wpa_supplicant key_mgmt=IEEE8021X issue

[Dan Williams]

On Mon, 2008-10-06 at 18:28 +0300, Andriy Tkachuk wrote:
> Hi all,
> 
> I noticed that when key_mgmt=IEEE8021X wpa_supplicant tries to connect
> to WPA enabled APs, for example:
> 
> 1223306606.324317: 2: 00:14:c2:a4:1b:e2 ssid='WLAN4TEST' wpa_ie_len=24 rsn_ie_len=20 caps=0x10
> 1223306606.324336:    selected non-WPA AP 00:14:c2:a4:1b:e2 ssid='WLAN4TEST'

A WPA-enabled AP can still also provide Dynamic WEP support I think.  It
doesn't matter what the IEs are if the AP supports WEP as both pairwise
and group encryption algorithms.  I'm not 100% sure though.

But in general, just because the AP supports WPA doesn't mean it
_doesn't_ support some forms of WEP, either static or dynamic.

Dan

> 
> It looks like following patch fixes the issue:
> 
> diff --git a/wpa_supplicant/events.c b/wpa_supplicant/events.c
> index 3508db4..995b0f7 100644
> --- a/wpa_supplicant/events.c
> +++ b/wpa_supplicant/events.c
> @@ -604,7 +604,8 @@ wpa_supplicant_select_bss_non_wpa(struct wpa_supplicant *wpa_s,
>                              (WPA_KEY_MGMT_IEEE8021X | WPA_KEY_MGMT_PSK |
>                               WPA_KEY_MGMT_FT_IEEE8021X | WPA_KEY_MGMT_FT_PSK |
>                               WPA_KEY_MGMT_IEEE8021X_SHA256 |
> -                             WPA_KEY_MGMT_PSK_SHA256)) &&
> +                             WPA_KEY_MGMT_PSK_SHA256 |
> +                             WPA_KEY_MGMT_IEEE8021X_NO_WPA)) &&
>                             (wpa_ie_len != 0 || rsn_ie_len != 0)) {
>                                 wpa_printf(MSG_DEBUG, "   skip - "
>                                            "WPA network");
> 
> 
> Regards,
>   Andriy
> _______________________________________________
> HostAP mailing list
> HostAP at lists.shmoo.com
> http://lists.shmoo.com/mailman/listinfo/hostap