[PATCH 0/2] Avoid/Accept RSNXE in association request for WPA 1

Benjamin Berg benjamin at sipsolutions.net
Thu Dec 18 08:19:32 PST 2025


From: Benjamin Berg <benjamin.berg at intel.com>

Hi,

So if we connect using WPA 1 only, we would send the RSNXE in the
association request but not the KDE. hostapd on the other hand, would
verify that the two patch and would error out. Fix the problem on both
sides as there are APs in the wild that have the current hostapd check.

Note that this can easily be tested by adding a wiphy_ext_feature_set
call to mac80211_hwsim and setting
NL80211_EXT_FEATURE_PROT_RANGE_NEGO_AND_MEASURE. If one then runs the
hwsim tests, then tests that explicitly set WPA 1 will fail.

Benjamin

Benjamin Berg (2):
  SME: Do not send RSNXE for WPA 1 connections
  AP: Do not store RSNXE for WPA 1

 src/ap/wpa_auth_ie.c | 2 +-
 wpa_supplicant/sme.c | 5 +++--
 2 files changed, 4 insertions(+), 3 deletions(-)

-- 
2.51.1




More information about the Hostap mailing list