On Mon, Oct 11, 2021 at 02:16:14PM +0200, John Crispin wrote:
> WPA3 modes require 11w to be set to optional/required. Using set_default would
> allow forcing an invalid value from UCI.
>
> Signed-off-by: John Crispin <j...@phrozen.org>
> ---
> package/network/services/hostapd/files/hostapd.sh | 4 ++--
> 1 file changed, 2 insertions(+), 2 deletions(-)
>
> diff --git a/package/network/services/hostapd/files/hostapd.sh
> b/package/network/services/hostapd/files/hostapd.sh
> index efb06427ca..36156a002c 100644
> --- a/package/network/services/hostapd/files/hostapd.sh
> +++ b/package/network/services/hostapd/files/hostapd.sh
> @@ -1211,10 +1211,10 @@ wpa_supplicant_add_network() {
>
> case "$auth_type" in
> sae|owe|eap192|eap-eap256|eap256)
> - set_default ieee80211w 2
> + ieee80211w=2
> ;;
> psk-sae)
> - set_default ieee80211w 1
> + ieee80211w=1
Doesn't that downgrade PSK-SAE which the user configured to be with
mandatory MFP to now only have optional MFP?
_______________________________________________
openwrt-devel mailing list
openwrt-devel@lists.openwrt.org
https://lists.openwrt.org/mailman/listinfo/openwrt-devel
