]> git.ipfire.org Git - thirdparty/hostap.git/commit
FT: Allow wpa_supplicant to be configured to prepend PMKR1Name
authorJouni Malinen <j@w1.fi>
Sat, 3 Feb 2024 18:13:46 +0000 (20:13 +0200)
committerJouni Malinen <j@w1.fi>
Sat, 3 Feb 2024 18:58:01 +0000 (20:58 +0200)
commit8fa52a797496a01f50e728facce2a55d8c386959
tree4408286cec53026c50a4dce212c46ca0e68034f4
parent9929426b92d0189b6efbd3a4e74a3e7ca59bd023
FT: Allow wpa_supplicant to be configured to prepend PMKR1Name

The standard is somewhat unclear on whether the PMKIDs used in
(Re)Association Request frame (i.e., potential PMKIDs that could be used
for PMKSA caching during the initial mobility domain association) are to
be retained or removed when generating EAPOL-Key msg 2/4.

wpa_supplicant has replaced the PMKID List contents from (Re)Association
Request frame with PMKR1Name when generating EAPOL-Key msg 2/4 for FT.
Allow it to be configured (ft_prepend_pmkid=1) to prepend the PMKR1Name
without removing the PMKIDs from (Re)Association Request frame.

Signed-off-by: Jouni Malinen <j@w1.fi>
13 files changed:
src/ap/ieee802_11.c
src/ap/wpa_auth.c
src/common/wpa_common.c
src/common/wpa_common.h
src/rsn_supp/wpa.c
src/rsn_supp/wpa.h
src/rsn_supp/wpa_i.h
wlantest/rx_mgmt.c
wpa_supplicant/config.c
wpa_supplicant/config.h
wpa_supplicant/config_file.c
wpa_supplicant/sme.c
wpa_supplicant/wpa_supplicant.c