Re: wpa3/sae authentication does not work with brcmfmac+connman

On Mon, Aug 19, 2024 at 9:46 AM Denis Kenzior <[email protected]> wrote:
>
> Hi Keith,
>
> >
> > With this update, running wpa_supplicant and nmcli, I am able to
> > connect to a wpa3/sae ssid successfully. With connmanctl I am not able
> > to connect at all.
>
> That's because the firmware is broken, as I've pointed out before.
>
> > Aug 17 18:22:53 pi5 kernel: ieee80211 phy0:
> > brcmf_cfg80211_external_auth: auth_status iovar failed: ret=-52
>
> There's that errno -52 (Invalid Exchange).  Basically the CMD_CONNECT to SAE
> fails, and ConnMan (correctly) reports the error.
>
> Regards,
> -Denis

I get it that brcmfmac is broken, but the latest
Broadcom/Cypress/Infineon firmware that was pushed to the kernel on
our RPis appears to be broken differently than previous versions.
NetworkManager, nmcli, works with this newest firmware and is able to
connect to a wpa3/sae SSID when I use it with wpa_supplicant. Is
NetworkManager modified to handle this broken firmware in a
non-standard way?

I was able to negotiate a connection with: "nmcli --ask dev wifi
connect SAEssid"

Keith