jeltz/hostap
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

wpa_supplicant AP mode configuration for Transition Disable KDE

Browse source 
Allow AP mode network profile in wpa_supplicant to be configured to
advertise Transition Disable DKE.

Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
This commit is contained in:
Jouni Malinen 2020-03-26 00:18:06 +02:00 committed by Jouni Malinen
parent 9d1857cf35
commit 96686e637c
4 changed files with 24 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
wpa_supplicant/ap.c
View file

@ -607,6 +607,8 @@ no_wps:
bss->ftm_responder = wpa_s->conf->ftm_responder;
bss->ftm_initiator = wpa_s->conf->ftm_initiator;
bss->transition_disable = ssid->transition_disable;
return 0;
}

1
wpa_supplicant/config.c
View file

@ -2577,6 +2577,7 @@ static const struct parse_data ssid_fields[] = {
{ INT_RANGE(multi_ap_backhaul_sta, 0, 1) },
{ INT_RANGE(ft_eap_pmksa_caching, 0, 1) },
{ INT_RANGE(beacon_prot, 0, 1) },
{ INT_RANGE(transition_disable, 0, 255) },
};
#undef OFFSET

1
wpa_supplicant/config_file.c
View file

@ -935,6 +935,7 @@ static void wpa_config_write_network(FILE *f, struct wpa_ssid *ssid)
INT(multi_ap_backhaul_sta);
INT(ft_eap_pmksa_caching);
INT(beacon_prot);
INT(transition_disable);
#ifdef CONFIG_HT_OVERRIDES
INT_DEF(disable_ht, DEFAULT_DISABLE_HT);
INT_DEF(disable_ht40, DEFAULT_DISABLE_HT40);

20
wpa_supplicant/config_ssid.h
View file

@ -1070,6 +1070,26 @@ struct wpa_ssid {
* enabled.
*/
int beacon_prot;
/**
* transition_disable - Transition Disable indication
* The AP can notify authenticated stations to disable transition mode
* in their network profiles when the network has completed transition
* steps, i.e., once sufficiently large number of APs in the ESS have
* been updated to support the more secure alternative. When this
* indication is used, the stations are expected to automatically
* disable transition mode and less secure security options. This
* includes use of WEP, TKIP (including use of TKIP as the group
* cipher), and connections without PMF.
* Bitmap bits:
* bit 0 (0x01): WPA3-Personal (i.e., disable WPA2-Personal = WPA-PSK
* and only allow SAE to be used)
* bit 1 (0x02): SAE-PK (disable SAE without use of SAE-PK)
* bit 2 (0x04): WPA3-Enterprise (move to requiring PMF)
* bit 3 (0x08): Enhanced Open (disable use of open network; require
* OWE)
*/
u8 transition_disable;
};
#endif /* CONFIG_SSID_H */