Ignoring authentication failure if security protocol already started

On supplicant, if initial-EAPOL key fails to TX failure, but authenticator
has already started security protocol (e.g. EAP-TLS), do not indicate
authenticaton failure to bootstrap.

Author: Mika Leppänen

source/6LoWPAN/ws/ws_pae_lib.c

@@ -132,6 +132,11 @@ bool ws_pae_lib_kmp_list_empty(kmp_list_t *kmp_list)
     return ns_list_is_empty(kmp_list);
 }
 
+uint8_t ws_pae_lib_kmp_list_count(kmp_list_t *kmp_list)
+{
+    return ns_list_count(kmp_list);
+}
+
 void ws_pae_lib_kmp_timer_start(kmp_list_t *kmp_list, kmp_entry_t *entry)
 {
     if (ns_list_get_first(kmp_list) != entry) {

source/6LoWPAN/ws/ws_pae_lib.h

@@ -135,6 +135,16 @@ kmp_entry_t *ws_pae_lib_kmp_list_entry_get(kmp_list_t *kmp_list, kmp_api_t *kmp)
  */
 bool ws_pae_lib_kmp_list_empty(kmp_list_t *kmp_list);
 
+/**
+ * ws_pae_lib_kmp_list_count counts entries on KMP list
+ *
+ * \param kmp_list KMP list
+ *
+ * \return count of entries on the list
+ *
+ */
+uint8_t ws_pae_lib_kmp_list_count(kmp_list_t *kmp_list);
+
 /**
  * ws_pae_lib_kmp_timer_start starts KMP timer
  *

source/6LoWPAN/ws/ws_pae_supp.c

@@ -1220,7 +1220,11 @@ static void ws_pae_supp_kmp_api_finished_indication(kmp_api_t *kmp, kmp_result_e
        that bootstrap can decide if EAPOL target should be changed */
     else if (type > IEEE_802_1X_INITIAL_KEY && result == KMP_RESULT_ERR_TX_NO_ACK) {
         tr_info("Initial EAPOL-Key TX failure, target: %s", trace_array(kmp_address_eui_64_get(&pae_supp->entry.addr), 8));
-        ws_pae_supp_authenticate_response(pae_supp, AUTH_RESULT_ERR_TX_NO_ACK);
+        /* Fails authentication only if other authentication protocols are not yet
+           started by authenticator */
+        if (ws_pae_lib_kmp_list_count(&pae_supp->entry.kmp_list) <= 1) {
+            ws_pae_supp_authenticate_response(pae_supp, AUTH_RESULT_ERR_TX_NO_ACK);
+        }
     }
 }