Received-SPF: pass (google.com: domain of linux-wireless+bounces-8792-linux.lists.archive=gmail.com@vger.kernel.org designates 139.178.88.99 as permitted sender) client-ip=139.178.88.99;
Message-ID: <bf445f8aa320858124368a210b5cb86a9613b44b.camel@sipsolutions.net>
Subject: Re: wifi: mac80211: unencrypted message in 4-way handshake
From: Johannes Berg <johannes@sipsolutions.net>
To: "Sperling, Tobias" <Tobias.Sperling@Softing.com>, 
 "linux-wireless@vger.kernel.org"
	 <linux-wireless@vger.kernel.org>
Cc: "Le Suire, Michael" <Michael.Suire@Softing.com>, "pkshih@realtek.com"
	 <pkshih@realtek.com>
Date: Tue, 11 Jun 2024 14:58:44 +0200
In-Reply-To: <BE1P281MB242075CF50BF71257D14F955EFC72@BE1P281MB2420.DEUP281.PROD.OUTLOOK.COM>
References: 
	<BE1P281MB24208AB02DAEACAE9AF4B5C5EFC62@BE1P281MB2420.DEUP281.PROD.OUTLOOK.COM>
	 <BE1P281MB2420DA2C6AFF94E525306302EFC62@BE1P281MB2420.DEUP281.PROD.OUTLOOK.COM>
	 <6bdbcae5cfedccc507426bde60fe86e72212ca5a.camel@sipsolutions.net>
	 <BE1P281MB242075CF50BF71257D14F955EFC72@BE1P281MB2420.DEUP281.PROD.OUTLOOK.COM>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
User-Agent: Evolution 3.52.2 (3.52.2-1.fc40) 
Precedence: bulk
MIME-Version: 1.0

On Tue, 2024-06-11 at 12:36 +0000, Sperling, Tobias wrote:
> > > recently we moved from a 4.9 kernel to 5.4 kernel
> >=20
> > =F0=9F=A4=AF=EF=B8=8F
>=20
> :D
> >=20
> > > Do you have some hints where to look at to solve the issue?
> >=20
> > No, way too old.
>=20
> That's why we also tried it with kernel 6.6, where we faced the same issu=
e. So I'd
> appreciate hints for kernel 6.6 (or probably later), too. :)

Yeah but even moving 4.9->6.6 is a huge range, even bigger :)

> > Take a look at supplicant logs in how it behaves differently, I guess.
> >=20
> > The only thing that comes to mind is that *maybe* the eapol-over-nl8021=
1
> > path gets used (different kernels) and that has different behaviour in
> > wpa_s, but honestly, no idea.
>=20
> Thanks, will have a look there.

I would certainly hope that wpa_s uses that path on the new kernel. It
wasn't in 4.9, pretty sure.

johannes
>=20