On Tue, Aug 15, 2017 at 05:21:03PM +0200, Michael Braun wrote: > IEEE 802.1X-2010 Section 9.3.1 restricts CKN > > MKA places no restriction on the format of the CKN, save that it comprise > > an integral number of octets, between 1 and 32 (inclusive), and that all > > potential members of the CA use the same CKN. No further constraints are > > placed onthe CKNs used with PSKs, ... . > > Hence do not require a 32 byte long CKN but instead allow a shorter ckn > to be configured. > > This fixes interoperability with some Aruba Switches, that do not accept > 32 byte long ckn (only shorter ones). Thanks, applied. -- Jouni Malinen PGP id EFC895FA _______________________________________________ Hostap mailing list Hostap@xxxxxxxxxxxxxxxxxxx http://lists.infradead.org/mailman/listinfo/hostap
