From d5df71619a654155976f39193dd67d4b2eb102b7 Mon Sep 17 00:00:00 2001 From: Sundareswar P Date: Fri, 20 Jun 2025 18:04:55 +0530 Subject: [PATCH] qca-wifi7: hostapd: Fix for roaming failure during PSK2-RADIUS configuration After roaming to EAP105, the roaming frames were exchanged successfully, but the STA sent a deauthentication frame to the AP with an "INVALID IE" error. The RSNXE subfield in the FTIE was set in the Reassociation Response frame. The STA validated the Reassociation frame and was unable to process the RSNXE subfield. Modified SAE options (sae_pwe=4 and sae_require_pmf=0). Fixes: WIFI-14544 Signed-off-by: Marek Kwaczynski --- feeds/qca-wifi-7/hostapd/files/hostapd.sh | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/feeds/qca-wifi-7/hostapd/files/hostapd.sh b/feeds/qca-wifi-7/hostapd/files/hostapd.sh index b21de6756..17da5c57f 100644 --- a/feeds/qca-wifi-7/hostapd/files/hostapd.sh +++ b/feeds/qca-wifi-7/hostapd/files/hostapd.sh @@ -777,11 +777,16 @@ hostapd_set_bss_options() { set_default sae_require_mfp 1 [ "$ppsk" -eq 0 ] && set_default sae_pwe 2 ;; - psk-sae|psk2-radius|eap-eap2) + psk-sae|eap-eap2) set_default ieee80211w 1 set_default sae_require_mfp 1 [ "$ppsk" -eq 0 ] && set_default sae_pwe 2 ;; + psk2-radius) + set_default ieee80211w 1 + set_default sae_require_mfp 0 + [ "$ppsk" -eq 0 ] && set_default sae_pwe 4 + ;; esac [ -n "$sae_require_mfp" ] && append bss_conf "sae_require_mfp=$sae_require_mfp" "$N" [ -n "$sae_pwe" ] && append bss_conf "sae_pwe=$sae_pwe" "$N"