From: Jouni Malinen Date: Mon, 30 Jul 2018 21:31:16 +0000 (+0300) Subject: HS 2.0: Allow CCMP as group cipher for OSEN single SSID case X-Git-Tag: hostap_2_7~233 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=c1721f05a0675704aed7470fd4778fcb474f3a92;p=thirdparty%2Fhostap.git HS 2.0: Allow CCMP as group cipher for OSEN single SSID case When OSEN is used in the BSS that is shared both for production data and OSU uses, the group cipher might be either GTK_NOT_USED (like in Rel 2 OSEN) or CCMP. Modify hs20-osu-client to allow both these group ciphers to be used when requesting OSEN connection. Signed-off-by: Jouni Malinen --- diff --git a/hs20/client/osu_client.c b/hs20/client/osu_client.c index de7006545..b0567039f 100644 --- a/hs20/client/osu_client.c +++ b/hs20/client/osu_client.c @@ -2151,7 +2151,7 @@ static int osu_connect(struct hs20_osu_client *ctx, const char *bssid, if (set_network(ifname, id, "proto", "OSEN") < 0 || set_network(ifname, id, "key_mgmt", "OSEN") < 0 || set_network(ifname, id, "pairwise", "CCMP") < 0 || - set_network(ifname, id, "group", "GTK_NOT_USED") < 0 || + set_network(ifname, id, "group", "GTK_NOT_USED CCMP") < 0 || set_network(ifname, id, "eap", "WFA-UNAUTH-TLS") < 0 || set_network(ifname, id, "ocsp", "2") < 0 || set_network_quoted(ifname, id, "identity", osu_nai) < 0 ||