Launchpad has imported 45 comments from the remote bug at
https://bugzilla.opensuse.org/show_bug.cgi?id=1195395.

If you reply to an imported comment from within Launchpad, your comment
will be sent to the remote bug automatically. Read more about
Launchpad's inter-bugtracker facilities at
https://help.launchpad.net/InterBugTracking.

------------------------------------------------------------------------
On 2022-02-01T14:37:28+00:00 Reiokorn wrote:

Created attachment 855766
log file of wpa_supplicant

Hello, 
after the recent update to Tumbleweed, and the wpa_supplicant to version 2.10, 
I'm no longer able to connect to my home WLAN with my laptop. 

I've included the wpa_supplicant.log file for diagnosis.

Reply at:
https://bugs.launchpad.net/ubuntu/+source/wpasupplicant/+bug/1967690/comments/0

------------------------------------------------------------------------
On 2022-02-01T14:52:33+00:00 Andreas Stieger wrote:

This came from https://build.opensuse.org/request/show/948420

Reply at:
https://bugs.launchpad.net/ubuntu/+source/wpasupplicant/+bug/1967690/comments/1

------------------------------------------------------------------------
On 2022-02-01T14:59:18+00:00 Dmueller-4 wrote:

*** Bug 1195312 has been marked as a duplicate of this bug. ***

Reply at:
https://bugs.launchpad.net/ubuntu/+source/wpasupplicant/+bug/1967690/comments/2

------------------------------------------------------------------------
On 2022-02-01T15:13:43+00:00 Dmueller-4 wrote:

I submitted a followup there that will hopefully fix this (I can not
reproduce it here for some weird reason):
https://build.opensuse.org/request/show/950290

Reply at:
https://bugs.launchpad.net/ubuntu/+source/wpasupplicant/+bug/1967690/comments/3

------------------------------------------------------------------------
On 2022-02-01T16:13:52+00:00 Dmueller-4 wrote:

Marcus, since you can apparently reproduce this issue, can you test the
submission in comment 3?

Reply at:
https://bugs.launchpad.net/ubuntu/+source/wpasupplicant/+bug/1967690/comments/4

------------------------------------------------------------------------
On 2022-02-01T16:32:06+00:00 Meissner-i wrote:

Created attachment 855771
wpa_supplicant.log with dirks fixes

i tried your version in home:dirkmueller:Factory wpa_supplicant

but no change.
i attached the logfile resulting from this

Reply at:
https://bugs.launchpad.net/ubuntu/+source/wpasupplicant/+bug/1967690/comments/5

------------------------------------------------------------------------
On 2022-02-01T17:03:21+00:00 Meissner-i wrote:

Created attachment 855773
wpa_supplicant.log with dirks fixes

did not work for me

Reply at:
https://bugs.launchpad.net/ubuntu/+source/wpasupplicant/+bug/1967690/comments/6

------------------------------------------------------------------------
On 2022-02-01T17:06:11+00:00 Dmueller-4 wrote:

are you all using networkmanager?

Reply at:
https://bugs.launchpad.net/ubuntu/+source/wpasupplicant/+bug/1967690/comments/7

------------------------------------------------------------------------
On 2022-02-01T17:10:52+00:00 Reiokorn wrote:

(In reply to Dirk Mueller from comment #7)
> are you all using networkmanager?

Yes, is it related?

Reply at:
https://bugs.launchpad.net/ubuntu/+source/wpasupplicant/+bug/1967690/comments/8

------------------------------------------------------------------------
On 2022-02-01T17:37:27+00:00 Reiokorn wrote:

Created attachment 855774
journalctl -b

Reply at:
https://bugs.launchpad.net/ubuntu/+source/wpasupplicant/+bug/1967690/comments/9

------------------------------------------------------------------------
On 2022-02-01T19:47:08+00:00 Dmueller-4 wrote:

(In reply to B from comment #8)
> > are you all using networkmanager? 
> Yes, is it related?

I'm using wicked where everything seems to be working. in another mail
discussion it became clear that switching to wicked fixed the issue for
others. just trying to understand if there is one problem or more than
one.

Reply at:
https://bugs.launchpad.net/ubuntu/+source/wpasupplicant/+bug/1967690/comments/10

------------------------------------------------------------------------
On 2022-02-01T22:00:37+00:00 Dmueller-4 wrote:

thanks for the traces. so I switched to networkmanager as well, and it
still works here just fine.

however, I found this which describes the same issue, also with
status_code=0x40 rejection:

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1003907


it looks like a defect on the fritzbox side according to the analysis there, 
where WPA2+WPA3 transitional mode is not working as the AP is not indicating it 
needs 11W, while it refused to connect without it.

Reply at:
https://bugs.launchpad.net/ubuntu/+source/wpasupplicant/+bug/1967690/comments/11

------------------------------------------------------------------------
On 2022-02-01T22:12:38+00:00 Dmueller-4 wrote:

Please retest with  wpa_supplicant from here:


https://download.opensuse.org/repositories/home:/dirkmueller:/Factory/standard/x86_64/

it has SAE (WPA3) disabled, so that should bypass this issue.

Reply at:
https://bugs.launchpad.net/ubuntu/+source/wpasupplicant/+bug/1967690/comments/12

------------------------------------------------------------------------
On 2022-02-01T22:14:35+00:00 Reiokorn wrote:

(In reply to Dirk Mueller from comment #11)
> thanks for the traces. so I switched to networkmanager as well, and it still
> works here just fine. 
> 
> however, I found this which describes the same issue, also with
> status_code=0x40 rejection:
> 
> https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1003907
> 
> 
> it looks like a defect on the fritzbox side according to the analysis there,
> where WPA2+WPA3 transitional mode is not working as the AP is not indicating
> it needs 11W, while it refused to connect without it.

I would like to note that the previous version did not cause any
problems, even with the WPA2+WPA3 transition mode.

Reply at:
https://bugs.launchpad.net/ubuntu/+source/wpasupplicant/+bug/1967690/comments/13

------------------------------------------------------------------------
On 2022-02-01T22:59:26+00:00 Reiokorn wrote:

(In reply to Dirk Mueller from comment #12)
> Please retest with  wpa_supplicant from here:
> 
> 
> https://download.opensuse.org/repositories/home:/dirkmueller:/Factory/
> standard/x86_64/
> 
> it has SAE (WPA3) disabled, so that should bypass this issue.


OK, I tried your modified version, but it didn't fix the issue. Still can't 
connect.

Reply at:
https://bugs.launchpad.net/ubuntu/+source/wpasupplicant/+bug/1967690/comments/14

------------------------------------------------------------------------
On 2022-02-02T01:35:00+00:00 Reiokorn wrote:

(In reply to Dirk Mueller from comment #11)
> thanks for the traces. so I switched to networkmanager as well, and it still
> works here just fine. 
> 
> however, I found this which describes the same issue, also with
> status_code=0x40 rejection:
> 
> https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1003907
> 
> 
> it looks like a defect on the fritzbox side according to the analysis there,
> where WPA2+WPA3 transitional mode is not working as the AP is not indicating
> it needs 11W, while it refused to connect without it.

I've switched to wicked service instead of networkmanager and the
problem is gone even with the 2.10 (standard version) wpa_supplicant

Issue in Networkmanager instead?

Reply at:
https://bugs.launchpad.net/ubuntu/+source/wpasupplicant/+bug/1967690/comments/15

------------------------------------------------------------------------
On 2022-02-02T07:14:55+00:00 Dmueller-4 wrote:

(In reply to B from comment #15)
> > https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1003907
> I've switched to wicked service instead of networkmanager and the problem is
> gone even with the 2.10 (standard version) wpa_supplicant

Good news!

> Issue in Networkmanager instead?

unlikely, the logs show wpa_supplicant failing to connect though. I
think this is confirmed by the finding in the debian BTS. when they
reverted the patch that implements the SAE dbus interface that
networkmanager is using, the connection worked.

I'm not 100% confident that wicked can use WPA3, so wicked working might
mean you're actually connecting via WPA2.

if you have control over your wpa_supplicant.conf, please try whether
adding pmf=2 or pmf=1 at the beginning of the file changes the
situation.

My current guess is that pmf=2 would make you able to connect again.

Reply at:
https://bugs.launchpad.net/ubuntu/+source/wpasupplicant/+bug/1967690/comments/16

------------------------------------------------------------------------
On 2022-02-02T07:17:20+00:00 Dmueller-4 wrote:

(In reply to Dirk Mueller from comment #16)
> My current guess is that pmf=2 would make you able to connect again.

it appears that in the protocol handshake, the AP (fritzbox) is
declaring to not require protected management frames. which is sort of
true, it doesn't require it in WPA2 mode. However by specification WPA3
is always with PMF enabled, and it appears wpa_supplicant would have to
ignore the AP advice and connect in SAE mode with PMF enabled.

pmf=2 forces PMF even if the AP says it doesn't require it.

Reply at:
https://bugs.launchpad.net/ubuntu/+source/wpasupplicant/+bug/1967690/comments/17

------------------------------------------------------------------------
On 2022-02-02T08:17:18+00:00 Meissner-i wrote:

FWIW I also have a wireless card in my workstation, managed by wicked.
this one works on the same FritzBox AP , same wpa_supplicant from
Factory.

- Laptop Lenovo X200s with Intel Pro Wireless 5100 AGN SHiloh and 
NetworkManager: does not work
- Workstation with  RTL8188EE Wireless Network Adapter (rev 01) with wicked: 
works

Reply at:
https://bugs.launchpad.net/ubuntu/+source/wpasupplicant/+bug/1967690/comments/18

------------------------------------------------------------------------
On 2022-02-02T10:33:06+00:00 Dmueller-4 wrote:

can you try injecting pmf=2 into your wpa_supplicant.conf? does it work
if you disable wpa3 in fritzbox? then we're talking about the same
issue.

Reply at:
https://bugs.launchpad.net/ubuntu/+source/wpasupplicant/+bug/1967690/comments/19

------------------------------------------------------------------------
On 2022-02-02T11:31:06+00:00 Meissner-i wrote:

i switched my Friotzbox wlan to WPA2(CCMP) (so no WPA3) ... and the
laptop now connects over wifi with dirks last wpa_supplicant.

So there is some WPA3 fishyness.

The Fritz!box 7430 has a a PMF setting
"Unterstützung für geschützte Anmeldungen von WLAN-Geräten (PMF) aktivieren"
which is default enable for WPA3, but can be selectively enabkled for WPA2 only.

Reply at:
https://bugs.launchpad.net/ubuntu/+source/wpasupplicant/+bug/1967690/comments/20

------------------------------------------------------------------------
On 2022-02-02T11:43:36+00:00 Reiokorn wrote:

(In reply to Dirk Mueller from comment #16)
> (In reply to B from comment #15)
> > > https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1003907
> > I've switched to wicked service instead of networkmanager and the problem is
> > gone even with the 2.10 (standard version) wpa_supplicant
> 
> Good news!
> 
> > Issue in Networkmanager instead?
> 
> unlikely, the logs show wpa_supplicant failing to connect though. I think
> this is confirmed by the finding in the debian BTS. when they reverted the
> patch that implements the SAE dbus interface that networkmanager is using,
> the connection worked. 
> 
> I'm not 100% confident that wicked can use WPA3, so wicked working might
> mean you're actually connecting via WPA2.
> 
> if you have control over your wpa_supplicant.conf, please try whether adding
> pmf=2 or pmf=1 at the beginning of the file changes the situation. 
> 
> My current guess is that pmf=2 would make you able to connect again.

Tried both with your modified version - no change. No connection
possible.

Reply at:
https://bugs.launchpad.net/ubuntu/+source/wpasupplicant/+bug/1967690/comments/21

------------------------------------------------------------------------
On 2022-02-02T11:48:17+00:00 Reiokorn wrote:

Just to make sure, I modified and added that parameter in
/etc/wpa_supplicant.conf

That's the right one, yes?

I noticed that there is also a conf file with the same name in another
place in the system in /etc/dbus-1/system.d

Reply at:
https://bugs.launchpad.net/ubuntu/+source/wpasupplicant/+bug/1967690/comments/22

------------------------------------------------------------------------
On 2022-02-02T13:32:27+00:00 Reiokorn wrote:

(In reply to Marcus Meissner from comment #20)
> i switched my Friotzbox wlan to WPA2(CCMP) (so no WPA3) ... and the laptop
> now connects over wifi with dirks last wpa_supplicant.
> 
> So there is some WPA3 fishyness.
> 
> The Fritz!box 7430 has a a PMF setting
> "Unterstützung für geschützte Anmeldungen von WLAN-Geräten (PMF) aktivieren"
> which is default enable for WPA3, but can be selectively enabkled for WPA2
> only.

I did the same and switched to WPA2(CCMP) and connection is possible and
working again. That's with Dirk's modified version AND the current
tumbleweed version - makes no difference.

Reply at:
https://bugs.launchpad.net/ubuntu/+source/wpasupplicant/+bug/1967690/comments/23

------------------------------------------------------------------------
On 2022-02-02T14:00:34+00:00 Reiokorn wrote:

Created attachment 855797
networkmanager logs

I tried to get the logs like they did in the bugs.debian post with:

> 3) Enable NetworkManager logging
> $ sudo nmcli general logging level DEBUG domains ALL
>
> 4) Get logs
> $ journalctl -u NetworkManager -b

I hope this can help to pinpoint the issue

Reply at:
https://bugs.launchpad.net/ubuntu/+source/wpasupplicant/+bug/1967690/comments/24

------------------------------------------------------------------------
On 2022-02-02T19:19:15+00:00 Dmueller-4 wrote:

(In reply to B from comment #23)
> I did the same and switched to WPA2(CCMP) and connection is possible and
> working again. That's with Dirk's modified version AND the current
> tumbleweed version - makes no difference.

just to be clear, I have no patches in wpa_supplication in "dirks
version", the only change there is feature enablement of further flags
that I was originally hoping would fix this issue.

meanwhile we know also the debian version has the issue, which has even
more feature flags enabled. so it should not be related to config
changes.

> The Fritz!box 7430 has a a PMF setting
> "Unterstützung für geschützte Anmeldungen von WLAN-Geräten (PMF) aktivieren"
> which is default enable for WPA3, but can be selectively enabkled for WPA2
> only.

what setting did you have and what do you have now regarding PMF? can
you turn off PMF for WPA3  and does it allow connecting with WPA3 then
again?

Reply at:
https://bugs.launchpad.net/ubuntu/+source/wpasupplicant/+bug/1967690/comments/25

------------------------------------------------------------------------
On 2022-02-05T20:42:11+00:00 Hp-jansen wrote:

FYI, I've built a version of Dirk's wpa_supplicant package with the
"offending" commit reverted here:

https://build.opensuse.org/package/show/home:frispete:Tumbleweed/wpa_supplicant

With this package, you can keep the FB setting as "WPA2 + WPA3".

Reply at:
https://bugs.launchpad.net/ubuntu/+source/wpasupplicant/+bug/1967690/comments/26

------------------------------------------------------------------------
On 2022-02-06T10:44:06+00:00 Hp-jansen wrote:

Just some thoughts to further investigation.

Assuming the majority of german users use FB in "WPA2 + WPA3" mode at
home, and control their wifi with NetworkManager, I wonder why this
issue doesn't occur more often.

Except for the NM part, this also applies to you, Dirk, does it?

I experimented with a couple of settings today.

FB (7490 with current FW 7.29 and WPA3 transitional mode):

/etc/wpa_supplicant/wpa_supplicant.conf:

ctrl_interface=/var/run/wpa_supplicant
ctrl_interface_group=wheel
# enforce PMF
pmf=1|2
sae_pwe=0|2
#sae_groups=1 2 5 19 20 21 22 23 24
ieee80211w=1|2
key_mgmt=WPA-EAP WPA-EAP-SHA256|SAE

Variations are denoted by the pipe.

The initiated discover that this covers variations from optional WPA3 to
mandatory MPA3-Personal. None of these setting variations result in a
working configuration here.

I begin to believe, that older wifi hardware suffers from some unknown
deficits, that contribute to this issue. Mine is a "Intel Centrino
Advanced-N 6205 [Taylor Peak]" from my ten years old Lenovo X1 Carbon
(Gen 1). Other, than that, I'm up-to-date: kernel 5.16.6 (a bit ahead of
TW), kernel-firmware-iwlwifi-20220119, etc..

Reply at:
https://bugs.launchpad.net/ubuntu/+source/wpasupplicant/+bug/1967690/comments/27

------------------------------------------------------------------------
On 2022-02-06T12:31:17+00:00 Hp-jansen wrote:

Created attachment 855916
result of iw phy0 info

Reply at:
https://bugs.launchpad.net/ubuntu/+source/wpasupplicant/+bug/1967690/comments/28

------------------------------------------------------------------------
On 2022-02-06T12:32:07+00:00 Hp-jansen wrote:

Could somebody with a working config share the result of

$ iw phy0 info

please.

Reply at:
https://bugs.launchpad.net/ubuntu/+source/wpasupplicant/+bug/1967690/comments/29

------------------------------------------------------------------------
On 2022-02-06T15:44:10+00:00 Reiokorn wrote:

Created attachment 855920
iw phy0 info RTL8191SEvB

(In reply to Hans-Peter Jansen from comment #29)
> Could somebody with a working config share the result of 
> 
> $ iw phy0 info
> 
> please.

Sure, here you go.

That old RTL8191SEvB is working just fine.

The problem with my WLAN connection concerns my laptop with an "Intel
Centrino Advanced-N 6235".

Reply at:
https://bugs.launchpad.net/ubuntu/+source/wpasupplicant/+bug/1967690/comments/30

------------------------------------------------------------------------
On 2022-02-06T15:55:08+00:00 Reiokorn wrote:

(In reply to Hans-Peter Jansen from comment #27)
> Just some thoughts to further investigation.
> 
> Assuming the majority of german users use FB in "WPA2 + WPA3" mode at home,
> and control their wifi with NetworkManager, I wonder why this issue doesn't
> occur more often. 
> 
> Except for the NM part, this also applies to you, Dirk, does it?
> 
> I experimented with a couple of settings today.
> 
> FB (7490 with current FW 7.29 and WPA3 transitional mode):
> 
> /etc/wpa_supplicant/wpa_supplicant.conf:
> 
> ctrl_interface=/var/run/wpa_supplicant
> ctrl_interface_group=wheel
> # enforce PMF
> pmf=1|2
> sae_pwe=0|2
> #sae_groups=1 2 5 19 20 21 22 23 24
> ieee80211w=1|2
> key_mgmt=WPA-EAP WPA-EAP-SHA256|SAE
> 
> Variations are denoted by the pipe.
> 
> The initiated discover that this covers variations from optional WPA3 to
> mandatory MPA3-Personal. None of these setting variations result in a
> working configuration here.
> 
> I begin to believe, that older wifi hardware suffers from some unknown
> deficits, that contribute to this issue. Mine is a "Intel Centrino
> Advanced-N 6205 [Taylor Peak]" from my ten years old Lenovo X1 Carbon (Gen
> 1). Other, than that, I'm up-to-date: kernel 5.16.6 (a bit ahead of TW),
> kernel-firmware-iwlwifi-20220119, etc..

The common denominator so far is probably that they are Intel WLAN chips.(In 
reply to Hans-Peter Jansen from comment #27)
> Just some thoughts to further investigation.
> 
> Assuming the majority of german users use FB in "WPA2 + WPA3" mode at home,
> and control their wifi with NetworkManager, I wonder why this issue doesn't
> occur more often. 
> 
> Except for the NM part, this also applies to you, Dirk, does it?
> 
> I experimented with a couple of settings today.
> 
> FB (7490 with current FW 7.29 and WPA3 transitional mode):
> 
> /etc/wpa_supplicant/wpa_supplicant.conf:
> 
> ctrl_interface=/var/run/wpa_supplicant
> ctrl_interface_group=wheel
> # enforce PMF
> pmf=1|2
> sae_pwe=0|2
> #sae_groups=1 2 5 19 20 21 22 23 24
> ieee80211w=1|2
> key_mgmt=WPA-EAP WPA-EAP-SHA256|SAE
> 
> Variations are denoted by the pipe.
> 
> The initiated discover that this covers variations from optional WPA3 to
> mandatory MPA3-Personal. None of these setting variations result in a
> working configuration here.
> 
> I begin to believe, that older wifi hardware suffers from some unknown
> deficits, that contribute to this issue. Mine is a "Intel Centrino
> Advanced-N 6205 [Taylor Peak]" from my ten years old Lenovo X1 Carbon (Gen
> 1). Other, than that, I'm up-to-date: kernel 5.16.6 (a bit ahead of TW),
> kernel-firmware-iwlwifi-20220119, etc..

I would argue that the common denominator, from you, the bug report on
debian and also with me is the Intel WLAN chip.

Reply at:
https://bugs.launchpad.net/ubuntu/+source/wpasupplicant/+bug/1967690/comments/31

------------------------------------------------------------------------
On 2022-02-06T16:50:05+00:00 Hp-jansen wrote:

Meanwhile, I'm pretty confident, this is the culprit:

$ iw phy0 info | grep -A9 'Supported Ciphers'        
        Supported Ciphers:
                * WEP40 (00-0f-ac:1)
                * WEP104 (00-0f-ac:5)
                * TKIP (00-0f-ac:2)
                * CCMP-128 (00-0f-ac:4)
                * CCMP-256 (00-0f-ac:10)
                * GCMP-128 (00-0f-ac:8)
                * GCMP-256 (00-0f-ac:9)

while for your working config, it's

        Supported Ciphers:
                * WEP40 (00-0f-ac:1)
                * WEP104 (00-0f-ac:5)
                * TKIP (00-0f-ac:2)
                * CCMP-128 (00-0f-ac:4)
                * CCMP-256 (00-0f-ac:10)
                * GCMP-128 (00-0f-ac:8)
                * GCMP-256 (00-0f-ac:9)
                * CMAC (00-0f-ac:6)
                * CMAC-256 (00-0f-ac:13)
                * GMAC-128 (00-0f-ac:11)
                * GMAC-256 (00-0f-ac:12)

For PMF, these are required:

* CMAC (00-0f-ac:6)
* GMAC-128 (00-0f-ac:11)
* GMAC-256 (00-0f-ac:12)

Your RTL provides them, our old Intel miss them.

In theory, these ciphers are supplied easily in software, but this
requires some community intelligence to be realized.

@Dirk: no amount of forcing the connection from NM (Security: WPA/WPA2
Personal), then tweaking the connection with nmcli does result in a
successful connect.

If forcing the connection security to "WPA3 Personal", the connection settings 
are:
802-11-wireless-security.key-mgmt:      sae
802-11-wireless-security.pmf:           3 (required)

With WPA/WPA2 Personal:
802-11-wireless-security.key-mgmt:      wpa-psk
802-11-wireless-security.pmf:           0 (default)

Also tried:
802-11-wireless-security.key-mgmt:      wpa-psk
802-11-wireless-security.pmf:           1 (disable)

@B, you can check this yourself with:

$ nmcli connection show

Look up your specific connection.

$ nmcli connection show <uuid>

Specifically:

$ nmcli connection show <uuid> | grep -E 'key-mgmt|pmf'

In my humble opinion, wpa_supplicant should test for sufficient ciphers,
and not even try to connect with WPA3 otherwise. Will report this to the
wpa_supplicant mailing list, but need to subscribe first...

Reply at:
https://bugs.launchpad.net/ubuntu/+source/wpasupplicant/+bug/1967690/comments/32

------------------------------------------------------------------------
On 2022-02-06T16:56:32+00:00 Reiokorn wrote:

(In reply to Hans-Peter Jansen from comment #32)
> Meanwhile, I'm pretty confident, this is the culprit:
> 
> $ iw phy0 info | grep -A9 'Supported Ciphers'        
>         Supported Ciphers:
>                 * WEP40 (00-0f-ac:1)
>                 * WEP104 (00-0f-ac:5)
>                 * TKIP (00-0f-ac:2)
>                 * CCMP-128 (00-0f-ac:4)
>                 * CCMP-256 (00-0f-ac:10)
>                 * GCMP-128 (00-0f-ac:8)
>                 * GCMP-256 (00-0f-ac:9)
> 
> while for your working config, it's
> 
>       Supported Ciphers:
>               * WEP40 (00-0f-ac:1)
>               * WEP104 (00-0f-ac:5)
>               * TKIP (00-0f-ac:2)
>               * CCMP-128 (00-0f-ac:4)
>               * CCMP-256 (00-0f-ac:10)
>               * GCMP-128 (00-0f-ac:8)
>               * GCMP-256 (00-0f-ac:9)
>               * CMAC (00-0f-ac:6)
>               * CMAC-256 (00-0f-ac:13)
>               * GMAC-128 (00-0f-ac:11)
>               * GMAC-256 (00-0f-ac:12)
> 
> For PMF, these are required:
> 
> * CMAC (00-0f-ac:6)
> * GMAC-128 (00-0f-ac:11)
> * GMAC-256 (00-0f-ac:12)
> 
> Your RTL provides them, our old Intel miss them.
> 
> In theory, these ciphers are supplied easily in software, but this requires
> some community intelligence to be realized.
> 
> @Dirk: no amount of forcing the connection from NM (Security: WPA/WPA2
> Personal), then tweaking the connection with nmcli does result in a
> successful connect.
> 
> If forcing the connection security to "WPA3 Personal", the connection
> settings are:
> 802-11-wireless-security.key-mgmt:      sae
> 802-11-wireless-security.pmf:           3 (required)
> 
> With WPA/WPA2 Personal:
> 802-11-wireless-security.key-mgmt:      wpa-psk
> 802-11-wireless-security.pmf:           0 (default)
> 
> Also tried:
> 802-11-wireless-security.key-mgmt:      wpa-psk
> 802-11-wireless-security.pmf:           1 (disable)
> 
> @B, you can check this yourself with:
> 
> $ nmcli connection show
> 
> Look up your specific connection.
> 
> $ nmcli connection show <uuid>
> 
> Specifically:
> 
> $ nmcli connection show <uuid> | grep -E 'key-mgmt|pmf'
> 
> In my humble opinion, wpa_supplicant should test for sufficient ciphers, and
> not even try to connect with WPA3 otherwise. Will report this to the
> wpa_supplicant mailing list, but need to subscribe first...

why was it possible to connect with the wpa_supplicant version before
the update to 2.10 then without issues? The supported ciphers didn't
change, did they?

Reply at:
https://bugs.launchpad.net/ubuntu/+source/wpasupplicant/+bug/1967690/comments/33

------------------------------------------------------------------------
On 2022-02-06T18:23:47+00:00 Reiokorn wrote:

(In reply to Hans-Peter Jansen from comment #32)
> (...)
> $ nmcli connection show <uuid> | grep -E 'key-mgmt|pmf'
> 
> In my humble opinion, wpa_supplicant should test for sufficient ciphers, and
> not even try to connect with WPA3 otherwise. (...)

My output on the laptop with RTL and working connection:

> 082-11-wireless-security.key.mgmt: wpa-psk
> 082-11-wireless-security.key.pmf: 0 (default)

Reply at:
https://bugs.launchpad.net/ubuntu/+source/wpasupplicant/+bug/1967690/comments/34

------------------------------------------------------------------------
On 2022-02-06T18:30:38+00:00 Fkrueger-6 wrote:

Others are hit as well:
https://bugzilla.redhat.com/show_bug.cgi?id=2050840

Reply at:
https://bugs.launchpad.net/ubuntu/+source/wpasupplicant/+bug/1967690/comments/35

------------------------------------------------------------------------
On 2022-02-06T18:45:18+00:00 Hp-jansen wrote:

(In reply to B from comment #34)
> (In reply to Hans-Peter Jansen from comment #32)
> > (...)
> > $ nmcli connection show <uuid> | grep -E 'key-mgmt|pmf'
> > 
> > In my humble opinion, wpa_supplicant should test for sufficient ciphers, and
> > not even try to connect with WPA3 otherwise. (...)
> 
> My output on the laptop with RTL and working connection:
> 
> > 082-11-wireless-security.key.mgmt: wpa-psk
> > 082-11-wireless-security.key.pmf: 0 (default)

Try to switch to WPA3 in the NetworkManager ui and the FB. Depending on
the package in use (try the original TW pkg first), you might even have
success with WPA3. ;-)

(In reply to Frank Krüger from comment #35)
> Others are hit as well: https://bugzilla.redhat.com/show_bug.cgi?id=2050840

Thanks Frank, I posted the issue to the wpa_supplicant ML meanwhile, and
reported it to AVM. Let's see, how this goes..

Reply at:
https://bugs.launchpad.net/ubuntu/+source/wpasupplicant/+bug/1967690/comments/36

------------------------------------------------------------------------
On 2022-02-08T18:06:39+00:00 Hp-jansen wrote:

Hi B,

mind providing more detailed logs while experiencing the failure?

$ systemctl edit --full wpa_supplicant.service

Add -dddddddddd to the ExecStart arguments, e.g.:

ExecStart=/usr/sbin/wpa_supplicant -dddddddddd -c /etc/wpa_supplicant\
/wpa_supplicant.conf -u -t -f /var/log/wpa_supplicant.log

Add debug logging to NetworkManager (assuming, you don't have a
[logging] section in there already):

$ cat < EOF >> /etc/NetworkManager/NetworkManager.conf

[logging]
level=DEBUG

EOF

$ cat /dev/null > /var/log/wpa_supplicant.log

Reboot into the failing state

$ reboot

Provide /var/log/wpa_supplicant.log and the output of

$ journalctl -u NetworkManager -b

Thank you!

Reply at:
https://bugs.launchpad.net/ubuntu/+source/wpasupplicant/+bug/1967690/comments/37

------------------------------------------------------------------------
On 2022-02-08T19:27:01+00:00 Reiokorn wrote:

Created attachment 855988
wpa_supplicant.log

(In reply to Hans-Peter Jansen from comment #37)

> (...)
> Provide /var/log/wpa_supplicant.log and the output of 
> 
> $ journalctl -u NetworkManager -b
> 
> Thank you!

Here's the log

Reply at:
https://bugs.launchpad.net/ubuntu/+source/wpasupplicant/+bug/1967690/comments/38

------------------------------------------------------------------------
On 2022-02-08T19:28:16+00:00 Reiokorn wrote:

Created attachment 855989
journalctl -u NetworkManager -b

here's the journal

Reply at:
https://bugs.launchpad.net/ubuntu/+source/wpasupplicant/+bug/1967690/comments/39

------------------------------------------------------------------------
On 2022-02-12T10:01:53+00:00 Meissner-i wrote:

fwiw the current tumbleweed version also does NOT work with Fritz!box in
wpa2 only mode.

Dirks branch works with the Fritz!Box in wpa2 only mode.

Reply at:
https://bugs.launchpad.net/ubuntu/+source/wpasupplicant/+bug/1967690/comments/40

------------------------------------------------------------------------
On 2022-02-12T20:01:39+00:00 Reiokorn wrote:

latest update of wpa_supplicant on tumbleweed (to v. 2.10-2.1) fixed the
connectivity issues for me.

Reply at:
https://bugs.launchpad.net/ubuntu/+source/wpasupplicant/+bug/1967690/comments/41

------------------------------------------------------------------------
On 2022-02-14T09:46:32+00:00 Dmueller-4 wrote:

(In reply to Marcus Meissner from comment #40)
> Dirks branch works with the Fritz!Box in wpa2 only mode.

there is no difference between my branch and tumbleweed. please provide
logs from wpa_supplicant.

Reply at:
https://bugs.launchpad.net/ubuntu/+source/wpasupplicant/+bug/1967690/comments/42

------------------------------------------------------------------------
On 2022-02-16T14:27:39+00:00 Reiokorn wrote:

https://build.opensuse.org/request/show/952644

Reply at:
https://bugs.launchpad.net/ubuntu/+source/wpasupplicant/+bug/1967690/comments/43

------------------------------------------------------------------------
On 2022-02-24T12:15:12+00:00 Hpj-u wrote:

Just a heads up:

AVM is still investigating on this.

Some tests with newer hardware confirmed, that WPA3 is working well
there.

Reply at:
https://bugs.launchpad.net/ubuntu/+source/wpasupplicant/+bug/1967690/comments/44


** Changed in: opensuse
       Status: Unknown => Fix Released

** Changed in: opensuse
   Importance: Unknown => High

** Bug watch added: Red Hat Bugzilla #2050840
   https://bugzilla.redhat.com/show_bug.cgi?id=2050840

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1967690

Title:
  Denied association with wpasupplicant 2:2.10-2

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/wpasupplicant/+bug/1967690/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to