I have a Moto X (2014). I need to use it in various locations with Cisco APs. The problem I'm having is that after entering a network pass code, the network transitions directly to saved and never actually connects.
Logs on the phone show:
"WPA: CCMP is used, but EAPOL-Key descriptor version (3) is not 2"
The access points aren't mine to control or I'd patch them.
My desire is to disable pmf in /data/misc/wifi/wpa_supplicant.conf, but every time I toggle wifi the file seems to get regenerated with pmf=1 instead of the desired pmf=0.
Any thoughts? Or ideas when we might see a fix ala:
I'd post a link to the git pr, but evidently i'm not allowed.
Logs on the phone show:
"WPA: CCMP is used, but EAPOL-Key descriptor version (3) is not 2"
The access points aren't mine to control or I'd patch them.
My desire is to disable pmf in /data/misc/wifi/wpa_supplicant.conf, but every time I toggle wifi the file seems to get regenerated with pmf=1 instead of the desired pmf=0.
Any thoughts? Or ideas when we might see a fix ala:
Code:
diff --git a/src/rsn_supp/wpa.c b/src/rsn_supp/wpa.c
index d95c1bd..f8825d2 100644
--- a/src/rsn_supp/wpa.c
+++ b/src/rsn_supp/wpa.c
@@ -1756,6 +1756,9 @@ int wpa_sm_rx_eapol(struct wpa_sm *sm, const u8 *src_addr,
wpa_msg(sm->ctx->msg_ctx, MSG_INFO,
"WPA: Backwards compatibility: allow invalid "
"version for non-CCMP group keys");
+ } else if (ver == WPA_KEY_INFO_TYPE_AES_128_CMAC) {
+ wpa_msg(sm->ctx->msg_ctx, MSG_INFO,
+ "WPA: Interoperability workaround: allow incorrect (should have been HMAC-SHA1), but stronger (is AES-128-CMAC), descriptor version to be used");
} else
goto out;
} else if (sm->pairwise_cipher == WPA_CIPHER_GCMP &&
0 commentaires:
Enregistrer un commentaire