Re: [PATCH] Log falling back from SAE to WPA2

[Denis Kenzior <denkenz@gmail.com>]

Hi Marcel,

On 1/10/24 07:12, Marcel Holtmann wrote:
> Hi Denis,
> 
>>> I've had connections to a WPA3-Personal only network fail with no log
>>> message from iwd, and eventually figured out to was because the driver
>>> would've required using CMD_EXTERNAL_AUTH. With the added log messages
>>> the reason becomes obvious.
>>
>> Interesting.  Last time I checked only the quantenna driver used this feature and it wasn't very common.  If it isn't a secret, what card / driver do you have?
> 
> according to Arend on an email thread with the Apple WiFi support, he hinted that Broadcom with their devices/firmware opted for the CMD_EXTERNAL_AUTH option while the Cypress/Infineon devices with their firmware (like Raspberry Pi) are using the SAE offload feature.

Yeah I saw that as well.  I don't have any Cypress devices.  AFAIK Raspberry Pi 
uses brcmfmac + firmware that supports SAE authentication in CMD_CONNECT, not 
CMD_EXTERNAL_AUTH.  Someone who knows better please correct me.

> 
> So maybe it is time to implement support for CMD_EXTERNAL_AUTH.

Sure.  I don't have any devices that use CMD_EXTERNAL_AUTH, however.  Patches 
are always welcome though.

Regards,
-Denis