implement preliminary positive response to KMM HELLO (this still will fail with No-Service due to missing implementation for per-SU UKEK implementation from the crypto container);

src/fne/network/P25OTARService.cpp

@@ -383,8 +383,24 @@ UInt8Array P25OTARService::processKMM(const uint8_t* data, uint32_t len, uint32_
             }
 
             // respond with No-Service if KMF services are disabled
-//            if (!m_network->m_kmfServicesEnabled)
+            if (!m_network->m_kmfServicesEnabled)
+                return write_KMM_NoService(llId, kmm->getSrcLLId(), payloadSize);
+            else {
+                if (kmm->getFlag() == KMM_HelloFlag::REKEY_REQUEST_UKEK ||
+                    (kmm->getFlag() == KMM_HelloFlag::REKEY_REQUEST_NO_UKEK && m_allowNoUKEKRekey)) {
+                    // send rekey-command
+                    EKCKeyItem keyItem = m_network->m_cryptoLookup->findUKEK(llId);
+                    if (keyItem.isInvalid()) {
+                        LogInfoEx(LOG_P25, P25_KMM_STR ", %s, no UKEK found for rekey request, llId = %u", kmm->toString().c_str(), llId);
                         return write_KMM_NoService(llId, kmm->getSrcLLId(), payloadSize);
+                    } else {
+                        return write_KMM_Rekey_Command(llId, kmm->getSrcLLId(), kmm->getFlag(), payloadSize);
+                    }
+                } else {
+                    LogInfoEx(LOG_P25, P25_KMM_STR ", %s, rekey request denied, llId = %u", kmm->toString().c_str(), llId);
+                    return write_KMM_NoService(llId, kmm->getSrcLLId(), payloadSize);
+                }
+            }
         }
         break;