diff options
| author | Simon Baatz <gmbnomis@gmail.com> | 2011-12-04 17:15:16 +0200 |
|---|---|---|
| committer | Jouni Malinen <j@w1.fi> | 2011-12-04 17:15:16 +0200 |
| commit | a9f40ae720318b77d66c33945138b043d7841d1a (patch) | |
| tree | 5743975f08ceb234ebd80e0a1d8ad22a811fd074 /src/eap_peer | |
| parent | c8894a310085efb661c4123337a84fd1d613b122 (diff) | |
| download | external_wpa_supplicant_8_ti-a9f40ae720318b77d66c33945138b043d7841d1a.zip external_wpa_supplicant_8_ti-a9f40ae720318b77d66c33945138b043d7841d1a.tar.gz external_wpa_supplicant_8_ti-a9f40ae720318b77d66c33945138b043d7841d1a.tar.bz2 | |
EAP-SIM: Keep pseudonym identity
The pseudonym is a temporary identity, but is no one-time identifier (like
the fast re-authentication identity). Thus, do not forget it if the server
does not include it in every challenge. There are servers that include the
pseudonym identity only at full-auth. [Bug 424]
Diffstat (limited to 'src/eap_peer')
| -rw-r--r-- | src/eap_peer/eap_sim.c | 10 |
1 files changed, 5 insertions, 5 deletions
diff --git a/src/eap_peer/eap_sim.c b/src/eap_peer/eap_sim.c index 6677063..f65802e 100644 --- a/src/eap_peer/eap_sim.c +++ b/src/eap_peer/eap_sim.c @@ -649,11 +649,11 @@ static struct wpabuf * eap_sim_process_challenge(struct eap_sm *sm, EAP_SIM_UNABLE_TO_PROCESS_PACKET); } - /* Old reauthentication and pseudonym identities must not be used - * anymore. In other words, if no new identities are received, full - * authentication will be used on next reauthentication. */ - eap_sim_clear_identities(data, CLEAR_PSEUDONYM | CLEAR_REAUTH_ID | - CLEAR_EAP_ID); + /* Old reauthentication identity must not be used anymore. In + * other words, if no new reauth identity is received, full + * authentication will be used on next reauthentication (using + * pseudonym identity or permanent identity). */ + eap_sim_clear_identities(data, CLEAR_REAUTH_ID | CLEAR_EAP_ID); if (attr->encr_data) { u8 *decrypted; |