[PATCH 3/6] wpa_supplicant: Added support for multiple global sae_passwords

[Jouni Malinen]

On Fri, Jan 22, 2021 at 03:58:20PM +0100, Peter Åstrand wrote:
> diff --git a/wpa_supplicant/config.h b/wpa_supplicant/config.h
> @@ -1200,6 +1200,12 @@ struct wpa_config {
> +	/**
> +	 * sae_password entries - added to a list of available passwords
> +	 */
> +	struct sae_password_entry *sae_passwords;

This is not the proper place for configuring SAE passwords in
wpa_supplicant. These would apply to all network blocks while the
configuration should be specific to a single network block just like the
existing sae_password parameter.

> diff --git a/wpa_supplicant/wpa_supplicant.conf b/wpa_supplicant/wpa_supplicant.conf
> @@ -409,6 +409,39 @@ fast_reauth=1
> +# SAE password
> +# This parameter can be used to set passwords for SAE, in addition to
> +# a sae_password in a network block.

I don't think this would be acceptable as a global parameter.
 
-- 
Jouni Malinen                                            PGP id EFC895FA