[PW_SID:1077103] netdev: use SAE PWE both for fullmac external auth#496
[PW_SID:1077103] netdev: use SAE PWE both for fullmac external auth#496IWDTestBot wants to merge 1 commit intoworkflowfrom
Conversation
For fullmac external SAE, iwd currently forces Hunt-and-Peck and does not include NL80211_ATTR_SAE_PWE in the connect request. This prevents successful association with H2E-capable APs on at least some fullmac drivers, since userspace is effectively constraining SAE to Hunt-and-Peck while not advertising the intended SAE PWE policy to nl80211. For fullmac SAE connections without PMKSA reuse, request NL80211_SAE_PWE_BOTH and stop forcing Hunt-and-Peck on the SAE state machine. This keeps the fullmac external-auth path aligned with the actual SAE policy instead of hard-wiring HnP. Tested on a CYW43455/brcmfmac fullmac device using firmware 7.45.286, where this change fixes WPA3 association and traffic on H2E-capable APs. Signed-off-by: Jeremy Blum <jeremy@jeremyblum.com>
|
Fetch PR Prep - Setup ELL Make Distcheck Build - Configure Make Check Make Check w/Valgrind Incremental Build with patches |
|
Fetch PR GitLint Prep - Setup ELL Make Distcheck Build - Configure Make Check Make Check w/Valgrind Incremental Build with patches Autotest Runner Clang Build |
2 participants
For fullmac external SAE, iwd currently forces Hunt-and-Peck and does
not include NL80211_ATTR_SAE_PWE in the connect request.
This prevents successful association with H2E-capable APs on at least
some fullmac drivers, since userspace is effectively constraining SAE
to Hunt-and-Peck while not advertising the intended SAE PWE policy to
nl80211.
For fullmac SAE connections without PMKSA reuse, request
NL80211_SAE_PWE_BOTH and stop forcing Hunt-and-Peck on the SAE state
machine. This keeps the fullmac external-auth path aligned with the
actual SAE policy instead of hard-wiring HnP.
Tested on a CYW43455/brcmfmac fullmac device using firmware 7.45.286,
where this change fixes WPA3 association and traffic on H2E-capable APs.
Signed-off-by: Jeremy Blum jeremy@jeremyblum.com
src/netdev.c | 8 +++++++-
1 file changed, 7 insertions(+), 1 deletion(-)
base-commit: d003d0e