DGNum/hostapd
6
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions

MACsec: Support GCM-AES-256 cipher suite

Browse source 
Allow macsec_csindex to be configured and select the cipher suite when
the participant acts as a key server.

Signed-off-by: leiwei <quic_leiwei@quicinc.com>
This commit is contained in:
leiwei 2021-11-15 18:22:19 +08:00 • committed by Jouni Malinen
parent 1e0af0cc7e
commit 46c635910a
11 changed files with 54 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

7
src/ap/ap_config.h
View file

@ -848,6 +848,13 @@ struct hostapd_bss_config {
*/
int mka_priority;
/**
* macsec_csindex - Cipher suite index for MACsec
*
* Range: 0-1 (default: 0)
*/
int macsec_csindex;
/**
* mka_ckn - MKA pre-shared CKN
*/

4
src/ap/wpa_auth_kay.c
View file

@ -329,7 +329,9 @@ int ieee802_1x_alloc_kay_sm_hapd(struct hostapd_data *hapd,
hapd->conf->macsec_replay_protect,
hapd->conf->macsec_replay_window,
hapd->conf->macsec_port,
hapd->conf->mka_priority, hapd->conf->iface,
hapd->conf->mka_priority,
hapd->conf->macsec_csindex,
hapd->conf->iface,
hapd->own_addr);
/* ieee802_1x_kay_init() frees kay_ctx on failure */
if (!res)