Re: Setting up an environment for testing DPP

Hi Jouni and Thanks for your answer.

As mentioned in my original email, I'm using a Raspberry Pi 4 model B.
WiFi chipset is from Broadcom.
- Can you explain why the driver must support/be compiled with DPP?
  I was thinking that only a rebuild of Hostapd with DPP enabled was enough...
- Is there also some hardware requirements for the chipset? If yes,
does it mean not all WiFi chipsets can support DPP?
- Do you have any details if someone got already DPP working with this
board/chipset?
- Can you provide a list of WiFi dongles which can support DPP?

Regarding the configuration, I followed the Readme which is available
in the spa_supplicant directory.Then,
- Does it confirm that this file is not up-to-date?
- Can you provide a pointer to some documents for configuring in the
right way hostapd (i.e hostapd.conf)?

Thanks again / Best Regards,
Gilles



On Sun, Mar 29, 2020 at 7:03 PM Jouni Malinen <[email protected]> wrote:
>
> On Fri, Mar 27, 2020 at 11:08:51AM +0100, Gilles Printemps wrote:
> > My environment will use:
> >    - A Raspberry 4 based on Ubuntu for the AP
>
> > - 2) On my Raspberry, since I enabled the DPP in the WPA_KEY_MGMT, I
> > cannot start anymore hostapd and got the following error:
>
> > Mar 27 09:10:54 ubuntu kernel: ieee80211 phy0: brcmf_configure_wpaie: ivalid OUI
> > Mar 27 09:10:54 ubuntu hostapd[2432]: Failed to set beacon parameters
>
> That sounds like the driver you are using on the AP does not support DPP
> AKM, i.e., you would either need to get the driver modified or the
> device replaced if you want to use DPP AKM.
>
> > ##### AP Authentication
> > auth_algs=1
> > wpa=2
> > wpa_passphrase=0123456789
> > #wpa_key_mgmt=WPA-PSK
> > wpa_key_mgmt=WPA-PSK DPP
> > wpa_pairwise=CCMP
> > rsn_pairwise=CCMP
>
> Please also note that this is not sufficient configuration for the DPP
> AKM. dpp_connector, dpp_csign, and dpp_netaccesskey will need to be
> present as well, i.e., DPP AKM requires that a DPP Configurator has been
> used to provision the device into the network.
>
> --
> Jouni Malinen                                            PGP id EFC895FA