[PATCH 77/92] PASN: Allow verification with PASN base AKM

[Andrei Otcheretianski]

From: Ilan Peer <ilan.peer at intel.com>

As this is allowed for NAN pairing.

Signed-off-by: Ilan Peer <ilan.peer at intel.com>
---
 src/pasn/pasn_initiator.c | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/src/pasn/pasn_initiator.c b/src/pasn/pasn_initiator.c
index b1cf36b971..ba3271ade2 100644
--- a/src/pasn/pasn_initiator.c
+++ b/src/pasn/pasn_initiator.c
@@ -673,11 +673,16 @@ struct wpabuf * wpas_pasn_build_auth_1(struct pasn_data *pasn,
 #else /* CONFIG_IEEE80211R */
 		goto fail;
 #endif /* CONFIG_IEEE80211R */
-	} else if (wrapped_data != WPA_PASN_WRAPPED_DATA_NO) {
+	} else {
 		struct rsn_pmksa_cache_entry *pmksa;
 
 		pmksa = pmksa_cache_get(pasn->pmksa, pasn->peer_addr,
 					pasn->own_addr, NULL, NULL, pasn->akmp);
+
+		wpa_printf(MSG_DEBUG,
+			   "PASN: PMKSA: akmp=0x%x, found=0x%x",
+			   pasn->akmp, pmksa ? pmksa->akmp : 0);
+
 		if (pmksa && pasn->custom_pmkid_valid)
 			pmkid = pasn->custom_pmkid;
 		else if (pmksa)
@@ -687,7 +692,7 @@ struct wpabuf * wpas_pasn_build_auth_1(struct pasn_data *pasn,
 		 * Note: Even when PMKSA is available, also add wrapped data as
 		 * it is possible that the PMKID is no longer valid at the AP.
 		 */
-		if (!verify)
+		if (wrapped_data != WPA_PASN_WRAPPED_DATA_NO && !verify)
 			wrapped_data_buf = wpas_pasn_get_wrapped_data(pasn);
 	}
 
-- 
2.53.0