peap: Ignore Crypto-Binding TLVs with invalid compound MACs

Some server implementation don't seem to provide the valid compound MACs.
In the meantime, iwd will ignore the invalid Crypto-Binding TLVs as their
usage is optional.
This commit is contained in:
Tim Kourt 2019-12-18 16:42:39 -08:00 committed by Denis Kenzior
parent e2f4031a21
commit d9efacfbba
1 changed files with 5 additions and 2 deletions

View File

@ -231,8 +231,11 @@ static int eap_extensions_handle_cryptobinding_tlv(struct eap_state *eap,
cryptobinding_compound_mac_len)) {
l_error("PEAP: Generated compound MAC and server compound MAC "
"don't match.");
return -EIO;
/*
* Ignore the Crypto-Binding TLV in the case of unmatched
* compound MACs.
*/
return 0;
}
/* Build response Crypto-Binding TLV */