Hi John: Yes, it sounds like the Broadcom WLAN chipset firmware (and possibly upstream kernel driver) may not support SAE and/or PMF yet. Kernel 5.4+ should have support for WPA3 extensions to nl80211, which allows wpa_supplicant to configure the driver in SAE mode. In other words, the only missing piece for SAE functionality is an updated Broadcom driver and/or firmware. Best regards, Dennis On Wed, Jun 17, 2020 at 1:29 PM John <graysky@xxxxxxxxxxxx> wrote: > > Might be relevant: https://github.com/raspberrypi/linux/issues/3619 > > On Wed, Jun 17, 2020 at 3:08 PM John <graysky@xxxxxxxxxxxx> wrote: > > > > On Wed, Jun 17, 2020 at 12:41 PM Dennis Bland <dennis@xxxxxxxxxxxxxxxxx> wrote: > > > > > > SAE also requires updates to the Raspian kernel to support the WPA3 > > > nl80211 extensions, and likely requires updates to the Broadcom > > > chipset firmware to support SAE (and possibly PMF). It appears > > > wpa_supplicant is up-to-date, but one of the other pieces may be > > > lacking support for SAE/WPA3. > > > > Firstly, thank you for the insightful reply, Denis. Arch ARM ships > > more up-to-date packages I think. At the time I wrote this, it is > > shipping: > > * Kernel 5.4.45 > > * linux-firmware 20200519.8ba6fa6 > > * firmware-raspberrypi 6 > > * raspberrypi-firmware 20200614 > > > > I am pleased to open a ticket upstream but am unsure which package or > > packages would require the update. Are you aware of any changes that > > might be needed to the kernel config itself (ie easily made in the > > kernel .config) to support SAE and/or PMF? I didn't find any > > documentation. Failing that, perhaps the raspberrypi-firmware is a > > good place to start. > > > > For reference, the linux-raspberrypi4 kernel config for Arch ARM can > > be seen here: https://github.com/archlinuxarm/PKGBUILDs/blob/master/core/linux-raspberrypi4/config > > > > Thank you again for the reply and for any future ideas you wish to share. > > > > > > > > On Wed, Jun 17, 2020 at 10:28 AM John <graysky@xxxxxxxxxxxx> wrote: > > > > > > > > On Wed, Jun 17, 2020 at 12:07 PM Dennis Bland <dennis@xxxxxxxxxxxxxxxxx> wrote: > > > > > > > > > > I have seen issues with some chipset drivers where PMF needs to be set > > > > > to optional (ieee80211w=1), even when in SAE mode. This is especially > > > > > true when the AP is configured to support simultaneous mixed mode > > > > > (WPA2/SAE). What version of wpa_supplicant is running on your laptop? > > > > > > > > I tried changing the value to 1 but got the same error. The laptop > > > > runs wpa_supplicant v2.9 as does the Pi4. You can see the Arch > > > > package (config and so forth) here: > > > > https://git.archlinux.org/svntogit/packages.git/tree/trunk?h=packages/wpa_supplicant > > > > > > > > Note that Raspbian buster is using v2.8-dev of wpa_supplicant and > > > > throws the same errors. _______________________________________________ Hostap mailing list Hostap@xxxxxxxxxxxxxxxxxxx http://lists.infradead.org/mailman/listinfo/hostap
