From e116b423b8437b903a4b7d4bd559f2a314c2be5a Mon Sep 17 00:00:00 2001 From: Felix Fietkau Date: Fri, 29 Aug 2025 15:03:28 +0200 Subject: [PATCH] wifi-scripts: default to sae_pwe=2 in client mode Improves compatibility Signed-off-by: Felix Fietkau --- .../files-ucode/usr/share/ucode/wifi/supplicant.uc | 3 ++- .../network/config/wifi-scripts/files/lib/netifd/hostapd.sh | 2 ++ 2 files changed, 4 insertions(+), 1 deletion(-) diff --git a/package/network/config/wifi-scripts/files-ucode/usr/share/ucode/wifi/supplicant.uc b/package/network/config/wifi-scripts/files-ucode/usr/share/ucode/wifi/supplicant.uc index 8e5697b4f3..50677cdc99 100644 --- a/package/network/config/wifi-scripts/files-ucode/usr/share/ucode/wifi/supplicant.uc +++ b/package/network/config/wifi-scripts/files-ucode/usr/share/ucode/wifi/supplicant.uc @@ -66,6 +66,7 @@ function setup_sta(data, config) { config.rsn_overriding = 0; set_default(config, 'ieee80211r', 0); + set_default(config, 'sae_pwe', 2); set_default(config, 'multi_ap', 0); set_default(config, 'default_disabled', 0); @@ -167,7 +168,7 @@ function setup_sta(data, config) { network_append_string_vars(config, [ 'ssid' ]); network_append_vars(config, [ 'rsn_overriding', 'scan_ssid', 'noscan', 'disabled', 'multi_ap_backhaul_sta', - 'ocv', 'key_mgmt', 'psk', 'sae_password', 'pairwise', 'group', 'bssid', + 'ocv', 'key_mgmt', 'sae_pwe', 'psk', 'sae_password', 'pairwise', 'group', 'bssid', 'proto', 'mesh_fwding', 'mesh_rssi_threshold', 'frequency', 'fixed_freq', 'disable_ht', 'disable_ht40', 'disable_vht', 'vht', 'max_oper_chwidth', 'ht40', 'beacon_int', 'ieee80211w', 'basic_rate', 'mcast_rate', diff --git a/package/network/config/wifi-scripts/files/lib/netifd/hostapd.sh b/package/network/config/wifi-scripts/files/lib/netifd/hostapd.sh index dabb534cf4..32987edfe5 100644 --- a/package/network/config/wifi-scripts/files/lib/netifd/hostapd.sh +++ b/package/network/config/wifi-scripts/files/lib/netifd/hostapd.sh @@ -1337,6 +1337,7 @@ wpa_supplicant_add_network() { set_default ieee80211r 0 set_default multi_ap 0 + set_default sae_pwe 2 set_default default_disabled 0 local key_mgmt='NONE' @@ -1623,6 +1624,7 @@ network={ $scan_ssid ssid="$ssid" key_mgmt=$key_mgmt + sae_pwe=$sae_pwe $network_data } EOF