hostapd: fix FILS key mgmt type for WPA3 Enterprise 192 bit
authorFelix Fietkau <nbd@nbd.name>
Thu, 31 Aug 2023 09:16:04 +0000 (11:16 +0200)
committerFelix Fietkau <nbd@nbd.name>
Thu, 31 Aug 2023 11:05:13 +0000 (13:05 +0200)
Use the SHA384 variant to account for longer keys with more security

Signed-off-by: Felix Fietkau <nbd@nbd.name>
package/network/services/hostapd/files/hostapd.sh

index 88dfe25091f9b6553326003a039f6c7caa163fb6..3033ef79ca97b2da3dfa38ec783cc8593eac6aa1 100644 (file)
@@ -77,6 +77,10 @@ hostapd_append_wpa_key_mgmt() {
 
        [ "$fils" -gt 0 ] && {
                case "$auth_type" in
+                       eap-192)
+                               append wpa_key_mgmt FILS-SHA384
+                               [ "${ieee80211r:-0}" -gt 0 ] && append wpa_key_mgmt FT-FILS-SHA384
+                       ;;
                        eap*)
                                append wpa_key_mgmt FILS-SHA256
                                [ "${ieee80211r:-0}" -gt 0 ] && append wpa_key_mgmt FT-FILS-SHA256