Package: wpasupplicant
Version: 2:2.4-1
Severity: normal
Tags: patch
It was observed that Debian's wpa_supplicant is not able to connect to connect
to networks with key_mgmt WPA-EAP-SUITE-B and/or WPA-EAP-SUITE-B-192 (aka
WPA3-Enterprise 192-bit mode). The upstream wpa_supplicant supports this since
2.4. Following is seen when trying to load a config with this kind of
configuration:
1613046731.169674: Line: 3 - start of a new network block
1613046731.169679: ssid - hexdump_ascii(len=11):
41 50 38 34 30 2d 57 50 41 32 33 AP840-WPA23
1613046731.169692: proto: 0x2
1613046731.169696: Line 9: invalid key_mgmt 'WPA-EAP-SUITE-B-192'
1613046731.169699: Line 9: no key_mgmt values configured.
1613046731.169701: key_mgmt: 0x0
1613046731.169704: Line 9: failed to parse key_mgmt 'WPA-EAP-SUITE-B-
192'.
1613046731.169708: ieee80211w=2 (0x2)
The used config was:
ctrl_interface=/run/wpa_supplicant
ctrl_interface_group=root
network={
ssid="AP840-WPA23"
scan_ssid=1
proto=RSN
key_mgmt=WPA-EAP-SUITE-B-192
ieee80211w=1
pairwise=GCMP-256
group=GCMP-256
group_mgmt=BIP-GMAC-256
eap=TLS
identity="anonymous"
ca_cert="/home/user/rsa3072-ca.crt"
client_cert="/home/user/rsa3072-user.crt"
private_key="/home/user/rsa3072-user.key"
private_key_passwd="wifi"
}
The problem can be solved by adding following two lines to the files in
debian/config/wpasupplicant/
CONFIG_SUITEB=y
CONFIG_SUITEB192=y
This is also breaking the support for these kind of networks in
network-manager.
--
Jan Fuchs
development engineer
Simon Wunderlich Systementwicklung & Beratung
Herrenstr. 6, 08523 Plauen, VAT-ID: DE 279397655
