Re: Regarding: HS 2.0: Enable PMF automatically for Hotspot 2.0 network profiles

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Wed, Jan 08, 2020 at 03:21:28PM -0800, Ben Greear wrote:
> On 1/8/20 3:04 PM, Ben Greear wrote:
> > While testing some HS20 (r1) scenarios, we found that associations fail with code 31
> > (PMF not valid) if AP and STA are configured to not use .11w (PMF).
> 
> Ahh, I think I see.  I found the hs20_release config option, probably that
> and other commits around there explains our issue.  We'll try forcing the AP back
> to hs20-release 1 and see if STA can connect without PMF.

This PMF requirement is based on the Hotspot 2.0 release number. The
hs20_release=1 configuration case is only for testing purposes (which
may work for your use case) and it does not actually disable the PMF
check on the AP side. However, if the station side falls back to Release
1 based on AP's advertisement (this is expectation in the specification,
but not something that wpa_supplicant always followed), the PMF
requirement is not enforced.

-- 
Jouni Malinen                                            PGP id EFC895FA

_______________________________________________
Hostap mailing list
Hostap@xxxxxxxxxxxxxxxxxxx
http://lists.infradead.org/mailman/listinfo/hostap



[Index of Archives]     [Linux Wireless]     [Linux Kernel]     [ATH6KL]     [Linux Bluetooth]     [Linux Netdev]     [Kernel Newbies]     [IDE]     [Security]     [Git]     [Netfilter]     [Bugtraq]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Linux ATA RAID]     [Samba]     [Device Mapper]

  Powered by Linux