From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-qk1-f171.google.com (mail-qk1-f171.google.com [209.85.222.171]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 29073EEA9 for ; Mon, 27 Jan 2025 14:29:02 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.222.171 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1737988144; cv=none; b=AxCGcSM0Bor4TLhDBQBUk0+Ailm/hbjq7uUI+6x5A457fS6VNEbRZR/3w9Vnq9ZF/9183vZMeeg2CqoZlNT9vfDw0QhSokDJ/eml+ibKOIavRmtd/9SBMvkYx+1yL0RSpo97PWVSUi/LoMopH03pj2cTDWzUGVf/xlvmnvznwzI= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1737988144; c=relaxed/simple; bh=B/zJx043/p/wvH4Nl4QzDxFpuG3Tm7CPXHpgwXWDgsY=; h=Message-ID:Date:MIME-Version:Subject:To:Cc:References:From: In-Reply-To:Content-Type; b=gvyDA66KM3ORFq7SSXuiA+y1mOw7aZI2Er8CLoJYbxj45uzltWMTVpSrU31hS5YSLx4EBkVHkNL++oNPtggmQ7HI5Z+QkZse3YM3CUuGYxObjvSUYomFjLy5Y4RONzeMD/cQ1hjG66j0uKkkybJ/4xE3IaiIZU069tGidqmxqCE= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com; spf=pass smtp.mailfrom=gmail.com; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b=YAxjBpD8; arc=none smtp.client-ip=209.85.222.171 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=gmail.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b="YAxjBpD8" Received: by mail-qk1-f171.google.com with SMTP id af79cd13be357-7be3f230436so433198785a.3 for ; Mon, 27 Jan 2025 06:29:02 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1737988142; x=1738592942; darn=vger.kernel.org; h=content-transfer-encoding:in-reply-to:from:content-language :references:cc:to:subject:user-agent:mime-version:date:message-id :from:to:cc:subject:date:message-id:reply-to; bh=+rerxuWxc3AlP4zg1YaA507UnJhlV5+v4ZidVCpYaM8=; b=YAxjBpD8VNUUF99Hm9iQJTgwuwdsu7kh4TjIgSVbsnk+2hsnkZImkuVWKqT0mI/5Ya JLhqGrY+r4nVM0Moh6l8B8whZKJ74GhOrT1QKkuKQtePNyr941Nu4S7tmc+Kweg/eOor vtDPjUSelFfdf5u5R+bKiJNVBUOOIbnBqRVWGxbPB8mantzxRgI9VwGd8eWqUg7Qhwu1 HfQoHhT8/Pv8KSZp2SZVyogacNu5fMEtWWzeivX7neGXkmBrvFf22/6xLtTIe38l4K7n R/bmsf6p3HWSeJH2yV6CPwl/WzNOAyNjj3O5GCY7MLvjqaBIqNS7h1r5wchExJZ6Cn51 dLnQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1737988142; x=1738592942; h=content-transfer-encoding:in-reply-to:from:content-language :references:cc:to:subject:user-agent:mime-version:date:message-id :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=+rerxuWxc3AlP4zg1YaA507UnJhlV5+v4ZidVCpYaM8=; b=QG4rpCzmljNgfpxzUFXbMzfecGS74R6Q8xZf8x+2penYFzUcBvaxmTGoGfGnVaV4UR f3khjO8acRF/6K2J1l3+HKg5WruR6Z87xZYyjitaslU+jqmln63XICSMxOkJuw8S5Dor OurldrphMD+tQPq8Rhsg6RzXCereng4Jz0zdaiiPUx5OZPOATpik59+T5fuhvaHeI/ax II3AfaOMfagZd+Fsv0BqL4F7ZeKlGIPHk5wbRnqDphlk78wbMcuaAXN2P6k4kMYGRMUt YUQbrcng05clEuNwukbSlgtl6fbQVLGu1So5fVwmzCL+a17+u38XrKVDwGtkrCF4JQXl cHEA== X-Forwarded-Encrypted: i=1; AJvYcCVXlPoUWZfcOOqq44H7tMoqo+xwt8akm0TDrNigQNCy2QoRTeNZJQSoWraHHxPEE2nKsU8QJFC6gwu91QaUug==@vger.kernel.org X-Gm-Message-State: AOJu0YwoWa2gca9kXo2xrlg3CJ7vpvnGSMBgams3VWakkaQGRpYmVN8n C7JxcwD4BusxOnPxuG3eNXe27H51nbeR3VYRzRXt9FG9OfjPNeJb X-Gm-Gg: ASbGnctjCoUWc1w5fHbXYHOIvAF6/Arx7C/k/FvMflf93rFr2tCLwkTG/4AFl2OGLlc SQtrrHIMaRJMliJhS3qwjd9QUOM6MHOlJfiTvCb0cs9LrwOZH4DzW+oRrZFvAb7zYFIcKqxI098 UqVxR5W23OEu1MpsKSV2WQFMU3oVVuIFg6B0bd/sIBIiL1KKHAJ9n+2857IW7IRGA9im9xOUQ+i rMeeUf3xCrKVqP1SnZQSdOoVTaD8CWhG2SrCfkLYcUEwNaHKE6eflBZbsEhg3x/Sd7eJiE/Nece hK6pvWx3ACPAj8NkQDE= X-Google-Smtp-Source: AGHT+IF6pcHuCIFo6gEEsulDRRBvOPSFUX1YVEa/Z16qMurf4mfCqj0I+y6naYS8M54vbLHEBaf3RQ== X-Received: by 2002:a05:620a:440b:b0:7b6:cf60:3973 with SMTP id af79cd13be357-7be6321c80fmr6523268185a.23.1737988141970; Mon, 27 Jan 2025 06:29:01 -0800 (PST) Received: from [10.100.121.195] ([152.193.78.90]) by smtp.gmail.com with ESMTPSA id af79cd13be357-7be9ae8a5fbsm392061785a.31.2025.01.27.06.29.00 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Mon, 27 Jan 2025 06:29:01 -0800 (PST) Message-ID: <8c36a8c0-0246-4009-b79b-890e1f0a7aaa@gmail.com> Date: Mon, 27 Jan 2025 06:28:58 -0800 Precedence: bulk X-Mailing-List: linux-wireless@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: brcmfmac SAE/WPA3 negotiation - Part 2 To: KeithG , Denis Kenzior Cc: Arend Van Spriel , connman@lists.linux.dev, brcm80211@lists.linux.dev, linux-wireless@vger.kernel.org, iwd@lists.linux.dev References: <194115affe0.279b.9b12b7fc0a3841636cfb5e919b41b954@broadcom.com> Content-Language: en-US From: James Prestwood In-Reply-To: Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Hi Keith, On 1/25/25 8:37 AM, KeithG wrote: >> With wpa_supplincant, before the AP sends the 'PAE:', we get this >> which is not in any of the iwmon logs with iwd: >> < Request: Set PMKSA (0x34) len 92 [ack] 14.561627 >> Interface Index: 3 (0x00000003) >> PMKID: len 16 >> 05 cb 9d 0d 9a c6 7c 42 77 b5 d2 23 f0 62 f7 4d ......|Bw..#.b.M >> MAC Address D8:3A:DD:60:A3:0C >> Unknown: 287 len 4 >> c0 a8 00 00 .... >> Unknown: 288 len 1 >> 46 F >> PMK: 254 len 32 >> 35 28 07 cb 94 de 82 e7 0a 5c 73 d3 e4 1f 88 ae 5(.......\s..... >> 74 84 82 66 86 8d b5 aa 79 cb 75 d9 75 8d da 3a t..f....y.u.u..: >>> Response: Set PMKSA (0x34) len 4 [0x100] 14.562171 >> Status: Success (0) >> >> Is there any more info or help I can provide? Looks like the only difference between IWD working and not working is when it includes the PMKID. This is due to the new PMKSA feature which looks like it requires some extra work on brcmfmac (using SET_PMKSA). Try disabling PMKSA in main.conf with: [General].DisablePMKSA=true This should hopefully get IWD reliably connecting. Thanks, James