From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mout-b-210.mailbox.org (mout-b-210.mailbox.org [195.10.208.40]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 4EEAB1ABED7 for ; Wed, 23 Oct 2024 12:19:42 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=195.10.208.40 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1729685986; cv=none; b=hnBu3Bq+uZj3iIR+t5Myj10B+gzhiIIoE94XEO7cinuXLFrD9LCzQ3CDzYLrr8A8fKxztuf+aYm2EzUTB2QV3auPm9hcmNM8BNs+x6sZhmbKUErGrTBcXbxA8DfWN9YOLzcSR6igpPBpaasStNL0p3YNiF0DF7juw+WJdLflEzg= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1729685986; c=relaxed/simple; bh=51wXoLq3Ft8fGjwEmn5h841XpnoZJfHOcyQNlU8MIBg=; h=Message-ID:Date:MIME-Version:Subject:To:Cc:References:From: In-Reply-To:Content-Type; b=If1aAuXWUUxJF2bWqBo5x9sLxZzLYjH/aXIrDgqoE/mOUCAO842lEeLZKH+otiE1M9Pp8qw2QlUedD9uc3/v6Sy7nirXDk71R/QarLLM0quhmoriaLYTlvJIZstmUYnmHa5vTw3rBxXI0HYlgfZ9OEscrmAwxjCini3PkyRsCDI= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=tavla.de; spf=pass smtp.mailfrom=tavla.de; dkim=pass (2048-bit key) header.d=tavla.de header.i=@tavla.de header.b=u1Xp4flo; arc=none smtp.client-ip=195.10.208.40 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=tavla.de Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=tavla.de Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=tavla.de header.i=@tavla.de header.b="u1Xp4flo" Received: from smtp202.mailbox.org (smtp202.mailbox.org [IPv6:2001:67c:2050:b231:465::202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mout-b-210.mailbox.org (Postfix) with ESMTPS id 4XYSlt1ykyzDvR6; Wed, 23 Oct 2024 14:19:38 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=tavla.de; s=MBO0001; t=1729685978; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=RIlJ21CpSLZuPJ9rSDi0sIvtzhHtFcrBm93YzS7Jbcw=; b=u1Xp4flobavKVKmLBFkXkAFFS8rPJk2DsSTvhKjWDSxnzpinAE9q7CoArJNEmdf4arf8X1 o2m9td4JjTFcaKJ0kYn+ajZIU0n6szSUrZw32o2ZjAlQGnQukIvFIYm1wIlqvGy2qs1bIY Bka6jkJY/zdkW1XB9fyCkoW3EJ+UTpYgQi9oCkD6rWGOv+kGNPqbAWU4wqyRkYwu1bSa5k ml049L6gCsLJSpRnMpTZ+L4FEsuUWcCU6qzidyyqn3Mzg+T5GKxDvcWUQTVKP8nea9rHeT GBnLS6FteuYZxsGV9kkSEr2S+F0GHNjCy1Wostdc1fKgbvBikZ7DMEkVNnTR1A== Message-ID: Date: Wed, 23 Oct 2024 14:19:36 +0200 Precedence: bulk X-Mailing-List: iwd@lists.linux.dev List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Subject: Re: IWD 1.27 with brcmfmac not working for roaming To: James Prestwood Cc: iwd@lists.linux.dev, Denis Kenzior , Arend van Spriel References: <5efc11fc-9c21-44a0-b282-5d41bfb96a8c@gmail.com> <1761198e-9f41-4e5a-b2b9-a1652732346d@gmail.com> <6898cd84-c7b9-4fa0-aeb5-c7a90d81b58b@tavla.de> <5a128900-432f-439e-9008-3b303ee72eb1@gmail.com> <2dacc589-9927-40f7-85ed-5f6b2afbbd41@tavla.de> <192af85f1e0.279b.9b12b7fc0a3841636cfb5e919b41b954@broadcom.com> <2ab8601e-1601-4d4f-b58d-e9f23877650f@gmail.com> <192b00cf460.279b.9b12b7fc0a3841636cfb5e919b41b954@broadcom.com> <54a62c50-5c9b-47c6-b8ab-f7369381fdf9@gmail.com> <77fc14d0-96bc-465c-b425-111ba4310c86@gmail.com> Content-Language: en-GB, de-DE From: Martin Petzold Organization: TAVLA Technology GmbH In-Reply-To: <77fc14d0-96bc-465c-b425-111ba4310c86@gmail.com> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-Rspamd-Queue-Id: 4XYSlt1ykyzDvR6 Hi James, Am 23.10.24 um 14:13 schrieb James Prestwood: > Hi Martin, > > On 10/23/24 5:02 AM, Martin Petzold wrote: >> Hi Arend and James, >> >> Am 21.10.24 um 20:26 schrieb Arend van Spriel: >>> On 10/21/2024 7:40 PM, Denis Kenzior wrote: >>>> Hi Arend, >>>> >>>>> >>>>> I have not seen patches for OWE in brcmfmac. Looking at the >>>>> supported ciphers: >>>> >>>> OWE is an AKM.  It still uses CCMP/CMAC underneath. >>> >>> My bad. Always confused by those concepts. >>> >>>>> >>>>> Supported Ciphers: >>>>>   * WEP40 (00-0f-ac:1) >>>>>   * WEP104 (00-0f-ac:5) >>>>>   * TKIP (00-0f-ac:2) >>>>>   * CCMP-128 (00-0f-ac:4) >>>>>   * CMAC (00-0f-ac:6) >>>>> >>>>> The error message seems to match with the above. >>>> >>>> I've never seen support for OWE in brcmfmac mentioned.  OWE >>>> requires CMD_AUTHENTICATE / CMD_ASSOCIATE (or CMD_EXTERNAL_AUTH) to >>>> derive the PMK, so iwd can't support it on FullMAC. >>> >>> I have never seen any mention of OWE either. Regarding >>> CMD_EXTERNAL_AUTH support I recently posted patches on >>> linux-wireless list as RFT. There has been zero feedback and so I >>> assume also zero interest. In order to use CMD_EXTERNAL_AUTH the >>> firmware needs to advertise "sae_ext" in fwcap debugfs file. So if >>> Martin can check that, ie: >>> >>> $ grep sae_ext /sys/kernel/debug/ieee80211/phy0/fwcap >>> >>> >> @James: Could please check the logs (PATCH WAS APPLIED): >> >> A. Initial boot and connect (device remained connected) > > On this run I'm seeing an agent connecting and issuing an explicit > connect call rather than IWD autoconnecting. This is fine, and will > create a new .open profile. > > Okt 23 12:39:35 tavla iwd[383]: src/agent.c:agent_free() agent free > 0xaaaadbf376a0 > Okt 23 12:39:35 tavla iwd[383]: src/agent.c:agent_register() agent > register called > Okt 23 12:39:35 tavla iwd[383]: src/agent.c:agent_register() agent > :1.69 path /agent/1420 > Okt 23 12:39:35 tavla iwd[383]: src/network.c:network_connect() > >> B. Reboot -> device does NOT connect > > This tells me you have no profile in /var/lib/iwd > >> >> ----- >> >> tavla@tavla:~$ sudo ls -l /system/var/lib/iwd/ >> insgesamt 4 >> -rw------- 1 root root    0 23. Okt 12:39 XYZ-Gast.open >> drwx------ 2 root root 4096  4. Apr 2024  hotspot >> tavla@tavla:~$ sudo cat /system/var/lib/iwd/XYZ-Gast.open >> tavla@tavla:~$ > > IWD is looking in /var/lib/iwd as seen by: > > Okt 23 12:35:58 tavla iwd[383]: src/storage.c:storage_create_dirs() > Using state directory /var/lib/iwd > > Not sure if you have /system/var/lib/iwd mounted there or what, but it > seems IWD cannot find that profile. IWD will not autoconnect to a > random open network without a profile. On your first boot you are > forcing a connection which should generate a profile, but on the > second boot no profile exists. So that is where I could check, where > is the profile going? can you "ls" that directory on the _second_ boot > to see if it exists? ----- tavla@tavla:~$ sudo ls -l /var/lib/iwd/ insgesamt 4 -rw------- 1 root root    0 23. Okt 12:39 XYZ-Gast.open drwx------ 2 root root 4096  4. Apr 2024  hotspot tavla@tavla:~$ sudo ls -l /system/var/lib/iwd/ insgesamt 4 -rw------- 1 root root    0 23. Okt 12:39 XYZ-Gast.open drwx------ 2 root root 4096  4. Apr 2024  hotspot tavla@tavla:~$ sudo cat /system/var/lib/iwd/XYZ-Gast.open tavla@tavla:~$ tavla@tavla:~$ tavla@tavla:~$ iwctl known-networks list                                  Known Networks --------------------------------------------------------------------------------   Name                              Security     Hidden     Last connected --------------------------------------------------------------------------------   XYZ-Gast                          open                    Oct 23, 11:39 AM tavla@tavla:~$ iwctl known-networks XYZ-Gast show                             Known Network: XYZ-Gast --------------------------------------------------------------------------------   Settable  Property Value --------------------------------------------------------------------------------             Name XYZ-Gast Hidden          *  AutoConnect yes tavla@tavla:~$ tavla@tavla:~$ iwctl station wlan0 show                                  Station: wlan0 --------------------------------------------------------------------------------   Settable  Property Value --------------------------------------------------------------------------------             Scanning no             State                 disconnected ----- > >> >> ----- >> >> @Arend: Here the requested output (debugging enabled; PATCHES ALREADY >> APPLIED!). >> >> ----- >> >> tavla@tavla:~$ sudo cat /sys/kernel/debug/ieee80211/phy0/fwcap >> ap >> sta >> wme >> 802.11d >> 802.11h >> rm >> cqa >> ccx >> cac >> dualband >> ampdu >> ampdu_tx >> ampdu_rx >> amsdurx >> amsdutx >> radio_pwrsave >> btamp >> p2p >> proptxstatus >> mchan >> vht-prop-rates >> p2po >> anqpo >> txpwrcache >> stbc-tx >> stbc-rx-1ss >> >> ----- >> >> Best regards, >> >> Martin