[PATCH] Allow Session-Timeout with PSK RADIUS during 4 Way Handshake

Jouni Malinen j at w1.fi
Sun Apr 21 02:07:46 PDT 2024


On Tue, Apr 09, 2024 at 03:06:38PM -0700, Lee Harding wrote:
> I've been reading the code and testing the PSK via RADIUS
> functionality in hostap and discovered what I believe to be a bug.
> When the RADIUS response includes a Session-Timeout and is otherwise
> valid (an Access-Accept with a valid Tunnel-Password) the association
> still fails due to the strict comparison of the accepted value with
> HOSTAPD_ACL_ACCEPT.  Apparently this wasn't previously tested.
> 
> The patch below allows a packet containing a valid Session-Timeout
> attribute to be accepted by extending the "success" comparison to
> include HOSTAPD_ACL_ACCEPT_TIMEOUT.

Thanks, applied.

-- 
Jouni Malinen                                            PGP id EFC895FA



More information about the Hostap mailing list