[PATCH] gas_server: extend timeout for pending responses
Jouni Malinen
j at w1.fi
Sat Jun 6 07:44:08 PDT 2026
On Tue, May 05, 2026 at 08:28:36PM +0200, Gustavo Bertoli wrote:
> Currently, gas_server_response_timeout() unconditionally drops the
> session and frees the entry after 60 seconds. This causes deferred
> provisioning operations, such as DPP Enterprise certBag delivery,
> to silently fail if the CA takes longer than 60 seconds to respond.
>
> Fix this by checking if the response is still pending and a comeback
> delay is active. If so, reschedule the timeout to keep the entry alive.
> This extends the Configurator's wait window safely, relying on the
> Enrollee's own watchdog timer (120 seconds) to bound the session.
It sounds reasonable to extend the timeout in some cases, but not
without bound. Configurator cannot rely on Enrollee timeout, i.e., there
needs to be something to stop the infinite sequence of adding more time
to the GAS response to cover the cases where the GAS client disappears
from radio range.
--
Jouni Malinen PGP id EFC895FA
More information about the Hostap
mailing list