From: Felix Fietkau <nbd@nbd.name>
Date: Thu, 31 Aug 2023 09:16:04 +0000 (+0200)
Subject: hostapd: fix FILS key mgmt type for WPA3 Enterprise 192 bit
X-Git-Url: http://git.lede-project.org./?a=commitdiff_plain;h=f0d1349b52983400e7526f3ab57dc6a0f2cc771a;p=openwrt%2Fstaging%2Fthess.git

hostapd: fix FILS key mgmt type for WPA3 Enterprise 192 bit

Use the SHA384 variant to account for longer keys with more security

Signed-off-by: Felix Fietkau <nbd@nbd.name>
---

diff --git a/package/network/services/hostapd/files/hostapd.sh b/package/network/services/hostapd/files/hostapd.sh
index 88dfe25091..3033ef79ca 100644
--- a/package/network/services/hostapd/files/hostapd.sh
+++ b/package/network/services/hostapd/files/hostapd.sh
@@ -77,6 +77,10 @@ hostapd_append_wpa_key_mgmt() {
 
 	[ "$fils" -gt 0 ] && {
 		case "$auth_type" in
+			eap-192)
+				append wpa_key_mgmt FILS-SHA384
+				[ "${ieee80211r:-0}" -gt 0 ] && append wpa_key_mgmt FT-FILS-SHA384
+			;;
 			eap*)
 				append wpa_key_mgmt FILS-SHA256
 				[ "${ieee80211r:-0}" -gt 0 ] && append wpa_key_mgmt FT-FILS-SHA256