Hi All,
I figured out that the protected management frames are needed to be enabled on both hostapd and wpa_supplicant for SAE to function. I replaced the AP device which now allows protected management frames. I added those in the configuration file. However still facing the issue of SAE connection.
My current hostapd is
interface=wlx00c0ca96c7d9
driver=nl80211
ctrl_interface=/var/run/hostapd
ssid=WPA3WIFI
channel=1
wpa=2
wpa_key_mgmt=SAE
sae_require_mfp=0
sae_password=secretpassword
ieee80211w=2
wpa_pairwise=CCMP
rsn_pairwise=CCMP
My supplicant is
ctrl_interface=DIR=/var/run/wpa_supplicant
ctrl_interface_group=0
pmf=2
network={
ssid="WPA3WIFI"
key_mgmt=SAE
ieee80211w=2
proto=RSN
pairwise=CCMP
group=CCMP
sae_password="secretpassword"
}
However my supplicant is throwing the error indicating it failed to select authenticated key management type. Is there any configuration, I am missing.
wlx503eaa76347d: selected based on RSN IE
wlx503eaa76347d: selected BSS 00:c0:ca:96:c7:d9 ssid='WPA3WIFI'
wlx503eaa76347d: Considering connect request: reassociate: 0 selected: bssid: 00:00:00:00:00:00 pending: 00:00:00:00:00:00 wpa_state: DISCONNECTED ssid=0x55ce47d615c0 current_ssid=(nil)
wlx503eaa76347d: Trying to associate with 00:c0:ca:96:c7:d9 (SSID='WPA3WIFI' freq=2412 MHz)
wlx503eaa76347d: RSN: using IEEE 802.11i/D9.0
wlx503eaa76347d: WPA: Selected cipher suites: group 16 pairwise 16 key_mgmt 1024 proto 2
wlx503eaa76347d: WPA: Selected mgmt group cipher 32
wlx503eaa76347d: WPA: clearing AP WPA IE
WPA: set AP RSN IE - hexdump(len=22): 30 14 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f ac 08 80 00
wlx503eaa76347d: WPA: using GTK CCMP
wlx503eaa76347d: WPA: using PTK CCMP
wlx503eaa76347d: WPA: Failed to select authenticated key management type
wlx503eaa76347d: WPA: Failed to set WPA key management and encryption suites
Regards,
Rohith K D
Hi All,
I compiled both hostapd and wpa_supplicant with OWE, SAE, DPP enabled to support WPA3.
This is my hostapd.conf file.
interface=wlx503eaa628c61
driver=nl80211
ctrl_interface=/var/run/hostapd
ssid=WPA3WIFI
channel=1
wpa=2
wpa_key_mgmt=SAE
sae_password=secretpassword
rsn_pairwise=CCMP
This is my wpa_supplicant.conf
ctrl_interface=DIR=/var/run/wpa_supplicant
ctrl_interface_group=0
network={
ssid="WPA3WIFI"
key_mgmt= SAE
sae_password="secretpassword"
}
However my wpa_supplicant throws an error when connecting to the running hostapd.
wlx503eaa76347d: Trying to associate with 50:3e:aa:62:8c:61 (SSID='WPA3WIFI' freq=2412 MHz)
wlx503eaa76347d: WPA: Failed to select authenticated key management type
wlx503eaa76347d: WPA: Failed to set WPA key management and encryption suites
When I looked through the wpa_supplicant.c, it points that if compiled with SAE enabled and key_mgmt is configured to SAE, the protocol used will be RSN: using KEY_MGMT SAE. However in my case the final failure else condition is executed.
Am, I missing any configuration or not enabled any required flags during compilation of WPA_supplicant?
Regards,
Rohith K D
________________________________
Disclaimer: This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you are not the intended recipient of this message , or if this message has been addressed to you in error, please immediately alert the sender by reply email and then delete this message and any attachments. If you are not the intended recipient, you are hereby notified that any use, dissemination, copying, or storage of this message or its attachments is strictly prohibited. Email transmission cannot be guaranteed to be secure or error-free, as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. The sender, therefore, does not accept liability for any errors, omissions or contaminations in the contents of this message which might have occurred as a result of email transmission. If verification is required, please request for a hard-copy version.
________________________________
_______________________________________________
Hostap mailing list
Hostap@xxxxxxxxxxxxxxxxxxx
http://lists.infradead.org/mailman/listinfo/hostap
