NAI on reconnection

Jouni Malinen j
Sun Aug 10 01:00:26 PDT 2014


On Sat, Aug 09, 2014 at 08:25:30PM +0300, khali singh wrote:
> I have implemented a new EAP method. It works fine for the first connection
> attempt and upon providing proper credentials, a supplicant can
> successfully complete the handshake and receive the PMK.
> 
> But now I want to handle the case when the key expires. And I want to do an
> abbreviated handshake based on the previous exchange. So I want to send the
> SessID (session ID) along with the original NAI that was used.
> But I understood that the NAI is specified in the configuration file of the
> supplicant and not in the EAP method. How do I append a SessID to the NAI
> before it is sent over the network. Note, this should only be done if there
> has been a previous successful handshake before.

If you do not need to store the SessID over wpa_supplicant restarts, you
can maintain this within the EAP peer method (see deinit_for_reauth() and
init_for_reauth() callbacks).

Or are you referring to using EAP-Identity method instead of EAP
messages specific to this new EAP method? If so, use the get_identity()
callback.

-- 
Jouni Malinen                                            PGP id EFC895FA



More information about the Hostap mailing list