[PATCH 1/2] WPA: Ignore RSNX element in WPA connection

Jouni Malinen j at w1.fi
Sat Feb 6 05:14:33 EST 2021

On Thu, Jan 21, 2021 at 05:40:33PM +0200, Andrei Otcheretianski wrote:
> When an AP publishes both RSN, RSNX and WPA IE, it incorrectly removes
> the RSN IE in the EAPOL 3/4 message if the STA associates with WPA,
> leaving only RSNXE instead of WPA IE. WPA STA fails to connect to such
> AP as the WPA IE is missing.
> Since RSNX is not really needed in non RSN connection, just remove it.

Thanks, applied both patches, but for this part:

> In addition, make sure that the non RSN STA doesn't store and validate
> RSNX element which would be "missing" now in EAPOL 3/4 message.

I did not like the idea of not storing RSNXE in some cases and instead,
addressed this corner case in the actual validation step. This is not
really something that is supposed to ever happen in real production use
cases (i.e., SAE would be used instead of there is support for RSNXE),
but anyway, I guess this is convenient to have available for testing

Jouni Malinen                                            PGP id EFC895FA

More information about the Hostap mailing list