Hauke Mehrtens 9aeea77b8d wifi-scripts: ucode: do not leak SAE options onto non-SAE BSSes ...

sae_require_mfp and sae_pwe are SAE-specific knobs but iface_auth_type()
set them on every auth type that requires PMF (sae, owe, eap2, eap192,
dpp) and on both PMF-optional transition modes (psk-sae, eap-eap2).
hostapd silently ignores the stray settings on non-SAE BSSes, but they
clutter the generated configuration and make it harder to tell at a
glance which knobs actually apply.

Split the grouping: keep ieee80211w (and rsn_override_mfp for transition
modes) where it was, and move sae_require_mfp / sae_pwe into a separate
check that only fires for the two auth types that actually run SAE (sae
and psk-sae).

No functional change on the air.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Link: https://github.com/openwrt/openwrt/pull/23009
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

2026-05-02 20:34:21 +02:00

..

config

wifi-scripts: ucode: do not leak SAE options onto non-SAE BSSes

2026-05-02 20:34:21 +02:00

ipv6

6rd: add CPPFLAGS

2026-02-17 22:16:58 +01:00

services

dropbear: require busybox pidof applet

2026-04-29 10:12:18 +02:00

utils

xdp-tools: fix musl build issues

2026-04-20 08:53:33 +02:00