Re: Cannot connecting to a pure WPA3-SAE access point

Might be relevant: https://github.com/raspberrypi/linux/issues/3619

On Wed, Jun 17, 2020 at 3:08 PM John <[email protected]> wrote:
>
> On Wed, Jun 17, 2020 at 12:41 PM Dennis Bland <[email protected]> wrote:
> >
> > SAE also requires updates to the Raspian kernel to support the WPA3
> > nl80211 extensions, and likely requires updates to the Broadcom
> > chipset firmware to support SAE (and possibly PMF).  It appears
> > wpa_supplicant is up-to-date, but one of the other pieces may be
> > lacking support for SAE/WPA3.
>
> Firstly, thank you for the insightful reply, Denis.  Arch ARM ships
> more up-to-date packages I think.  At the time I wrote this, it is
> shipping:
> * Kernel 5.4.45
> * linux-firmware 20200519.8ba6fa6
> * firmware-raspberrypi 6
> * raspberrypi-firmware 20200614
>
> I am pleased to open a ticket upstream but am unsure which package or
> packages would require the update.  Are you aware of any changes that
> might be needed to the kernel config itself (ie easily made in the
> kernel .config) to support SAE and/or PMF?  I didn't find any
> documentation.  Failing that, perhaps the raspberrypi-firmware is a
> good place to start.
>
> For reference, the linux-raspberrypi4 kernel config for Arch ARM can
> be seen here: https://github.com/archlinuxarm/PKGBUILDs/blob/master/core/linux-raspberrypi4/config
>
> Thank you again for the reply and for any future ideas you wish to share.
>
> >
> > On Wed, Jun 17, 2020 at 10:28 AM John <[email protected]> wrote:
> > >
> > > On Wed, Jun 17, 2020 at 12:07 PM Dennis Bland <[email protected]> wrote:
> > > >
> > > > I have seen issues with some chipset drivers where PMF needs to be set
> > > > to optional (ieee80211w=1), even when in SAE mode.  This is especially
> > > > true when the AP is configured to support simultaneous mixed mode
> > > > (WPA2/SAE).  What version of wpa_supplicant is running on your laptop?
> > >
> > > I tried changing the value to 1 but got the same error.  The laptop
> > > runs wpa_supplicant v2.9 as does the Pi4.  You can see the Arch
> > > package (config and so forth) here:
> > > https://git.archlinux.org/svntogit/packages.git/tree/trunk?h=packages/wpa_supplicant
> > >
> > > Note that Raspbian buster is using v2.8-dev of wpa_supplicant and
> > > throws the same errors.