diff options
| author | Alexander Wetzel <[email protected]> | 2019-08-05 14:34:00 +0200 |
|---|---|---|
| committer | Johannes Berg <[email protected]> | 2019-08-21 10:19:10 +0200 |
| commit | b67fd72e84a88cae64cea8ab47ccdaab3bb3094d (patch) | |
| tree | 266c477c8ef86243b80da620108b7f32659b071b /net/switchdev/switchdev.c | |
| parent | 5fd2f91ad483baffdbe798f8a08f1b41442d1e24 (diff) | |
cfg80211: Fix Extended Key ID key install checks
Fix two shortcomings in the Extended Key ID API:
1) Allow the userspace to install pairwise keys using keyid 1 without
NL80211_KEY_NO_TX set. This allows the userspace to install and
activate pairwise keys with keyid 1 in the same way as for keyid 0,
simplifying the API usage for e.g. FILS and FT key installs.
2) IEEE 802.11 - 2016 restricts Extended Key ID usage to CCMP/GCMP
ciphers in IEEE 802.11 - 2016 "9.4.2.25.4 RSN capabilities".
Enforce that when installing a key.
Cc: [email protected] # 5.2
Fixes: 6cdd3979a2bd ("nl80211/cfg80211: Extended Key ID support")
Signed-off-by: Alexander Wetzel <[email protected]>
Link: https://lore.kernel.org/r/[email protected]
Signed-off-by: Johannes Berg <[email protected]>
Diffstat (limited to 'net/switchdev/switchdev.c')
0 files changed, 0 insertions, 0 deletions