Re: Is there a way to manually force the security protocol with IWD?

[Denis Kenzior <denkenz@gmail.com>]

Hi Bryce,

 > Here were the test cases
> For test case 10153_1:  The test bed AP beacons with no security.  The
> test case requires the STAUT to connect with WPA2-PSK only.  Because
> of the mismatch of security protocols, the connection will fail.

This is a tough one since iwd categorizes networks into SSID+security and treats 
each combo as a separate network.  In other words SSID Foobar that advertises 
Open and SSID Foobar that advertises WPA-Personal will be treated as two 
separate networks.

Best we can do is add some sort of global restriction setting to iwd (like 
always use WPA2+ or WPA3+).  But really, this is almost always not what a 
typical user would want.  Users do want to connect to Open/OWE networks, legacy 
networks, etc.

Another thing to try is to force OWE-only mode for the Open network, but I'm not 
sure whether that will work for the 'spirit' of what the test is trying to do. 
Adding SSID.open with something like:
"
[Settings]
TransitionDisable=true
DisabledTransitionModes=open
"

> 
> For test case 10165_1: The test bed AP advertises at WPA2-Personal
> only.  The test case requires the STAUT to connect with WPA3-Personal.
> Because of the mismatch of security protocols, the connection will
> also fail.

This is a little bit easier.  You can add a SSID.psk setting with the following:
"
[Settings]
TransitionDisable=true
DisbledTransitionModes=personal
"

Refer to man 5 iwd.network for more details.

Regards,
-Denis