[PATCH 01/15] mka: When matching CKNs ensure that lengths are identical

Jouni Malinen j at w1.fi
Mon Mar 12 16:50:18 PDT 2018


On Fri, Mar 02, 2018 at 03:10:49PM -0500, msiedzik at extremenetworks.com wrote:
> KaY looks up participants using CAK Name (CKN).  Per IEEE802.1X-2010
> Clause 9.3.1 CAK identification, the CKN is an integral number of octets,
> between 1 and 32 (inclusive).  This fix will ensure that the KaY does not
> inadvertently match CKNs such as 'myCakNamedFoo' and 'myCakNamedFooBar'.

Thanks, applied.


PS.

This series on the mailing list was whitespace damaged (tabs converted
to spaces). I used an earlier version I received to my personal address
instead to avoid having to clean up that mess manually.

-- 
Jouni Malinen                                            PGP id EFC895FA



More information about the Hostap mailing list