wpa_supplicant : Add validations for 192-bit Suite B test cases.

Add validations for group data cipher, pairwise cipher and AKM Suites to
ensure correct ciphers are supported by AP during 192-bit Enterprise
connections.
pull/11147/head
jgujarathi 2023-02-23 09:45:24 +05:30
rodzic cb2f801ae7
commit fde6be3d6a
1 zmienionych plików z 13 dodań i 1 usunięć

Wyświetl plik

@ -2421,7 +2421,19 @@ int wpa_set_bss(char *macddr, char * bssid, u8 pairwise_cipher, u8 group_cipher,
extern bool g_wpa_suiteb_certification;
if (g_wpa_suiteb_certification) {
if (mgmt_cipher != WIFI_CIPHER_TYPE_AES_GMAC256) {
wpa_printf(MSG_ERROR, "suite-b 192bit certification, only GMAC256 is supported");
wpa_printf(MSG_ERROR, "suite-b 192bit certification, only GMAC256 is supported for management cipher");
return -1;
}
if (sm->group_cipher != WPA_CIPHER_GCMP_256) {
wpa_printf(MSG_ERROR, "suite-b 192bit certification, only group GCMP256 is supported for group data cipher.");
return -1;
}
if (sm->pairwise_cipher != WPA_CIPHER_GCMP_256) {
wpa_printf(MSG_ERROR,"suite-b 192bit certification, only group GCMP256 is supported for pairwise cipher");
return -1;
}
if (sm->key_mgmt != WPA_KEY_MGMT_IEEE8021X_SUITE_B_192) {
wpa_printf(MSG_ERROR, "suite-b 192bit certification, 192bit akm supported");
return -1;
}
}