openwrt/package/network/config/wifi-scripts
Hauke Mehrtens 9aeea77b8d wifi-scripts: ucode: do not leak SAE options onto non-SAE BSSes
sae_require_mfp and sae_pwe are SAE-specific knobs but iface_auth_type()
set them on every auth type that requires PMF (sae, owe, eap2, eap192,
dpp) and on both PMF-optional transition modes (psk-sae, eap-eap2).
hostapd silently ignores the stray settings on non-SAE BSSes, but they
clutter the generated configuration and make it harder to tell at a
glance which knobs actually apply.

Split the grouping: keep ieee80211w (and rsn_override_mfp for transition
modes) where it was, and move sae_require_mfp / sae_pwe into a separate
check that only fires for the two auth types that actually run SAE (sae
and psk-sae).

No functional change on the air.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Link: https://github.com/openwrt/openwrt/pull/23009
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2026-05-02 20:34:21 +02:00
..
files wifi-scripts: add support for passing uuid to hostapd 2026-03-27 20:04:04 +01:00
files-ucode wifi-scripts: ucode: do not leak SAE options onto non-SAE BSSes 2026-05-02 20:34:21 +02:00
Config.in wifi-scripts: enable ucode scripts by default 2025-09-24 13:45:40 +02:00
Makefile wifi-scripts: add ucode based scripts 2024-12-02 13:55:36 +01:00