On Fri, Nov 23, 2018 at 11:25:41AM +0100, Arnout Vandecappelle wrote:
>
>
> On 23/11/2018 11:16, Jouni Malinen wrote:
> > On Thu, Nov 22, 2018 at 07:30:41PM +0100, Arnout Vandecappelle wrote:
> >> The Multi-AP specification allows the backhaul SSID to be Open (while the
> >> fronthaul on which the WPS is done is WPA2). This is of course a completely
> >> silly configuration, but I guess we should support it...
> >
> > Can you please point me to the exact location in the tech spec where you
> > think this is said? I could not find any clear indication of such case
> > being supported.
>
> It's not explicit.
>
> The spec allows WPA2PSK and Open in the setup of a BSS (Multi-AP Specification
> v1.0, Section 7.1, 4th paragraph, last sentence: "A Multi-AP Controller shall
> set the Authentication Type attribute in M2 to indicate WPA2TM-Personal or Open
> System Authentication."
I noticed that, but it was talking only about M1 and M2 Authentication
Type attribute, not about the attributes within the Credential
attribute. If that text is supposed indicate that open (no WPA2) is
allowed for the backhaul, it is not written correctly.. Furthermore,
there are other places in the spec that imply that backhaul is
configured with WPA2-Personal ("the Multi-AP Agent shall configure the
backhaul STA with credentials (i.e. SSID and passphrase)").
> Thus, it is allowed to set WPA2PSK for the fronthaul and Open for the backhaul.
I do not really interpret the tech spec as saying that open should be
supported for the backhaul BSS. It might not explicitly disallow this,
but it does not explicitly allow or define that case either. I really do
not see any reason to implement support for open backhaul BSS based on
the tech spec.
> I kind of agree with that. However, it might be required for certification.
> Marianna, could you check that? Is there a test of WPS where the backhaul has Open?
Please do not discuss confidential certification details on the public
hostap mailing list.
--
Jouni Malinen PGP id EFC895FA
_______________________________________________
Hostap mailing list
Hostap@xxxxxxxxxxxxxxxxxxx
http://lists.infradead.org/mailman/listinfo/hostap
