aboutsummaryrefslogtreecommitdiffstats
path: root/wpa_supplicant/config.c
diff options
context:
space:
mode:
authorJouni Malinen <j@w1.fi>2015-06-20 15:25:15 (GMT)
committerJouni Malinen <j@w1.fi>2015-06-20 20:04:31 (GMT)
commitce8963fc9f197771cd51ba2834fbdf711189641a (patch)
tree5952ed65397af652c28870aa6d8f4b7947ff268c /wpa_supplicant/config.c
parent664093b55be40d86b114102fea57031c90addc1a (diff)
downloadhostap-ce8963fc9f197771cd51ba2834fbdf711189641a.zip
hostap-ce8963fc9f197771cd51ba2834fbdf711189641a.tar.gz
hostap-ce8963fc9f197771cd51ba2834fbdf711189641a.tar.bz2
Remove WEP40/WEP104 cipher suite support for WPA/WPA2
As far as IEEE 802.11 standard is concerned, WEP is deprecated, but at least in theory, allowed as a group cipher. This option is unlikely to be deployed anywhere and to clean up the implementation, we might as well remove all support for this combination. Signed-off-by: Jouni Malinen <j@w1.fi>
Diffstat (limited to 'wpa_supplicant/config.c')
-rw-r--r--wpa_supplicant/config.c7
1 files changed, 7 insertions, 0 deletions
diff --git a/wpa_supplicant/config.c b/wpa_supplicant/config.c
index 239c3e8..4d801cc 100644
--- a/wpa_supplicant/config.c
+++ b/wpa_supplicant/config.c
@@ -967,6 +967,13 @@ static int wpa_config_parse_group(const struct parse_data *data,
val = wpa_config_parse_cipher(line, value);
if (val == -1)
return -1;
+
+ /*
+ * Backwards compatibility - filter out WEP ciphers that were previously
+ * allowed.
+ */
+ val &= ~(WPA_CIPHER_WEP104 | WPA_CIPHER_WEP40);
+
if (val & ~WPA_ALLOWED_GROUP_CIPHERS) {
wpa_printf(MSG_ERROR, "Line %d: not allowed group cipher "
"(0x%x).", line, val);