Jouni Malinen acc39435ff EAP-PEAP peer: Cryptobinding in fast-reconnect case with inner EAP ... This was reported to fail with Windows 2012r2 with "Invalid Compound_MAC in cryptobinding TLV". It turns out that the server decided to go through inner EAP method (EAP-MSCHAPv2 in the reported case) even when using PEAP fast-reconnect. This seems to be against the [MS-PEAP] specification which claims that inner EAP method is not used in such a case. This resulted in a different CMK being derived by the server (used the version that used ISK) and wpa_supplicant (used the version where IPMK|CMK = TK without ISK when using fast-reconnect). Fix this interop issue by making wpa_supplicant to use the fast-reconnect version of CMK derivation only when using TLS session resumption and the server having not initiated inner EAP method before going through the cryptobinding exchange. Signed-off-by: Jouni Malinen <j@w1.fi>		2016-01-05 23:50:50 +02:00
..
ap	Fix wpa_supplicant AP mode P2P IE handling if P2P is disabled	2016-01-01 17:12:43 +02:00
common	mesh: Fix PMKID to match the standard	2015-12-28 17:21:08 +02:00
crypto	EAP-FAST: Enable AES256-based TLS cipher suites with OpenSSL	2015-12-31 20:52:58 +02:00
drivers	nl80211: Don't call linux_iface_up() for a dedicated P2P Device	2015-12-28 17:21:08 +02:00
eap_common	EAP-EKE: Merge identical error return paths	2015-12-22 00:10:22 +02:00
eap_peer	EAP-PEAP peer: Cryptobinding in fast-reconnect case with inner EAP	2016-01-05 23:50:50 +02:00
eap_server	EAP-FAST: Enable AES256-based TLS cipher suites with OpenSSL	2015-12-31 20:52:58 +02:00
eapol_auth	Remove unreachable PMKSA cache entry addition on Access-Accept	2015-10-14 18:43:26 +03:00
eapol_supp	Fix EAPOL reauth after FT protocol or offloaded PMKSA cache use	2015-11-19 21:16:18 +02:00
fst	FST: Fix handling of Rx FST Setup Request when session already exists	2015-12-29 18:41:35 +02:00
l2_packet	Fix wpa_supplicant build with CONFIG_L2_PACKET=pcap	2016-01-01 16:50:24 +02:00
p2p	P2P: Try SD Query with each non-ACK peer only once per search iteration	2016-01-05 01:03:28 +02:00
pae	MACsec: Update protect frames and replay on reauthentication	2014-12-09 16:56:10 +02:00
radius	RADIUS: Add EACCES to list of recognized send() errno values	2015-12-24 12:43:05 +02:00
rsn_supp	Use wpa_msg() for the "RSN: PMKID mismatch" message	2015-12-22 11:22:19 +02:00
tls	TLS: Make tls_cert_chain_failure_event() more robust	2015-12-28 18:31:11 +02:00
utils	utils: Fix NULL pointer dereference with unexpected kernel behavior	2015-12-18 00:24:52 +02:00
wps	WPS: Testing mechanism to force auth/encr type flags	2016-01-01 13:42:04 +02:00
lib.rules	Add QUIET=1 option for make	2014-12-29 15:49:05 +02:00
Makefile	FST: Add the Fast Session Transfer (FST) module	2015-07-16 18:26:15 +03:00