Change the default keyid to 1 for the first pairwise key when using Extended Key ID. This shifts potential problems to the initial connect. Without that broken STAs accidentally claiming to be compatible with Extended Key ID would work at the initial connect and only fail when the connection is rekeyed. Signed-off-by: Alexander Wetzel <alexander@xxxxxxxxxxxxxx> --- src/ap/wpa_auth_ie.c | 1 + 1 file changed, 1 insertion(+) diff --git a/src/ap/wpa_auth_ie.c b/src/ap/wpa_auth_ie.c index cb01e4d7f..0c9ab9725 100644 --- a/src/ap/wpa_auth_ie.c +++ b/src/ap/wpa_auth_ie.c @@ -573,6 +573,7 @@ int handle_extended_key_id(struct wpa_state_machine *sm, int capabilities) " supports Extended Key ID", MAC2STR(sm->addr)); sm->use_extended_key_id = TRUE; + sm->keyidx_active = 1; } else if (!sm->pairwise_set) { wpa_printf(MSG_DEBUG, "STA " MACSTR " is not supporting Extended Key ID", -- 2.24.1 _______________________________________________ Hostap mailing list Hostap@xxxxxxxxxxxxxxxxxxx http://lists.infradead.org/mailman/listinfo/hostap