From c1721f05a0675704aed7470fd4778fcb474f3a92 Mon Sep 17 00:00:00 2001 From: Jouni Malinen Date: Tue, 31 Jul 2018 00:31:16 +0300 Subject: [PATCH] HS 2.0: Allow CCMP as group cipher for OSEN single SSID case When OSEN is used in the BSS that is shared both for production data and OSU uses, the group cipher might be either GTK_NOT_USED (like in Rel 2 OSEN) or CCMP. Modify hs20-osu-client to allow both these group ciphers to be used when requesting OSEN connection. Signed-off-by: Jouni Malinen --- hs20/client/osu_client.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/hs20/client/osu_client.c b/hs20/client/osu_client.c index de7006545..b0567039f 100644 --- a/hs20/client/osu_client.c +++ b/hs20/client/osu_client.c @@ -2151,7 +2151,7 @@ static int osu_connect(struct hs20_osu_client *ctx, const char *bssid, if (set_network(ifname, id, "proto", "OSEN") < 0 || set_network(ifname, id, "key_mgmt", "OSEN") < 0 || set_network(ifname, id, "pairwise", "CCMP") < 0 || - set_network(ifname, id, "group", "GTK_NOT_USED") < 0 || + set_network(ifname, id, "group", "GTK_NOT_USED CCMP") < 0 || set_network(ifname, id, "eap", "WFA-UNAUTH-TLS") < 0 || set_network(ifname, id, "ocsp", "2") < 0 || set_network_quoted(ifname, id, "identity", osu_nai) < 0 ||