[PATCH] mka: Fix unexpected cleanup
Jouni Malinen
j at w1.fi
Sun Nov 5 10:43:06 PST 2023
On Mon, Apr 24, 2023 at 12:50:46AM +0800, Ze Gan wrote:
> Because the key server may not include dist sak and use sak in ONE packet,
> Meanwhile, after dist sak, the current participant(Non-Key Server) will
> install SC or SA(s) after decoding the dist sak which may take few seconds
> in real physical platforms. Meanwhile, the peer expire time is always
> initialized at adding the key server to peer list. The gap between adding
> the key server to peer list and processing next use sak packet may exceed
> the threshold of MKA_LIFE_TIME(6s). It will cause an unexpected cleanup
> (delete SC and SA(s)). So, update the expire timeout at dist sak also.
Thanks, applied.
--
Jouni Malinen PGP id EFC895FA
More information about the Hostap
mailing list