hostapd: fix FILS key mgmt type for WPA3 Enterprise 192 bit
authorFelix Fietkau <nbd@nbd.name>
Thu, 31 Aug 2023 09:16:04 +0000 (11:16 +0200)
committerFelix Fietkau <nbd@nbd.name>
Mon, 18 Sep 2023 14:52:25 +0000 (16:52 +0200)
Use the SHA384 variant to account for longer keys with more security

Signed-off-by: Felix Fietkau <nbd@nbd.name>
(cherry picked from commit f0d1349b52983400e7526f3ab57dc6a0f2cc771a)

package/network/services/hostapd/files/hostapd.sh

index c6ae6fb98b0b4b7045ad3a72f0779d534153135b..36aa6273b6ab7f29ba5f0c869be44a185626e3c5 100644 (file)
@@ -77,6 +77,10 @@ hostapd_append_wpa_key_mgmt() {
 
        [ "$fils" -gt 0 ] && {
                case "$auth_type" in
+                       eap-192)
+                               append wpa_key_mgmt FILS-SHA384
+                               [ "${ieee80211r:-0}" -gt 0 ] && append wpa_key_mgmt FT-FILS-SHA384
+                       ;;
                        eap*)
                                append wpa_key_mgmt FILS-SHA256
                                [ "${ieee80211r:-0}" -gt 0 ] && append wpa_key_mgmt FT-FILS-SHA256