public inbox for iwd@lists.linux.dev
 help / color / mirror / Atom feed
From: James Prestwood <prestwoj@gmail.com>
To: Bryce Johnson <bryce@redpinelabs.com>, iwd@lists.linux.dev
Subject: Re: On WPA3 successful reconnect with wrong password after a forget network
Date: Thu, 19 Mar 2026 10:41:29 -0700	[thread overview]
Message-ID: <5f14aa38-af20-4ba1-9d33-31cd50f70e0f@gmail.com> (raw)
In-Reply-To: <CADXxVS+V8Zbn+WV=G1eJ7pqipHNmhjd67pNM62vu8Lr_RkuVnw@mail.gmail.com>

Hi Bryce,

On 3/19/26 9:43 AM, Bryce Johnson wrote:
> Hi All,
> We ran into this edge case issue on only wpa3. If we forget a network
> and reconnect to the same network with an the incorrect password, it
> will connect anyways.  wpa1 and wpa2 don't reconnect.  This is on IWD
> 3.10.
>
Thanks for the report. I'm able to reproduce this as well. The issue is 
that with PMKSA we can see we got a match for a given SSID/MAC which 
totally bypasses the use of the passphrase, despite it being asked for. 
What we need to do is wipe all PMKSA entries for an SSID when the 
profile is removed.

Thanks,

James


      reply	other threads:[~2026-03-19 17:41 UTC|newest]

Thread overview: 2+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2026-03-19 16:43 On WPA3 successful reconnect with wrong password after a forget network Bryce Johnson
2026-03-19 17:41 ` James Prestwood [this message]

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=5f14aa38-af20-4ba1-9d33-31cd50f70e0f@gmail.com \
    --to=prestwoj@gmail.com \
    --cc=bryce@redpinelabs.com \
    --cc=iwd@lists.linux.dev \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox