From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mout-b-112.mailbox.org (mout-b-112.mailbox.org [195.10.208.42]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 558431ABEBF for ; Wed, 23 Oct 2024 13:34:40 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=195.10.208.42 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1729690484; cv=none; b=kWObVCOEzdxImVj4BiamLip9kGAWuyPykibEem++JjpJj7TzYL/BWJO8AVVbLBM5Zq/aLoc9teobefM50V0aNrhIuX41q31DCrfg3JC/q999pVogp8ogGk5VB8x1oE/YKsS5a4dt5kRL5bncsHz1wcb/AWWAPMXsRhjlS7paCbU= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1729690484; c=relaxed/simple; bh=bBoMD5PVadEvnHIpeOlNNpFAro2u79pCB4+2r5Qs0r8=; h=Message-ID:Date:MIME-Version:Subject:To:Cc:References:From: In-Reply-To:Content-Type; b=JLDH1IkVG1FBU9v1+erj10EeBnrJCFfhzUmwVuFjSPYa+wruRPZSQlomRFXIU8ORePErfM317VT8tGjLa1HYkrgpDmDDkURjUwkM+E9o+Y1APwUkTEfZs7rJsk2PbcDAEQZh9gqBHvChqy0Rsa/7sBmqbjHJXMt/OiD1DyBZsuQ= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=tavla.de; spf=pass smtp.mailfrom=tavla.de; dkim=pass (2048-bit key) header.d=tavla.de header.i=@tavla.de header.b=WD46POsH; arc=none smtp.client-ip=195.10.208.42 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=tavla.de Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=tavla.de Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=tavla.de header.i=@tavla.de header.b="WD46POsH" Received: from smtp1.mailbox.org (smtp1.mailbox.org [10.196.197.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mout-b-112.mailbox.org (Postfix) with ESMTPS id 4XYVQH2Hv7zDtLH; Wed, 23 Oct 2024 15:34:31 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=tavla.de; s=MBO0001; t=1729690471; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=IduXuTa5cvKKXcf3gI2l98UGbN45bFaWmUvatIMNsTE=; b=WD46POsH1gsOgytS0shTWi3IhOpe+V/Bajpl2jsNPDXSy2KIGbadYUc2NYA79SeAmCNqz2 W6/zvkrJMmzjalqo3nlaiKAELOMpICnQjmRHY+rOaGhLiY7FdZ/l/pA5NaumRJvBYib1zi LteNDB02sEVuJJsQUb0AXjBa7Tv6tjp7uMEsOtpK+ZEwhdcz5priJKNh40pmus8vCfaI9o gpqB0426VGUGWSq8gbl5lFX7IaYTGEzuTciCUH4SVC523Y1IArhYC0Cjn8jUEuG9sLi8h7 zAkYiSm+6LtdZOIx0xSY4NW11On8BfFV0+igkDNMnYWqnFCj08cHVkeXV7SmEw== Message-ID: <6aff3d6b-1ea8-4f39-8f7f-6be2f65dfd61@tavla.de> Date: Wed, 23 Oct 2024 15:34:30 +0200 Precedence: bulk X-Mailing-List: iwd@lists.linux.dev List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Subject: Re: IWD 1.27 with brcmfmac not working for roaming To: James Prestwood Cc: iwd@lists.linux.dev, Denis Kenzior , Arend van Spriel References: <5efc11fc-9c21-44a0-b282-5d41bfb96a8c@gmail.com> <1761198e-9f41-4e5a-b2b9-a1652732346d@gmail.com> <6898cd84-c7b9-4fa0-aeb5-c7a90d81b58b@tavla.de> <5a128900-432f-439e-9008-3b303ee72eb1@gmail.com> <2dacc589-9927-40f7-85ed-5f6b2afbbd41@tavla.de> <192af85f1e0.279b.9b12b7fc0a3841636cfb5e919b41b954@broadcom.com> <2ab8601e-1601-4d4f-b58d-e9f23877650f@gmail.com> <192b00cf460.279b.9b12b7fc0a3841636cfb5e919b41b954@broadcom.com> <54a62c50-5c9b-47c6-b8ab-f7369381fdf9@gmail.com> <77fc14d0-96bc-465c-b425-111ba4310c86@gmail.com> <21d3d993-f753-4b01-98f1-5a9259cfb5a3@gmail.com> Content-Language: en-GB, de-DE From: Martin Petzold Organization: TAVLA Technology GmbH In-Reply-To: <21d3d993-f753-4b01-98f1-5a9259cfb5a3@gmail.com> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit Hi James, Am 23.10.24 um 15:22 schrieb James Prestwood: > Hi Martin, > > On 10/23/24 5:19 AM, Martin Petzold wrote: >> Hi James, >> >> Am 23.10.24 um 14:13 schrieb James Prestwood: >>> Hi Martin, >>> >>> On 10/23/24 5:02 AM, Martin Petzold wrote: >>>> Hi Arend and James, >>>> >>>> Am 21.10.24 um 20:26 schrieb Arend van Spriel: >>>>> On 10/21/2024 7:40 PM, Denis Kenzior wrote: >>>>>> Hi Arend, >>>>>> >>>>>>> >>>>>>> I have not seen patches for OWE in brcmfmac. Looking at the >>>>>>> supported ciphers: >>>>>> >>>>>> OWE is an AKM.  It still uses CCMP/CMAC underneath. >>>>> >>>>> My bad. Always confused by those concepts. >>>>> >>>>>>> >>>>>>> Supported Ciphers: >>>>>>>   * WEP40 (00-0f-ac:1) >>>>>>>   * WEP104 (00-0f-ac:5) >>>>>>>   * TKIP (00-0f-ac:2) >>>>>>>   * CCMP-128 (00-0f-ac:4) >>>>>>>   * CMAC (00-0f-ac:6) >>>>>>> >>>>>>> The error message seems to match with the above. >>>>>> >>>>>> I've never seen support for OWE in brcmfmac mentioned. OWE >>>>>> requires CMD_AUTHENTICATE / CMD_ASSOCIATE (or CMD_EXTERNAL_AUTH) >>>>>> to derive the PMK, so iwd can't support it on FullMAC. >>>>> >>>>> I have never seen any mention of OWE either. Regarding >>>>> CMD_EXTERNAL_AUTH support I recently posted patches on >>>>> linux-wireless list as RFT. There has been zero feedback and so I >>>>> assume also zero interest. In order to use CMD_EXTERNAL_AUTH the >>>>> firmware needs to advertise "sae_ext" in fwcap debugfs file. So if >>>>> Martin can check that, ie: >>>>> >>>>> $ grep sae_ext /sys/kernel/debug/ieee80211/phy0/fwcap >>>>> >>>>> >>>> @James: Could please check the logs (PATCH WAS APPLIED): >>>> >>>> A. Initial boot and connect (device remained connected) >>> >>> On this run I'm seeing an agent connecting and issuing an explicit >>> connect call rather than IWD autoconnecting. This is fine, and will >>> create a new .open profile. >>> >>> Okt 23 12:39:35 tavla iwd[383]: src/agent.c:agent_free() agent free >>> 0xaaaadbf376a0 >>> Okt 23 12:39:35 tavla iwd[383]: src/agent.c:agent_register() agent >>> register called >>> Okt 23 12:39:35 tavla iwd[383]: src/agent.c:agent_register() agent >>> :1.69 path /agent/1420 >>> Okt 23 12:39:35 tavla iwd[383]: src/network.c:network_connect() >>> >>>> B. Reboot -> device does NOT connect >>> >>> This tells me you have no profile in /var/lib/iwd >>> >>>> >>>> ----- >>>> >>>> tavla@tavla:~$ sudo ls -l /system/var/lib/iwd/ >>>> insgesamt 4 >>>> -rw------- 1 root root    0 23. Okt 12:39 XYZ-Gast.open >>>> drwx------ 2 root root 4096  4. Apr 2024  hotspot >>>> tavla@tavla:~$ sudo cat /system/var/lib/iwd/XYZ-Gast.open >>>> tavla@tavla:~$ >>> >>> IWD is looking in /var/lib/iwd as seen by: >>> >>> Okt 23 12:35:58 tavla iwd[383]: src/storage.c:storage_create_dirs() >>> Using state directory /var/lib/iwd >>> >>> Not sure if you have /system/var/lib/iwd mounted there or what, but >>> it seems IWD cannot find that profile. IWD will not autoconnect to a >>> random open network without a profile. On your first boot you are >>> forcing a connection which should generate a profile, but on the >>> second boot no profile exists. So that is where I could check, where >>> is the profile going? can you "ls" that directory on the _second_ >>> boot to see if it exists? >> ----- >> tavla@tavla:~$ sudo ls -l /var/lib/iwd/ >> insgesamt 4 >> -rw------- 1 root root    0 23. Okt 12:39 XYZ-Gast.open >> drwx------ 2 root root 4096  4. Apr 2024  hotspot >> tavla@tavla:~$ sudo ls -l /system/var/lib/iwd/ >> insgesamt 4 >> -rw------- 1 root root    0 23. Okt 12:39 XYZ-Gast.open >> drwx------ 2 root root 4096  4. Apr 2024  hotspot >> tavla@tavla:~$ sudo cat /system/var/lib/iwd/XYZ-Gast.open >> tavla@tavla:~$ >> tavla@tavla:~$ >> tavla@tavla:~$ iwctl known-networks list >>                                  Known Networks >> -------------------------------------------------------------------------------- >> >>   Name                              Security     Hidden     Last >> connected >> -------------------------------------------------------------------------------- >> >>   XYZ-Gast                          open                    Oct 23, >> 11:39 AM >> >> tavla@tavla:~$ iwctl known-networks XYZ-Gast show >>                             Known Network: XYZ-Gast >> -------------------------------------------------------------------------------- >> >>   Settable  Property Value >> -------------------------------------------------------------------------------- >> >>             Name XYZ-Gast >> Hidden >>          *  AutoConnect yes >> >> tavla@tavla:~$ >> tavla@tavla:~$ iwctl station wlan0 show >>                                  Station: wlan0 >> -------------------------------------------------------------------------------- >> >>   Settable  Property Value >> -------------------------------------------------------------------------------- >> >>             Scanning no >>             State                 disconnected >> >> ----- > I was barking up the wrong tree. I found a bug in the BSS selection > specific to OWE transitional networks. I just sent an RFC patch to the > list. Note, you will still need the earlier patches to disable OWE in > order to force the connection to the open network. I have included it in the build. However, I am at the clients site so no quick IWD (cross-)build possible. Full build will take ~1h. Will then test immediately and let you know. Thanks, Martin