[PATCH 01/15] mka: When matching CKNs ensure that lengths are identical
Jouni Malinen
j at w1.fi
Mon Mar 12 16:50:18 PDT 2018
On Fri, Mar 02, 2018 at 03:10:49PM -0500, msiedzik at extremenetworks.com wrote:
> KaY looks up participants using CAK Name (CKN). Per IEEE802.1X-2010
> Clause 9.3.1 CAK identification, the CKN is an integral number of octets,
> between 1 and 32 (inclusive). This fix will ensure that the KaY does not
> inadvertently match CKNs such as 'myCakNamedFoo' and 'myCakNamedFooBar'.
Thanks, applied.
PS.
This series on the mailing list was whitespace damaged (tabs converted
to spaces). I used an earlier version I received to my personal address
instead to avoid having to clean up that mess manually.
--
Jouni Malinen PGP id EFC895FA
More information about the Hostap
mailing list