On Wed, Jun 17, 2020 at 12:41 PM Dennis Bland <dennis@xxxxxxxxxxxxxxxxx> wrote: > > SAE also requires updates to the Raspian kernel to support the WPA3 > nl80211 extensions, and likely requires updates to the Broadcom > chipset firmware to support SAE (and possibly PMF). It appears > wpa_supplicant is up-to-date, but one of the other pieces may be > lacking support for SAE/WPA3. Firstly, thank you for the insightful reply, Denis. Arch ARM ships more up-to-date packages I think. At the time I wrote this, it is shipping: * Kernel 5.4.45 * linux-firmware 20200519.8ba6fa6 * firmware-raspberrypi 6 * raspberrypi-firmware 20200614 I am pleased to open a ticket upstream but am unsure which package or packages would require the update. Are you aware of any changes that might be needed to the kernel config itself (ie easily made in the kernel .config) to support SAE and/or PMF? I didn't find any documentation. Failing that, perhaps the raspberrypi-firmware is a good place to start. For reference, the linux-raspberrypi4 kernel config for Arch ARM can be seen here: https://github.com/archlinuxarm/PKGBUILDs/blob/master/core/linux-raspberrypi4/config Thank you again for the reply and for any future ideas you wish to share. > > On Wed, Jun 17, 2020 at 10:28 AM John <graysky@xxxxxxxxxxxx> wrote: > > > > On Wed, Jun 17, 2020 at 12:07 PM Dennis Bland <dennis@xxxxxxxxxxxxxxxxx> wrote: > > > > > > I have seen issues with some chipset drivers where PMF needs to be set > > > to optional (ieee80211w=1), even when in SAE mode. This is especially > > > true when the AP is configured to support simultaneous mixed mode > > > (WPA2/SAE). What version of wpa_supplicant is running on your laptop? > > > > I tried changing the value to 1 but got the same error. The laptop > > runs wpa_supplicant v2.9 as does the Pi4. You can see the Arch > > package (config and so forth) here: > > https://git.archlinux.org/svntogit/packages.git/tree/trunk?h=packages/wpa_supplicant > > > > Note that Raspbian buster is using v2.8-dev of wpa_supplicant and > > throws the same errors. _______________________________________________ Hostap mailing list Hostap@xxxxxxxxxxxxxxxxxxx http://lists.infradead.org/mailman/listinfo/hostap
