hostap/src
Michael Braun 96590564d6 FT: Allow PMK-R0 and PMK-R1 for FT-PSK to be generated locally
Station should be able to connect initially without ft_pmk_cache filled,
so the target AP has the PSK available and thus the same information as
the origin AP. Therefore neither caching nor communication between the
APs with respect to PMK-R0 or PMK-R1 or VLANs is required if the target
AP derives the required PMKs locally.

This patch introduces the generation of the required PMKs locally for
FT-PSK. Additionally, PMK-R0 is not stored (and thus pushed) for FT-PSK.

So for FT-PSK networks, no configuration of inter-AP communication is
needed anymore when using ft_psk_generate_local=1 configuration. The
default behavior (ft_psk_generate_local=0) remains to use the pull/push
protocol.

Signed-off-by: Michael Braun <michael-dev@fami-braun.de>
2016-10-09 11:57:56 +03:00
..
ap FT: Allow PMK-R0 and PMK-R1 for FT-PSK to be generated locally 2016-10-09 11:57:56 +03:00
common FT: Allow PMK-R0 and PMK-R1 for FT-PSK to be generated locally 2016-10-09 11:57:56 +03:00
crypto LibreSSL: Fix compatibility for EAP-FAST 2016-10-08 00:36:18 +03:00
drivers mka: Add driver op to get macsec capabilities 2016-10-09 11:30:48 +03:00
eap_common TLS: Split tls_connection_prf() into two functions 2016-05-23 20:40:12 +03:00
eap_peer EAP-pwd: Fix Prep in EAP-pwd-ID/Response when EAP_PWD_PREP_MS is used 2016-10-08 19:43:09 +03:00
eap_server EAP-pwd: Validate Prep field in EAP-pwd-ID/Response 2016-10-08 19:43:36 +03:00
eapol_auth RADIUS: Share a single function for generating session IDs 2016-02-06 17:19:35 +02:00
eapol_supp Fix EAPOL reauth after FT protocol or offloaded PMKSA cache use 2015-11-19 21:16:18 +02:00
fst FST: Fix search for peer's "other" connection 2016-09-08 11:17:45 +03:00
l2_packet l2_packet: Extend bridge workaround RX processing to cover two frames 2016-01-07 13:30:59 +02:00
p2p Fix spelling mistakes in number of comments 2016-09-30 22:45:03 +03:00
pae mka: Add driver op to get macsec capabilities 2016-10-09 11:30:48 +03:00
radius radius: Sanity check for NULL pointer segfault 2016-08-19 12:16:20 +03:00
rsn_supp TDLS: Declare tdls_testing as extern in a header file 2016-06-23 13:31:04 +03:00
tls TLS: Make tls_cert_chain_failure_event() more robust 2015-12-28 18:31:11 +02:00
utils Fix spelling mistakes in number of comments 2016-09-30 22:45:03 +03:00
wps Share a single str_starts() implementation 2016-08-06 12:38:21 +03:00
lib.rules Add QUIET=1 option for make 2014-12-29 15:49:05 +02:00
Makefile FST: Add the Fast Session Transfer (FST) module 2015-07-16 18:26:15 +03:00