HS 2.0: Allow CCMP as group cipher for OSEN single SSID case

When OSEN is used in the BSS that is shared both for production data and
OSU uses, the group cipher might be either GTK_NOT_USED (like in Rel 2
OSEN) or CCMP. Modify hs20-osu-client to allow both these group ciphers
to be used when requesting OSEN connection.

Signed-off-by: Jouni Malinen <jouni@codeaurora.org>

diff --git a/hs20/client/osu_client.c b/hs20/client/osu_client.c
index de70065456a840b611f5ecc3b32ef35f0b662d55..b0567039f4998d3684531ccef2cac8f81af1bc7f 100644 (file)
--- a/hs20/client/osu_client.c
+++ b/hs20/client/osu_client.c
@@ -2151,7 +2151,7 @@ static int osu_connect(struct hs20_osu_client *ctx, const char *bssid,
                if (set_network(ifname, id, "proto", "OSEN") < 0 ||
                    set_network(ifname, id, "key_mgmt", "OSEN") < 0 ||
                    set_network(ifname, id, "pairwise", "CCMP") < 0 ||
-                   set_network(ifname, id, "group", "GTK_NOT_USED") < 0 ||
+                   set_network(ifname, id, "group", "GTK_NOT_USED CCMP") < 0 ||
                    set_network(ifname, id, "eap", "WFA-UNAUTH-TLS") < 0 ||
                    set_network(ifname, id, "ocsp", "2") < 0 ||
                    set_network_quoted(ifname, id, "identity", osu_nai) < 0 ||