From: Veerendranath Jakkam Date: Wed, 2 Sep 2020 11:55:15 +0000 (+0530) Subject: OCV: Allow connecting MFP incapable OCV STA when OCV is disabled in AP X-Git-Tag: hostap_2_10~964 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=a71b100c3bf306016b91d3baf3ae48c6bb8720fc;p=thirdparty%2Fhostap.git OCV: Allow connecting MFP incapable OCV STA when OCV is disabled in AP Skip check to mandate MFP capability for OCV enabled STA when OCV is disabled in AP. This is to improve interoperability with STAs in which OCV capability is advertised incorrectly without advertising MFP when OCV is disabled in AP. Signed-off-by: Veerendranath Jakkam --- diff --git a/src/ap/wpa_auth_ie.c b/src/ap/wpa_auth_ie.c index a7e6354a5..3a16997cf 100644 --- a/src/ap/wpa_auth_ie.c +++ b/src/ap/wpa_auth_ie.c @@ -808,7 +808,7 @@ wpa_validate_wpa_ie(struct wpa_authenticator *wpa_auth, #endif /* CONFIG_SAE */ #ifdef CONFIG_OCV - if ((data.capabilities & WPA_CAPABILITY_OCVC) && + if (wpa_auth->conf.ocv && (data.capabilities & WPA_CAPABILITY_OCVC) && !(data.capabilities & WPA_CAPABILITY_MFPC)) { wpa_printf(MSG_DEBUG, "Management frame protection required with OCV, but client did not enable it");