[PATCH] Only allow OWE and SAE H2E on 6 Ghz

[Jouni Malinen]

On Fri, Sep 23, 2022 at 09:32:10AM +0200, Nicolas Cavallari wrote:
> On 23/09/2022 09:15, Zhao Chen wrote:
> > If the Bss is on 6 Gzh band, only allow OWE and SAE H2E to pass bss
> > check
> > 
> > Signed-off-by: Zhao Chen <zhao.chen at mediatek.com>
> > ---
> >   wpa_supplicant/events.c | 16 ++++++++++++++++
> >   1 file changed, 16 insertions(+)
> > 
> 
> IIRC wpasupplicant does not support OWE and H2E in ibss and mesh mode, so
> this patch will break these modes in 6 GHz.

For the time being, this type of constraint should be limited to apply
only to infrastructure BSS cases. Furthermore, this is not really
correct even for those. EAP, DPP, etc. needs to be allowed as well. In
practice, it would be better to disallow known cases (e.g., unencrypted
connection in open mode and SAE using hunting-and-pecking loop) instead
of trying to come up with a complete list of what is allowed.

-- 
Jouni Malinen                                            PGP id EFC895FA