[PATCH] wpa_supplicant: allow incompatible SAE H2E conf if there is a, non-SAE alternative

Pablo MARTIN-GOMEZ pmartin-gomez at freebox.fr
Fri Dec 19 10:24:35 PST 2025


Currently, if a configuration forces SAE H2E and SAE is among the key
management authorized, wpa_supplicant will skip a network that does not
support SAE H2E, even if that network does not support SAE or has
alternatives AKMs that could work with the configuration.

Skip a network only if a configuration requires a SAE key management.

Signed-off-by: Pablo Martin-Gomez <pmartin-gomez at freebox.fr>
---
  wpa_supplicant/events.c | 2 +-
  1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/wpa_supplicant/events.c b/wpa_supplicant/events.c
index 3a5a015ae..e8103e062 100644
--- a/wpa_supplicant/events.c
+++ b/wpa_supplicant/events.c
@@ -1437,7 +1437,7 @@ static bool wpa_scan_res_ok(struct wpa_supplicant 
*wpa_s, struct wpa_ssid *ssid,
      if ((sae_pwe == SAE_PWE_HASH_TO_ELEMENT ||
           is_6ghz_freq(bss->freq) || ssid->sae_password_id) &&
          sae_pwe != SAE_PWE_FORCE_HUNT_AND_PECK &&
-        wpa_key_mgmt_sae(ssid->key_mgmt) &&
+        wpa_key_mgmt_only_sae(ssid->key_mgmt) &&
          !(rsnxe_capa & BIT(WLAN_RSNX_CAPAB_SAE_H2E))) {
          if (debug_print)
              wpa_dbg(wpa_s, MSG_DEBUG,
-- 
2.43.0




More information about the Hostap mailing list