Skip to content
  • Markus Theil's avatar
    mac80211: skip mpath lookup also for control port tx · 5af7fef3
    Markus Theil authored
    
    
    When using 802.1X over mesh networks, at first an ordinary
    mesh peering is established, then the 802.1X EAPOL dialog
    happens, afterwards an authenticated mesh peering exchange
    (AMPE) happens, finally the peering is complete and we can
    set the STA authorized flag.
    
    As 802.1X is an intermediate step here and key material is
    not yet exchanged for stations we have to skip mesh path lookup
    for these EAPOL frames. Otherwise the already configure mesh
    group encryption key would be used to send a mesh path request
    which no one can decipher, because we didn't already establish
    key material on both peers, like with SAE and directly using AMPE.
    
    Signed-off-by: default avatarMarkus Theil <markus.theil@tu-ilmenau.de>
    Link: https://lore.kernel.org/r/20200617082637.22670-2-markus.theil@tu-ilmenau.de
    
    
    [remove pointless braces, remove unnecessary local variable,
     the list can only process one such frame (or its fragments)]
    Signed-off-by: default avatarJohannes Berg <johannes.berg@intel.com>
    5af7fef3