SAE: Require PMKID match to PMKSA with SAE-EXT-KEY

This check was supposed to be done for all SAE cases other than FT
roaming.

Signed-off-by: Jouni Malinen <j@w1.fi>

diff --git a/src/ap/wpa_auth_ie.c b/src/ap/wpa_auth_ie.c
index 283b9a10f2f62b36d34e0dbcfd970cdaafaaf636..a5f2861c97c9ac2c8ccc4d044b1bae9b53dc6859 100644 (file)
--- a/src/ap/wpa_auth_ie.c
+++ b/src/ap/wpa_auth_ie.c
@@ -1014,7 +1014,8 @@ wpa_validate_wpa_ie(struct wpa_authenticator *wpa_auth,
        }
 
 #ifdef CONFIG_SAE
-       if (sm->wpa_key_mgmt == WPA_KEY_MGMT_SAE) {
+       if (sm->wpa_key_mgmt == WPA_KEY_MGMT_SAE ||
+           sm->wpa_key_mgmt == WPA_KEY_MGMT_SAE_EXT_KEY) {
                u64 drv_flags = 0;
                u64 drv_flags2 = 0;
                bool ap_sae_offload = false;