From: Jouni Malinen Date: Thu, 14 Sep 2017 21:36:25 +0000 (+0300) Subject: Fix EAPOL-Key version check for a corner case with Suite B AKM X-Git-Tag: hostap_2_7~1107 X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=9824de57a43318f8db1cc7f926f6d4f311d92054;p=thirdparty%2Fhostap.git Fix EAPOL-Key version check for a corner case with Suite B AKM While the Suite B AKM is not really going to be used with CCMP-128 or GCMP-128 cipher, this corner case could be fixed if it is useful for some testing purposes. Allow that special case to skip the HMAC-SHA1 check based on CCMP/GCMP cipher and use the following AKM-defined check instead. Signed-off-by: Jouni Malinen --- diff --git a/src/ap/wpa_auth.c b/src/ap/wpa_auth.c index e5b66b397..aca687c70 100644 --- a/src/ap/wpa_auth.c +++ b/src/ap/wpa_auth.c @@ -1024,6 +1024,7 @@ void wpa_receive(struct wpa_authenticator *wpa_auth, } if (!wpa_use_aes_cmac(sm) && + !wpa_key_mgmt_suite_b(sm->wpa_key_mgmt) && !wpa_key_mgmt_fils(sm->wpa_key_mgmt) && sm->wpa_key_mgmt != WPA_KEY_MGMT_OWE && sm->wpa_key_mgmt != WPA_KEY_MGMT_DPP &&