aboutsummaryrefslogtreecommitdiffstats
path: root/src/ap/ieee802_11.c
diff options
context:
space:
mode:
authorJouni Malinen <jouni@qca.qualcomm.com>2016-02-22 14:39:24 (GMT)
committerJouni Malinen <j@w1.fi>2016-02-22 17:53:05 (GMT)
commit4c572281edaa452d57dce6221343fc55efb55390 (patch)
treee9d63e7699a9c9f853db46e2baf6b9e9bd6e8993 /src/ap/ieee802_11.c
parent85c7ea9b4833f4ab42a0dcd0dba7f0f686e4c3bd (diff)
downloadhostap-4c572281edaa452d57dce6221343fc55efb55390.zip
hostap-4c572281edaa452d57dce6221343fc55efb55390.tar.gz
hostap-4c572281edaa452d57dce6221343fc55efb55390.tar.bz2
MBO: Mandate use of PMF for WPA2+MBO association (AP)
If WPA2 and MBO are enabled, PMF needs to be enabled in hostapd configuration. If PMF is optional in the configuration, an MBO STA is required to negotiate use of PMF. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
Diffstat (limited to 'src/ap/ieee802_11.c')
-rw-r--r--src/ap/ieee802_11.c10
1 files changed, 10 insertions, 0 deletions
diff --git a/src/ap/ieee802_11.c b/src/ap/ieee802_11.c
index 3ac225d..685ac9b 100644
--- a/src/ap/ieee802_11.c
+++ b/src/ap/ieee802_11.c
@@ -1714,8 +1714,18 @@ static u16 check_assoc_ies(struct hostapd_data *hapd, struct sta_info *sta,
sta->mb_ies = NULL;
#endif /* CONFIG_FST */
+#ifdef CONFIG_MBO
mbo_ap_check_sta_assoc(hapd, sta, &elems);
+ if (hapd->conf->mbo_enabled && (hapd->conf->wpa & 2) &&
+ elems.mbo && sta->cell_capa && !(sta->flags & WLAN_STA_MFP) &&
+ hapd->conf->ieee80211w != NO_MGMT_FRAME_PROTECTION) {
+ wpa_printf(MSG_INFO,
+ "MBO: Reject WPA2 association without PMF");
+ return WLAN_STATUS_UNSPECIFIED_FAILURE;
+ }
+#endif /* CONFIG_MBO */
+
return WLAN_STATUS_SUCCESS;
}