aboutsummaryrefslogtreecommitdiffstats
path: root/src/ap/wpa_auth_glue.c
diff options
context:
space:
mode:
authorJouni Malinen <j@w1.fi>2017-12-27 16:26:31 (GMT)
committerJouni Malinen <j@w1.fi>2017-12-27 16:27:58 (GMT)
commitba3d435fe43495911d25b52522d88a98c399b527 (patch)
treeab8093030afb735538096edce9e029e22f5a6cf0 /src/ap/wpa_auth_glue.c
parent7a27e5e03ed2f6625e23d8efc5cc6f0299464c92 (diff)
downloadhostap-ba3d435fe43495911d25b52522d88a98c399b527.zip
hostap-ba3d435fe43495911d25b52522d88a98c399b527.tar.gz
hostap-ba3d435fe43495911d25b52522d88a98c399b527.tar.bz2
SAE: Add option to require MFP for SAE associations
The new hostapd.conf parameter sae_require_pmf=<0/1> can now be used to enforce negotiation of MFP for all associations that negotiate use of SAE. This is used in cases where SAE-capable devices are known to be MFP-capable and the BSS is configured with optional MFP (ieee80211w=1) for legacy support. The non-SAE stations can connect without MFP while SAE stations are required to negotiate MFP if sae_require_mfp=1. Signed-off-by: Jouni Malinen <j@w1.fi>
Diffstat (limited to 'src/ap/wpa_auth_glue.c')
-rw-r--r--src/ap/wpa_auth_glue.c1
1 files changed, 1 insertions, 0 deletions
diff --git a/src/ap/wpa_auth_glue.c b/src/ap/wpa_auth_glue.c
index 98133a0..e2a4201 100644
--- a/src/ap/wpa_auth_glue.c
+++ b/src/ap/wpa_auth_glue.c
@@ -59,6 +59,7 @@ static void hostapd_wpa_auth_conf(struct hostapd_bss_config *conf,
#ifdef CONFIG_IEEE80211W
wconf->ieee80211w = conf->ieee80211w;
wconf->group_mgmt_cipher = conf->group_mgmt_cipher;
+ wconf->sae_require_mfp = conf->sae_require_mfp;
#endif /* CONFIG_IEEE80211W */
#ifdef CONFIG_IEEE80211R_AP
wconf->ssid_len = conf->ssid.ssid_len;