On Wed, Jan 08, 2020 at 03:21:28PM -0800, Ben Greear wrote: > On 1/8/20 3:04 PM, Ben Greear wrote: > > While testing some HS20 (r1) scenarios, we found that associations fail with code 31 > > (PMF not valid) if AP and STA are configured to not use .11w (PMF). > > Ahh, I think I see. I found the hs20_release config option, probably that > and other commits around there explains our issue. We'll try forcing the AP back > to hs20-release 1 and see if STA can connect without PMF. This PMF requirement is based on the Hotspot 2.0 release number. The hs20_release=1 configuration case is only for testing purposes (which may work for your use case) and it does not actually disable the PMF check on the AP side. However, if the station side falls back to Release 1 based on AP's advertisement (this is expectation in the specification, but not something that wpa_supplicant always followed), the PMF requirement is not enforced. -- Jouni Malinen PGP id EFC895FA _______________________________________________ Hostap mailing list Hostap@xxxxxxxxxxxxxxxxxxx http://lists.infradead.org/mailman/listinfo/hostap