P2P: Allow per-device PSK to be assigned
"wpa_cli p2p_set per_sta_psk <0/1>" can now be used to disable/enable use of per-device PSKs in P2P groups. This is disabled by default. When enabled, a default passphrase is still generated by the GO for legacy stations, but all P2P and non-P2P devices using WPS will get a unique PSK. This gives more protection for the P2P group by preventing clients from being able to derive the unicast keys used by other clients. This is also a step towards allowing specific clients to be removed from a group reliably without having to tear down the full group to do so. Signed-hostap: Jouni Malinen <j@w1.fi>
This commit is contained in:
parent
698e921b9e
commit
05766ed8de
8 changed files with 26 additions and 4 deletions
|
@ -1145,6 +1145,7 @@ int hostapd_init_wps(struct hostapd_data *hapd,
|
|||
cfg.dualband = 1;
|
||||
if (cfg.dualband)
|
||||
wpa_printf(MSG_DEBUG, "WPS: Dualband AP");
|
||||
cfg.force_per_enrollee_psk = conf->force_per_enrollee_psk;
|
||||
|
||||
wps->registrar = wps_registrar_init(wps, &cfg);
|
||||
if (wps->registrar == NULL) {
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue