aboutsummaryrefslogtreecommitdiffstats
path: root/wpa_supplicant
diff options
context:
space:
mode:
authorJouni Malinen <jouni@qca.qualcomm.com>2016-02-22 14:46:29 (GMT)
committerJouni Malinen <j@w1.fi>2016-02-22 17:53:05 (GMT)
commit940491ce08bde0a03f70c185e93c5791b8c3a575 (patch)
tree7e4ae6a85622b0b68110aa869bd3e4577ec212cf /wpa_supplicant
parent4c572281edaa452d57dce6221343fc55efb55390 (diff)
downloadhostap-940491ce08bde0a03f70c185e93c5791b8c3a575.zip
hostap-940491ce08bde0a03f70c185e93c5791b8c3a575.tar.gz
hostap-940491ce08bde0a03f70c185e93c5791b8c3a575.tar.bz2
MBO: Mandate use of PMF for WPA2+MBO association (STA)
If WPA2 is used, MBO AP must enable PMF. Refuse to select a BSS that has MBO and WPA2 enabled without PMF. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
Diffstat (limited to 'wpa_supplicant')
-rw-r--r--wpa_supplicant/events.c10
1 files changed, 10 insertions, 0 deletions
diff --git a/wpa_supplicant/events.c b/wpa_supplicant/events.c
index 3c3b559..318aad7 100644
--- a/wpa_supplicant/events.c
+++ b/wpa_supplicant/events.c
@@ -574,6 +574,16 @@ static int wpa_supplicant_ssid_bss_match(struct wpa_supplicant *wpa_s,
" skip RSN IE - no mgmt frame protection enabled but AP requires it");
break;
}
+#ifdef CONFIG_MBO
+ if (!(ie.capabilities & WPA_CAPABILITY_MFPC) &&
+ wpas_mbo_get_bss_attr(bss, MBO_ATTR_ID_AP_CAPA_IND) &&
+ wpas_get_ssid_pmf(wpa_s, ssid) !=
+ NO_MGMT_FRAME_PROTECTION) {
+ wpa_dbg(wpa_s, MSG_DEBUG,
+ " skip RSN IE - no mgmt frame protection enabled on MBO AP");
+ break;
+ }
+#endif /* CONFIG_MBO */
wpa_dbg(wpa_s, MSG_DEBUG, " selected based on RSN IE");
return 1;