aboutsummaryrefslogtreecommitdiffstats
path: root/wpa_supplicant/config_file.c
diff options
context:
space:
mode:
authorJouni Malinen <jouni@qca.qualcomm.com>2017-12-08 15:05:40 (GMT)
committerJouni Malinen <j@w1.fi>2018-01-21 09:28:53 (GMT)
commit9e834fc648db2e181aaa72663db09c757037bd8e (patch)
treea35d8e6d22156c742e9de4cea74f15830eb5e5d4 /wpa_supplicant/config_file.c
parentb6b5e3554a73006eefaf5ce83464ec996e944839 (diff)
downloadhostap-9e834fc648db2e181aaa72663db09c757037bd8e.zip
hostap-9e834fc648db2e181aaa72663db09c757037bd8e.tar.gz
hostap-9e834fc648db2e181aaa72663db09c757037bd8e.tar.bz2
EAP-SIM/AKA: Separate identity for MK derivation
This allows a separate configuration parameter (imsi_identity) to be used in EAP-SIM/AKA/AKA' profiles to override the identity used in MK derivation for the case where the identity is expected to be from the last AT_IDENTITY attribute (or EAP-Response/Identity if AT_IDENTITY was not used). This may be needed to avoid sending out an unprotected permanent identity information over-the-air and if the EAP-SIM/AKA server ends up using a value based on the real IMSI during the internal key derivation operation (that does not expose the data to others). Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
Diffstat (limited to 'wpa_supplicant/config_file.c')
-rw-r--r--wpa_supplicant/config_file.c1
1 files changed, 1 insertions, 0 deletions
diff --git a/wpa_supplicant/config_file.c b/wpa_supplicant/config_file.c
index 370fe2a..6f2161e 100644
--- a/wpa_supplicant/config_file.c
+++ b/wpa_supplicant/config_file.c
@@ -760,6 +760,7 @@ static void wpa_config_write_network(FILE *f, struct wpa_ssid *ssid)
write_eap(f, ssid);
STR(identity);
STR(anonymous_identity);
+ STR(imsi_identity);
STR(password);
STR(ca_cert);
STR(ca_path);