[PATCH v2] wpa_supplicant: Fix PMKSA caching with 802.1X 4-way handshake offload

[Jouni Malinen]

On Wed, Aug 12, 2026 at 10:13:22AM +0800, Chung-Hsien Hsu wrote:
> When driver-based 4-way handshake offload is used with IEEE 802.1X,
> wpa_supplicant_eapol_cb() retrieves the PMK from the EAPOL state machine
> and configures it to the driver. Since the subsequent 4-way handshake is
> handled by the driver, the normal host-side EAPOL-Key processing path
> that creates a PMKSA cache entry is not executed.
> 
> As a result, a subsequent connection cannot use PMKSA caching and may
> require a full EAP authentication again.
> 
> Create a PMKSA cache entry after successful IEEE 802.1X authentication
> for the same non-FT and non-Suite-B RSN cases where the host-driven
> EAPOL-Key processing path does so. Only call wpa_sm_set_pmk() when a
> valid authenticator address is available.

Thanks, applied.
 
-- 
Jouni Malinen                                            PGP id EFC895FA