wpa3/sae authentication does not work with brcmfmac+connman

KeithG <[email protected]>
Newsgroups dev.linux.lists.connman
Message-ID <CAG17S_O7LdFxW4OUAoN+zOJ43MpmSg5V5O-jxkUg4aMmN1eXBw@mail.gmail.com>
I run connman on RPis. We use connman to manage the ethernet and wifi
connections.

Recently, the brcmfmac firmware was updated to the most current from cypress.
[    2.185046] brcmfmac: brcmf_fw_alloc_request: using
brcm/brcmfmac43455-sdio for chip BCM4345/6
[    2.383977] brcmfmac: brcmf_c_preinit_dcmds: Firmware: BCM4345/6
wl0: Aug 29 2023 01:47:08 version 7.45.265 (28bca26 CY) FWID
01-b677b91b

With this update, running wpa_supplicant and nmcli, I am able to
connect to a wpa3/sae ssid successfully. With connmanctl I am not able
to connect at all.

Please advise what I need to send as far as a log to show what is going on.
Form connmanctl, this is what I saw:

connmanctl> connect wifi_d83addd2ae3c_6465736b534145_managed_psk
Agent RequestInput wifi_d83addd2ae3c_6465736b534145_managed_psk
  Passphrase = [ Type=psk, Requirement=mandatory ]
Passphrase? xxxxxxxx
Agent ReportError wifi_d83addd2ae3c_6465736b534145_managed_psk
  connect-failed
Agent request cancelled by ConnMan
Error /net/connman/service/wifi_d83addd2ae3c_6465736b534145_managed_psk:
Input/output error

From the machine running hopstapd, nothing shows that it will even
start the authentication. I tried with wpa_cli and was unable to
negotiate the authentication, either. It was only with nmcli that I
was able to successfully connect.

The version of connman:
root@pi5(rw):~# connmand -v
1.41
I also tried with the most up to date git and get the same thing in
connmanctl, but this is what I get in the journal:

Aug 17 18:22:50 pi5 kernel: brcmfmac: brcmf_set_channel: set chanspec
0xd02e fail, reason -52
Aug 17 18:22:53 pi5 wpa_supplicant[4413]: wlan0: Trying to associate
with SSID 'deskSAE'
Aug 17 18:22:53 pi5 wpa_supplicant[4413]: wlan0: PMKSA-CACHE-ADDED
d8:3a:dd:60:a3:0c 0
Aug 17 18:22:53 pi5 kernel: ieee80211 phy0:
brcmf_cfg80211_external_auth: auth_status iovar failed: ret=-52
Aug 17 18:23:03 pi5 wpa_supplicant[4413]: wlan0: Authentication with
d8:3a:dd:60:a3:0c timed out.
Aug 17 18:23:03 pi5 wpa_supplicant[4413]: wlan0:
CTRL-EVENT-DISCONNECTED bssid=d8:3a:dd:60:a3:0c reason=3
locally_generated=1
Aug 17 18:23:03 pi5 wpa_supplicant[4413]: BSSID d8:3a:dd:60:a3:0c
ignore list count incremented to 2, ignoring for 10 seconds
Aug 17 18:23:03 pi5 wpa_supplicant[4413]: wlan0:
CTRL-EVENT-DSCP-POLICY clear_all
Aug 17 18:23:03 pi5 connmand[651]: Interface wlan0 [ wifi ] error
"connect-failed"
Aug 17 18:23:03 pi5 connmand[651]: Interface wlan0 [ wifi ] state is failure
Aug 17 18:23:03 pi5 wpa_supplicant[4413]: wlan0:
CTRL-EVENT-REGDOM-CHANGE init=CORE type=WORLD
Aug 17 18:23:03 pi5 wpa_supplicant[4413]: wlan0:
CTRL-EVENT-REGDOM-CHANGE init=USER type=COUNTRY alpha2=US
Aug 17 18:23:03 pi5 wpa_supplicant[4413]: wlan0: PMKSA-CACHE-REMOVED
d8:3a:dd:60:a3:0c 0

Keith
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.