On Tue, Apr 16, 2019 at 10:38:30AM -0700, James Prestwood wrote: > After a FILS authentication, I've noticed that the 'wpa_ptk_rekey' > setting has no effect. I do not see a PTK rekey happen at all. Setting > 'wpa_group_rekey' works as expected. I'm guessing the ptk rekey timer > likely got removed after the full EAP run, but never got set again > after FILS? Yes, that was one of the reasons, but fixing that was not sufficient. Some of the key derivation steps are quite a bit different in associations started with FILS authentication (and FT protocol for that matter). I think I managed to fix all those cases now in v2.8 or well at least all the ones I was able to reproduce. -- Jouni Malinen PGP id EFC895FA _______________________________________________ Hostap mailing list Hostap@xxxxxxxxxxxxxxxxxxx http://lists.infradead.org/mailman/listinfo/hostap