[RFC 26/30] wpa_supplicant: Set ssid_verified after encrypted association

[Ilan Peer]

When the connection uses association frame encryption, the SSID
Element is carried in an encrypted association response frame and
thus is verified to match the SSID used in the current connection.
As such, set the 'ssid_verified' status field to true.

Note that while SSID protection is not described in Draft P802.11bi
D6.0, the above follows the same reasoning used in other places
for SSID verification, i.e., the SSID is carried in a protected
frame.

Signed-off-by: Ilan Peer <ilan.peer at intel.com>
---
 src/rsn_supp/wpa.c | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/src/rsn_supp/wpa.c b/src/rsn_supp/wpa.c
index 2ab2eca7c9d6..036d509e320e 100644
--- a/src/rsn_supp/wpa.c
+++ b/src/rsn_supp/wpa.c
@@ -8192,6 +8192,14 @@ int process_encrypted_assoc_resp(struct wpa_sm *sm, int valid_links,
 	wpa_sm_set_rekey_offload(sm);
 
 	wpa_printf(MSG_DEBUG, "ENC_ASSOC: Association completed successfully");
+
+	/*
+	 * The SSID element was carried inside the encrypted (Re)Association
+	 * Response, so set the SSID as verified.
+	 */
+	if (!wpa_key_mgmt_only_enhanced_open(sm->key_mgmt))
+		wpa_sm_ssid_verified(sm);
+
 	sm->eppke_completed = 1;
 	sm->eap_over_auth_frame_completed = 1;
 
-- 
2.55.0