hostapd: add default values for r0kh/r1kh

This allows WPA enterprise roaming in the same mobility domain without any
manual key configuration (aside from radius credentials)

Signed-off-by: Felix Fietkau <nbd@nbd.name>

diff --git a/package/network/services/hostapd/files/hostapd.sh b/package/network/services/hostapd/files/hostapd.sh
index 9993bc90479988a5e6017e1f8d5c647f63b8c139..687a8d950a87d27346032cf6f0f8c5c04e7a28ae 100644 (file)
--- a/package/network/services/hostapd/files/hostapd.sh
+++ b/package/network/services/hostapd/files/hostapd.sh
@@ -812,6 +812,13 @@ hostapd_set_bss_options() {
                                set_default r0_key_lifetime 10000
                                set_default pmk_r1_push 0
 
+                               [ -n "$r0kh" -a -n "$r1kh" ] || {
+                                       key=`echo -n "$mobility_domain/$auth_secret" | md5sum | awk '{print $1}'`
+
+                                       set_default r0kh "ff:ff:ff:ff:ff:ff,*,$key"
+                                       set_default r1kh "00:00:00:00:00:00,00:00:00:00:00:00,$key"
+                               }
+
                                [ -n "$r1_key_holder" ] && append bss_conf "r1_key_holder=$r1_key_holder" "$N"
                                append bss_conf "r0_key_lifetime=$r0_key_lifetime" "$N"
                                append bss_conf "pmk_r1_push=$pmk_r1_push" "$N"