[PATCH] wpa_supplicant: allow incompatible SAE H2E conf if there is a, non-SAE alternative
Pablo MARTIN-GOMEZ
pmartin-gomez at freebox.fr
Fri Dec 19 10:24:35 PST 2025
Currently, if a configuration forces SAE H2E and SAE is among the key
management authorized, wpa_supplicant will skip a network that does not
support SAE H2E, even if that network does not support SAE or has
alternatives AKMs that could work with the configuration.
Skip a network only if a configuration requires a SAE key management.
Signed-off-by: Pablo Martin-Gomez <pmartin-gomez at freebox.fr>
---
wpa_supplicant/events.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/wpa_supplicant/events.c b/wpa_supplicant/events.c
index 3a5a015ae..e8103e062 100644
--- a/wpa_supplicant/events.c
+++ b/wpa_supplicant/events.c
@@ -1437,7 +1437,7 @@ static bool wpa_scan_res_ok(struct wpa_supplicant
*wpa_s, struct wpa_ssid *ssid,
if ((sae_pwe == SAE_PWE_HASH_TO_ELEMENT ||
is_6ghz_freq(bss->freq) || ssid->sae_password_id) &&
sae_pwe != SAE_PWE_FORCE_HUNT_AND_PECK &&
- wpa_key_mgmt_sae(ssid->key_mgmt) &&
+ wpa_key_mgmt_only_sae(ssid->key_mgmt) &&
!(rsnxe_capa & BIT(WLAN_RSNX_CAPAB_SAE_H2E))) {
if (debug_print)
wpa_dbg(wpa_s, MSG_DEBUG,
--
2.43.0
More information about the Hostap
mailing list