Re: brcmfmac SAE/WPA3 negotiation - Part 2

KeithG
2025-01-27T15:09:30Z

I just tried this and it connected 2x once from a saved key and a
second time from a new key.
Will continue testing and let you know, but this may be it!
Thanks so much for all the support.

On Mon, Jan 27, 2025 at 8:29 AM James Prestwood <prestwoj@gmail.com> wrote:
>
> Hi Keith,
>
> On 1/25/25 8:37 AM, KeithG wrote:
>
> <snip>
> >> With wpa_supplincant, before the AP sends the 'PAE:', we get this
> >> which is not in any of the iwmon logs with iwd:
> >> < Request: Set PMKSA (0x34) len 92 [ack] 14.561627
> >> Interface Index: 3 (0x00000003)
> >> PMKID: len 16
> >> 05 cb 9d 0d 9a c6 7c 42 77 b5 d2 23 f0 62 f7 4d ......|Bw..#.b.M
> >> MAC Address D8:3A:DD:60:A3:0C
> >> Unknown: 287 len 4
> >> c0 a8 00 00 ....
> >> Unknown: 288 len 1
> >> 46 F
> >> PMK: 254 len 32
> >> 35 28 07 cb 94 de 82 e7 0a 5c 73 d3 e4 1f 88 ae 5(.......\s.....
> >> 74 84 82 66 86 8d b5 aa 79 cb 75 d9 75 8d da 3a t..f....y.u.u..:
> >>> Response: Set PMKSA (0x34) len 4 [0x100] 14.562171
> >> Status: Success (0)
> >>
> >> Is there any more info or help I can provide?
>
> Looks like the only difference between IWD working and not working is
> when it includes the PMKID. This is due to the new PMKSA feature which
> looks like it requires some extra work on brcmfmac (using SET_PMKSA).
> Try disabling PMKSA in main.conf with:
>
> [General].DisablePMKSA=true
>
> This should hopefully get IWD reliably connecting.
>
> Thanks,
>
> James
>