]> git.ipfire.org Git - thirdparty/hostap.git/commitdiff
mesh: Do not allow open mode key in 6 GHz
authorSharadanand Karanjkar <skaranjkar@datto.com>
Tue, 5 Apr 2022 13:51:18 +0000 (15:51 +0200)
committerJouni Malinen <j@w1.fi>
Mon, 28 Nov 2022 16:43:19 +0000 (18:43 +0200)
IEEE Std 802.11ax-2021, 12.12 explicitly disallows use of Open System
authentication without encryption on the 6 GHz band.

Signed-off-by: Sharadanand Karanjkar <skaranjkar@datto.com>
wpa_supplicant/config_file.c

index dbc04e13d59ed82553279ea79390e8f6195d5cf8..0b34229a5a44febdd7f527a15b7d1b2ebf03e5ae 100644 (file)
@@ -53,6 +53,13 @@ static int wpa_config_validate_network(struct wpa_ssid *ssid, int line)
                ssid->group_cipher &= ~WPA_CIPHER_CCMP;
        }
 
+       if (is_6ghz_freq(ssid->frequency) && ssid->mode == WPAS_MODE_MESH &&
+           ssid->key_mgmt == WPA_KEY_MGMT_NONE) {
+               wpa_printf(MSG_ERROR,
+                          "Line %d: key_mgmt for mesh network in 6 GHz should be SAE",
+                          line);
+               errors++;
+       }
        if (ssid->mode == WPAS_MODE_MESH &&
            (ssid->key_mgmt != WPA_KEY_MGMT_NONE &&
            ssid->key_mgmt != WPA_KEY_MGMT_SAE)) {