SAE-PK: Allow SAE authentication without PK to be disabled

The new wpa_supplicant network profile parameter sae_pk_only=1 can now
be used to disable use of SAE authentication without SAE-PK.

Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
This commit is contained in:
Jouni Malinen 2020-06-06 11:42:59 +03:00 committed by Jouni Malinen
parent b96a4fa996
commit 1c846d647e
6 changed files with 42 additions and 3 deletions

View file

@ -1472,6 +1472,11 @@ fast_reauth=1
# 2: do not allow PFS to be used
#dpp_pfs=0
# SAE-PK only mode (disable transition mode)
# 0: enable transition mode (allow SAE authentication without SAE-PK)
# 1: disable transition mode (allow SAE authentication only with SAE-PK)
#sae_pk_only=0
# MAC address policy
# 0 = use permanent MAC address
# 1 = use random MAC address for each ESS connection