From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-pg1-f179.google.com (mail-pg1-f179.google.com [209.85.215.179]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 4BDD2211493 for ; Thu, 12 Dec 2024 17:48:10 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.215.179 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1734025691; cv=none; b=LUv1pJbw69L7MCrQR1ou6xEXtOYA6HjxtwGW6indlHaN1MkGAxVQivFf9RFdSYBPj6Gc1qNPjrFQNXrh9NWtUDsORXEl+fQ3Un3UOukJUeZ1Fv/tHEQv3Sja3E0XYxW3p0ho5NxBq+OUXSbNLU9rve1pG5KF+OwNCammt4ZrTwk= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1734025691; c=relaxed/simple; bh=YWsIcsn7D0LmVlhosIM/YCCbxE8z4Uc44udR+XmJ1/4=; h=Message-ID:Date:MIME-Version:Subject:To:References:From: In-Reply-To:Content-Type; b=c5vpMcPh+fXAV8gf8A7xWBSq9/3KBEFsNhoRxsp0bj0rmCVgSNqzVTWkBZNYycSmryDo65xa1xhkLa/cZskFKKlLWEH8KjNB3hory4LTpOhR/t+5Lddx8tJ/gCGi4iiTh5Q2Y/L0ji0gTMMdb1I7Kw7XwYirGc2nDIQdkwzCBYk= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com; spf=pass smtp.mailfrom=gmail.com; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b=N40Ner2J; arc=none smtp.client-ip=209.85.215.179 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=gmail.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b="N40Ner2J" Received: by mail-pg1-f179.google.com with SMTP id 41be03b00d2f7-7fbc65f6c72so822169a12.1 for ; Thu, 12 Dec 2024 09:48:10 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1734025689; x=1734630489; darn=lists.linux.dev; h=content-transfer-encoding:in-reply-to:from:content-language :references:to:subject:user-agent:mime-version:date:message-id:from :to:cc:subject:date:message-id:reply-to; bh=xeIwPfToIzpIYSbFrK2Q53g+lNWf7z02d8ag0h1kav0=; b=N40Ner2JKV7UIebYbvgVu9u9T0OcT8Wv5uEkH2raAdglAcvxJ7sxcoJ9vV+i5WE/0J tWsr5cJ4kd2H4x9YtToTlzSSsB0YSGj+lQDjXP9iuj81A9kJPEXohmxpL2yB5IfF6iAW QJU7Vyez3Kegw5rmwplq32+c0ZRpQ1sX2yXW3KkUsXPrkVNAv2gBDLR7FB+6ly/7TUk2 kGACufWpyImj3WiSvkgsEt1qnLqp3hX64WFJCWaSL2GUo0yznMwI19lhjUAtLVmT0jiB c63C+Layojn5kNglVKe5iRwiroVb7yCj24vURwp2krDbGZ6d9ApJjc9c7sByLEENutuB xL7g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1734025689; x=1734630489; h=content-transfer-encoding:in-reply-to:from:content-language :references:to:subject:user-agent:mime-version:date:message-id :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=xeIwPfToIzpIYSbFrK2Q53g+lNWf7z02d8ag0h1kav0=; b=UqXhjqKy9NM7c1wBJrfNeFT9zOjxBqrLGBjwQ6S2pcWxEZD9IYGWuDGtnjZCUH+BI7 SwCNmh7mSXfl0T3D8pid01BLEGhM0Ho3zIstk9U5E9cjk4K1h8FHkpKYr7eW9qKwdNI7 cwDFuCWPXPxJFzVVaEVaGld6pHYroqIRelN2mQeIszWptNYwGTd0NWGMizHx2QcVIBNO FB+t2a0ar3WZft91cTBiEr0cjbDWwjLg2NkAgbfdWT9TLFbYdoc/2Dz46BsOhfEQPehO MLfhua05fIriGBlrCcwhnsOlX7P3TYBdVdDXRs5a7xyFD//TENsx4haLdXNJVvcep+yL ripg== X-Forwarded-Encrypted: i=1; AJvYcCXQyem2Bg+dA8uAmuQBHFQdZchz8Q/MvrojtrA+Ya+fgX2A/Sw09f2gOhbUYdiz9SuNIyxWWz4RK7s=@lists.linux.dev X-Gm-Message-State: AOJu0Yw5ka5gtLMhYqxJKDnJ/KWDcyf0S3xzTcsJ4/0WmmNYB5B9L7z9 q91jFtqafQk7X7Q9YtudR7mC4z8dCfCogm1qJPjDuGmpnFkw5po/ X-Gm-Gg: ASbGncsHPBWzwDgoHHuULuJAxu4PuZEl/U/X0DdiV6VlzXnK59wYGY2IFTzkSf0bU3p HMCtjDb4LqIFHFJRdplxLTj/RAJQL7aBLnxEK8zhv3xKBTuLwH65cVVu8hvAvxgGifAiQ0rryzK So7Zuw0SgwYAEZK30bh9qO03WpNoZoXmW1nYcjVsOq40QWwqNGWi0OdHJRSa5csoMIKXjNuxBx0 L21zLlZgQ8biT61f7z1/lKDq4hZ8MZXGYXXlk+DopP0i3QIQ5T+S6FOsiJX X-Google-Smtp-Source: AGHT+IF8GrvUMxDv3zhXsNlEkygyTPRmnU5q/9PGL7b0k5f1pLorPpMd/M9pYJhjqgBbvgiVCyE2eg== X-Received: by 2002:a17:90b:278f:b0:2ee:cd83:8fe6 with SMTP id 98e67ed59e1d1-2f13932900amr7466787a91.35.1734025689464; Thu, 12 Dec 2024 09:48:09 -0800 (PST) Received: from [10.100.121.195] ([152.193.78.90]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-2f142d90bb0sm1558314a91.9.2024.12.12.09.48.07 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Thu, 12 Dec 2024 09:48:08 -0800 (PST) Message-ID: <356e451a-0702-44a3-8537-3c9a30854f4d@gmail.com> Date: Thu, 12 Dec 2024 09:48:05 -0800 Precedence: bulk X-Mailing-List: brcm80211@lists.linux.dev List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: brcmfmac SAE/WPA3 negotiation To: KeithG , brcm80211@lists.linux.dev, linux-wireless@vger.kernel.org, Arend Van Spriel , Denis Kenzior References: Content-Language: en-US From: James Prestwood In-Reply-To: Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit On 12/12/24 6:24 AM, KeithG wrote: > Based on a hunch that brcmfmac dbug might reveal something, I turned > it on to see what turned up. I attempted the same as before: using iwd > to connect to the WPA3 AP. > > [iwd]# station wlan0 connect deskSAE > Type the network passphrase for deskSAE psk. > Passphrase: ********* > [iwd]# station wlan0 show > Station: wlan0 > -------------------------------------------------------------------------------- > Settable Property Value > -------------------------------------------------------------------------------- > Scanning no > State connecting > Connected network deskSAE > IPv4 address 169.254.203.147 > > the attached log shows brcmfmac debug > > it always shows 'State connecting' never connected. > > Is one of these what is causing it to error out: > Dec 09 18:11:06 jackrune kernel: brcmfmac: brcmf_fil_cmd_data Firmware > error: BCME_UNSUPPORTED (-23) > Dec 09 18:11:06 jackrune kernel: brcmfmac: brcmf_fil_iovar_data_get > ifidx=0, name=tdls_sta_info, len=296, err=-52 > ... > Dec 09 18:11:06 jackrune kernel: brcmfmac: brcmf_fil_cmd_data Firmware > error: BCME_BADADDR (-21) > Dec 09 18:11:06 jackrune kernel: brcmfmac: brcmf_fil_iovar_data_get > ifidx=0, name=sta_info, len=296, err=-52 > ... > Dec 09 18:33:32 jackrune kernel: ieee80211 phy0: > brcmf_cfg80211_get_station: GET STA INFO failed, -52 > > I do not know what BCME is. > > > On Mon, Dec 9, 2024 at 8:30 AM KeithG wrote: >> I poked at this a while back and decided to try it again over the weekend. >> >> Infineon has released a new firmware: >> Firmware: BCM4345/6 wl0: Oct 28 2024 23:27:00 version 7.45.286 >> (be70ab3 CY) FWID 01-95efe7fa >> it is not in the RPiOS release, yet, but I installed it on a Pi3B+ and >> decided to give it a try. I have an AP running WPA3 personal on a >> desktop in the home and can connect to it with my phone as proof that >> it 'works'. >> >> I tried to connect to it once again from the Pi while running this new >> firmware. It gets closer than last time I checked, but it does not >> actually negotiate a functional connection. >> I tried with connman/iwd, NetworkManager/iwd and it gets close, but >> still errors out. I get a number of these in the iwmon log: >> >>> Response: Get Station (0x11) len 4 38.439787 >> Status: Invalid exchange (52) >> >> Can I probe this further to assist in diagnosing the cause and >> potentially help with a solution? >> The log is attached. Keith, you may want to also include the iwmon logs to show the actual netlink packets going across. I looked at those privately and the full SAE exchange is completing successfully via ext auth. When IWD receives the SAE confirm message it then sends a NL80211_CMD_EXTERNAL_AUTH with a success code which then results in the error -52 Invalid Exchange. I'm unsure exactly how external auth is supposed to work, but if IWD needs to change something we can do that, we just need to be told what the kernel/driver expects. Thanks, James >> >> Regards, >> >> Keith