aboutsummaryrefslogtreecommitdiffstats
path: root/wpa_supplicant/wpas_kay.h
diff options
context:
space:
mode:
authorSabrina Dubroca <sd@queasysnail.net>2016-11-02 15:38:35 (GMT)
committerJouni Malinen <j@w1.fi>2016-11-19 22:35:08 (GMT)
commitad51731abf06efb284d020578eb34e7b1daeb23e (patch)
tree35218421991dfb24727757095476d39017e4fca8 /wpa_supplicant/wpas_kay.h
parent5acbf22bb0309d5b4f04157d5c86ff06d53839db (diff)
downloadhostap-ad51731abf06efb284d020578eb34e7b1daeb23e.zip
hostap-ad51731abf06efb284d020578eb34e7b1daeb23e.tar.gz
hostap-ad51731abf06efb284d020578eb34e7b1daeb23e.tar.bz2
wpa_supplicant: Allow pre-shared (CAK,CKN) pair for MKA
This enables configuring key_mgmt=NONE + mka_ckn + mka_cak. This allows wpa_supplicant to work in a peer-to-peer mode, where peers are authenticated by the pre-shared (CAK,CKN) pair. In this mode, peers can act as key server to distribute keys for the MACsec instances. This is what some MACsec switches support, and even without HW support, it's a convenient way to setup a network. Signed-off-by: Sabrina Dubroca <sd@queasysnail.net>
Diffstat (limited to 'wpa_supplicant/wpas_kay.h')
-rw-r--r--wpa_supplicant/wpas_kay.h10
1 files changed, 10 insertions, 0 deletions
diff --git a/wpa_supplicant/wpas_kay.h b/wpa_supplicant/wpas_kay.h
index b7236d0..81f8e0c 100644
--- a/wpa_supplicant/wpas_kay.h
+++ b/wpa_supplicant/wpas_kay.h
@@ -17,6 +17,9 @@ void * ieee802_1x_notify_create_actor(struct wpa_supplicant *wpa_s,
const u8 *peer_addr);
void ieee802_1x_dealloc_kay_sm(struct wpa_supplicant *wpa_s);
+void * ieee802_1x_create_preshared_mka(struct wpa_supplicant *wpa_s,
+ struct wpa_ssid *ssid);
+
#else /* CONFIG_MACSEC */
static inline int ieee802_1x_alloc_kay_sm(struct wpa_supplicant *wpa_s,
@@ -36,6 +39,13 @@ static inline void ieee802_1x_dealloc_kay_sm(struct wpa_supplicant *wpa_s)
{
}
+static inline void *
+ieee802_1x_create_preshared_mka(struct wpa_supplicant *wpa_s,
+ struct wpa_ssid *ssid)
+{
+ return 0;
+}
+
#endif /* CONFIG_MACSEC */
#endif /* WPAS_KAY_H */