FT authentication fails on FT-SAE

[Michael Yartys]

Hi

I'm running an FT-SAE network on two routers with OpenWrt, and I've encountered an issue where clients that attempt to authenticate with FT fail due to an invalid PMKID (at least that's what the AP replies in the authentication response). The routers are running a master build of OpenWrt from 9. August, and the hostapd version is a master build up to and including: https://w1.fi/cgit/hostap/commit/?id=b102f19bcc53c7f7db3951424d4d46709b4f1986

I've tried the following clients:

-- Laptop 1 --
* Intel 7260AC
* Fedora 34
* Kernel: 5.13.8-200
* wpa_supplicant v2.9

-- Laptop 2 --
* Intel 7260AC
* Ubuntu 20.04.2 LTS
* Kernel: 5.11.0-25
* wpa_supplicant v2.10-devel-hostap_2_9-2285-gc3155a725 (recent snapshot)

-- iPad --
* iPadOS 15 Beta 4


I can provide logs from wpa_supplicant, hostapd, and packet captures to developers personally.

Michael