MFP: Require MFP is it is enabled and AP scan shows support for it
When using ap_scan=1, we know before the association request that MFP will be supported, so we can as well require it. This helps mac80211 in configuring whether to enable MFP.
This commit is contained in:
parent
c3469d1534
commit
97d3497e29
1 changed files with 12 additions and 0 deletions
|
@ -1122,6 +1122,18 @@ void wpa_supplicant_associate(struct wpa_supplicant *wpa_s,
|
||||||
params.mgmt_frame_protection = MGMT_FRAME_PROTECTION_REQUIRED;
|
params.mgmt_frame_protection = MGMT_FRAME_PROTECTION_REQUIRED;
|
||||||
break;
|
break;
|
||||||
}
|
}
|
||||||
|
if (ssid->ieee80211w != NO_IEEE80211W && bss) {
|
||||||
|
const u8 *rsn = wpa_scan_get_ie(bss, WLAN_EID_RSN);
|
||||||
|
struct wpa_ie_data ie;
|
||||||
|
if (rsn && wpa_parse_wpa_ie(rsn, 2 + rsn[1], &ie) == 0 &&
|
||||||
|
ie.capabilities &
|
||||||
|
(WPA_CAPABILITY_MFPC | WPA_CAPABILITY_MFPR)) {
|
||||||
|
wpa_printf(MSG_DEBUG, "WPA: Selected AP supports MFP: "
|
||||||
|
"require MFP");
|
||||||
|
params.mgmt_frame_protection =
|
||||||
|
MGMT_FRAME_PROTECTION_REQUIRED;
|
||||||
|
}
|
||||||
|
}
|
||||||
#endif /* CONFIG_IEEE80211W */
|
#endif /* CONFIG_IEEE80211W */
|
||||||
|
|
||||||
if (wpa_s->use_client_mlme)
|
if (wpa_s->use_client_mlme)
|
||||||
|
|
Loading…
Reference in a new issue