hostap/src/pae
Mike Siedzik a07b8a70b5 mka: New MI should only be generated when peer's key is invalid
Two recent changes to MKA create a situation where a new MI is generated
every time a SAK Use parameter set is decoded.  The first change moved
invalid key detection from ieee802_1x_decode_basic_body() to
ieee802_1x_kay_decode_mpkdu():

  commit db9ca18bbf ("mka: Do not ignore MKPDU parameter set decoding failures")

The second change forces the KaY to generate a new MI when an invalid
key is detected:

  commit a8aeaf41df ("mka: Change MI if key invalid")

The fix is to move generation of a new MI from the old invalid key
detection location to the new location.

Fixes: a8aeaf41df ("mka: Change MI if key invalid")
Signed-off-by: Michael Siedzik <msiedzik@extremenetworks.com>
2019-01-08 01:12:02 +02:00
..
ieee802_1x_cp.c mka: Do not force entry into INIT state on CP state machine creation 2018-12-27 11:33:46 +02:00
ieee802_1x_cp.h mka: Remove unused authorization data from CP 2018-12-27 11:26:27 +02:00
ieee802_1x_kay.c mka: New MI should only be generated when peer's key is invalid 2019-01-08 01:12:02 +02:00
ieee802_1x_kay.h mka: MIB information 2018-12-29 16:52:31 +02:00
ieee802_1x_kay_i.h mka: MIB information 2018-12-29 16:52:31 +02:00
ieee802_1x_key.c mka: Extend CAK/CKN-from-EAP-MSK API to pass in MSK length 2018-12-26 16:44:58 +02:00
ieee802_1x_key.h mka: Extend CAK/CKN-from-EAP-MSK API to pass in MSK length 2018-12-26 16:44:58 +02:00
ieee802_1x_secy_ops.c mka: Debug output cleanup/fix 2018-12-26 16:42:25 +02:00
ieee802_1x_secy_ops.h mka: Fix lowest acceptable Packet Number (LPN) calculation and use 2018-12-26 16:42:25 +02:00
Makefile MACsec: Add PAE implementation 2014-05-09 20:42:44 +03:00