diff options
| author | Jouni Malinen <j@w1.fi> | 2008-12-04 20:32:56 +0200 |
|---|---|---|
| committer | Jouni Malinen <j@w1.fi> | 2008-12-04 20:32:56 +0200 |
| commit | a49c428a1b4be8620a989b9e74c6f06c5657cca6 (patch) | |
| tree | c044e272ca9a3a9f48023c60876422f2b7a0c4e9 /src/eap_server | |
| parent | 6ec4021c03fab7b8982ba345d2bd078d67045511 (diff) | |
| download | external_wpa_supplicant_8_ti-a49c428a1b4be8620a989b9e74c6f06c5657cca6.zip external_wpa_supplicant_8_ti-a49c428a1b4be8620a989b9e74c6f06c5657cca6.tar.gz external_wpa_supplicant_8_ti-a49c428a1b4be8620a989b9e74c6f06c5657cca6.tar.bz2 | |
EAP-AKA': Comment out EAP-AKA' server KDF negotiation
Since only one KDF is currently supported, the negotiation is not
allowed and peer must be rejected if it tries to send KDF selection in a
Challenge message. The negotiation code is left in the file and just
commented out since it was tested to work and can be used in the future
if another KDF is added.
Diffstat (limited to 'src/eap_server')
| -rw-r--r-- | src/eap_server/eap_aka_prime.c | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/src/eap_server/eap_aka_prime.c b/src/eap_server/eap_aka_prime.c index 1563086..4627a94 100644 --- a/src/eap_server/eap_aka_prime.c +++ b/src/eap_server/eap_aka_prime.c @@ -761,6 +761,9 @@ static void eap_aka_process_challenge(struct eap_sm *sm, wpa_printf(MSG_DEBUG, "EAP-AKA: Processing Challenge"); +#if 0 + /* KDF negotiation; to be enabled only after more than one KDF is + * supported */ if (data->eap_method == EAP_TYPE_AKA_PRIME && attr->kdf_count == 1 && attr->mac == NULL) { if (attr->kdf[0] != EAP_AKA_PRIME_KDF) { @@ -779,6 +782,7 @@ static void eap_aka_process_challenge(struct eap_sm *sm, wpa_printf(MSG_DEBUG, "EAP-AKA': KDF %d selected", data->kdf); return; } +#endif if (attr->checkcode && eap_aka_verify_checkcode(data, attr->checkcode, |