[PATCH] EAPOL auth: Clear reAuthenticate flag when entering AUTHENTICATED state
Jouni Malinen
j at w1.fi
Mon Jul 27 06:08:37 PDT 2026
On Tue, Jun 16, 2026 at 05:01:36PM +0200, Remi Pommarel wrote:
> When a station reassociates before the EAP state machine reaches
> AUTHENTICATED state (e.g., due to delayed response to the first
> Association Request), the reAuthenticate flag may be set (see
> ieee802_1x_new_station()).
>
> Since reAuthenticate is only processed after reaching AUTHENTICATED
> state, this would cause a AUTH_PAE state machine to be reset and send a
> EAP identity request even though the station has already completed EAP
> successfully. This is ignored by the station and the 4-way handshake
> does not happen.
>
> Clear the reAuthenticate flag when transitioning to AUTHENTICATED
> state to ensure any pending re-authentication request from before
> authentication completed is discarded.
Thanks, applied.
--
Jouni Malinen PGP id EFC895FA
More information about the Hostap
mailing list