-Key cases of providing GTK/IGTK, but the FT protocol case was
missed. OSEN cannot really use FT, so that part is not impacted, but it
would be possible to enable FT in a Hotspot 2.0 network that has DGAF
disabled.

Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
src/ap/wpa_auth_ft.c