]> git.ipfire.org Git - thirdparty/hostap.git/commit
SAE: Fix PMKID in EAPOL-Key msg 1/4
authorJouni Malinen <jouni@codeaurora.org>
Fri, 23 Mar 2018 15:45:44 +0000 (17:45 +0200)
committerJouni Malinen <j@w1.fi>
Fri, 23 Mar 2018 16:44:48 +0000 (18:44 +0200)
commit9d94e4bb6bbbcd9db336c82ac477b81644aff546
treed65b7ea1dfd211680e55a1ad8b65dd0fb51f6163
parenta03f9d17ea67ac3c3d683f3717e436f4b6c93e37
SAE: Fix PMKID in EAPOL-Key msg 1/4

Previously, the association that used SAE authentication ended up
recalculating the PMKID for EAPOL-Key msg 1/4 using incorrect
PMK-to-PMKID derivation instead of using the previously derived PMKID
from SAE. The correct PMKID was used only when going through PMKSA
caching exchange with a previously derived PMKSA from SAE.

Fix this by storing the SAE PMKID into the state machine entry for the
initial SAE authentication case when there is no explicit PMKSA entry
attached to the station.

Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
src/ap/ieee802_11.c
src/ap/wpa_auth.c
src/ap/wpa_auth.h
src/ap/wpa_auth_i.h