[PATCH] DPP: Conditionally add cipher support based on driver capabilities

Jouni Malinen j at w1.fi
Thu Jun 19 02:30:21 PDT 2025


On Tue, Apr 15, 2025 at 04:49:25PM +0800, zihan.yan10 at gmail.com wrote:
> By default, wpa_supplicant sets the pairwise and group ciphers to CCMP (or CCMP+TKIP) when provisioning a network via DPP. As a result, DPP-provisioned clients are unable to connect to networks that require GCMP or GCMP-256 ciphers due to cipher mismatch. This issue does not affect manually-configured network profiles, where supported cipher suites can be explicitly specified.
> 
> This patch addresses the issue by conditionally setting the appropriate cipher suites in the DPP-generated network profile, based on driver capabilities.

Thanks, applied.
 
-- 
Jouni Malinen                                            PGP id EFC895FA



More information about the Hostap mailing list