Hi guys

My Debian distro has a kernel version of 6.1.69-1 and the installed wpasupplicant's version for Debian Bookworm is 2:2.10-12.

I don't use Network Manager; instead I rely solely on the ifup and ifdown scripts to bring up my network interfaces.

My wireless router in my BFF's residence is capable of performing WPA3-Personal authentication and so is my device.

Unfortunately, the current package wpasupplicant is unable to do WPA3-Personal authentication.

What alternatives to it exist?

Thank you for your tips.

Best regards.

Stella

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

Stella Ashburne <rewefie@gmx.com> writes:

Unfortunately, the current package wpasupplicant is unable to do WPA3-Personal authentication.

Are you sure? WPA3-Personal is hardly new so Bookworm should have the
support. Even the package description says that.

What alternatives to it exist?

I don't think there are any. Or maybe you could do WPA2-enterprise
instead like I do but it's a little involved.

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

Sent: Thursday, January 04, 2024 at 5:16 AM
From: "Anssi Saari" <anssi.saari@debian-user.mail.kapsi.fi>
To: debian-user@lists.debian.org
Subject: Re: The current package wpasupplicant doesn't support WPA3-Personal authentication. What alternatives to it exist?

Are you sure? WPA3-Personal is hardly new so Bookworm should have the support. Even the package description says that.

Could you provide me the URL to the package description please?

Thanks.

Stella

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

On 4/1/24 05:40, Stella Ashburne wrote:

Sent: Thursday, January 04, 2024 at 5:16 AM
From: "Anssi Saari" <anssi.saari@debian-user.mail.kapsi.fi>
To: debian-user@lists.debian.org
Subject: Re: The current package wpasupplicant doesn't support WPA3-Personal authentication. What alternatives to it exist?


Are you sure? WPA3-Personal is hardly new so Bookworm should have the
support. Even the package description says that.

Could you provide me the URL to the package description please?

Thanks.

Stella

I do not know whether you have heard of the search engine named google,
but, from doing a search of the World Wide Web, using google, the
following are some of the first results displayed.

https://wiki.archlinux.org/title/wpa_supplicant
- "wpa_supplicant is a cross-platform supplicant with support for WPA,
WPA2 and WPA3 (IEEE 802.11i). It is suitable for desktops, laptops and
embedded systems. It is the IEEE 802.1X/WPA component that is used in
the client stations. It implements key negotiation with a WPA
authenticator and it controls the roaming and IEEE 802.11 authentication/association of the wireless driver."

https://w1.fi/wpa_supplicant/
- "Linux WPA/WPA2/WPA3/IEEE 802.1X Supplicant

wpa_supplicant is a WPA Supplicant for Linux, BSD, Mac OS X, and Windows
with support for WPA, WPA2 (IEEE 802.11i / RSN), and WPA3. It is
suitable for both desktop/laptop computers and embedded systems.
Supplicant is the IEEE 802.1X/WPA component that is used in the client stations. It implements key negotiation with a WPA Authenticator and it controls the roaming and IEEE 802.11 authentication/association of the
wlan driver.

wpa_supplicant is designed to be a "daemon" program that runs in the
background and acts as the backend component controlling the wireless connection. wpa_supplicant supports separate frontend programs and a
text-based frontend (wpa_cli) and a GUI (wpa_gui) are included with wpa_supplicant."

and, of course, ...

https://en.wikipedia.org/wiki/Wpa_supplicant
- "wpa_supplicant is a free software implementation of an IEEE 802.11i supplicant for Linux, FreeBSD, NetBSD, QNX, AROS, Microsoft Windows,
Solaris, OS/2 (including ArcaOS and eComStation)[2] and Haiku.[3] In
addition to being a WPA3 and WPA2 supplicant, it also implements WPA and
older wireless LAN security protocols.
Features

Features include:[4]

WPA-PSK and WPA2-PSK ("WPA-Personal", pre-shared key)
WPA3[5]
WPA with EAP ("WPA-Enterprise", for example with RADIUS
authentication server)
RSN: PMKSA caching, pre-authentication
IEEE 802.11r
IEEE 802.11w
Wi-Fi Protected Setup (WPS)

Included with the supplicant are a GUI and a command-line utility for interacting with the running supplicant. From either of these interfaces
it is possible to review a list of currently visible networks, select
one of them, provide any additional security information needed to
authenticate with the network (for example, a passphrase, or username
and password) and add it to the preference list to enable automatic reconnection in the future."


....
Bret Busby
Armadale
Western Australia
(UTC+0800)
.................

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

On Wed, Jan 03, 2024 at 10:40:33PM +0100, Stella Ashburne wrote:

Sent: Thursday, January 04, 2024 at 5:16 AM
From: "Anssi Saari" <anssi.saari@debian-user.mail.kapsi.fi>
To: debian-user@lists.debian.org
Subject: Re: The current package wpasupplicant doesn't support WPA3-Personal authentication. What alternatives to it exist?

Are you sure? WPA3-Personal is hardly new so Bookworm should have the support. Even the package description says that.

Could you provide me the URL to the package description please?

This one?

https://packages.debian.org/bookworm/wpasupplicant

Cheers
--
t

-----BEGIN PGP SIGNATURE-----

iF0EABECAB0WIQRp53liolZD6iXhAoIFyCz1etHaRgUCZZXdTQAKCRAFyCz1etHa RnYWAJ44PCqeknCuZg4ocoAKMCZ3H0WQrACff8qnDmT9dcYP7hs044RsW4ZZo08=
=J24k
-----END PGP SIGNATURE-----

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

Hi Tomas

Thanks for your reply.

Sent: Thursday, January 04, 2024 at 6:18 AM
From: tomas@tuxteam.de
To: "Stella Ashburne" <rewefie@gmx.com>
Cc: debian-user@lists.debian.org
Subject: Re: The current package wpasupplicant doesn't support WPA3-Personal authentication. What alternatives to it exist?

This one?

https://packages.debian.org/bookworm/wpasupplicant

The main heading of that web page is Package: wpasupplicant (2:2.10-12)

Immediately below it is the sub-heading that states

client support for WPA and WPA2 (IEEE 802.11i)

I fail to see WPA3 mentioned therein.

Best regards.

Stella

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

On 4/1/24 06:18, tomas@tuxteam.de wrote:

On Wed, Jan 03, 2024 at 10:40:33PM +0100, Stella Ashburne wrote:

Sent: Thursday, January 04, 2024 at 5:16 AM
From: "Anssi Saari" <anssi.saari@debian-user.mail.kapsi.fi>
To: debian-user@lists.debian.org
Subject: Re: The current package wpasupplicant doesn't support WPA3-Personal authentication. What alternatives to it exist?


Are you sure? WPA3-Personal is hardly new so Bookworm should have the
support. Even the package description says that.

Could you provide me the URL to the package description please?

This one?

https://packages.debian.org/bookworm/wpasupplicant

Cheers

And, from the link that Tomas posted;

"
-- Package: wpasupplicant (2:2.10-12)
Links for wpasupplicant
Screenshot
Debian Resources:

Bug Reports
Developer Information
Debian Changelog
Copyright File
Debian Patch Tracker

Download Source Package wpa:

[wpa_2.10-12.dsc]
[wpa_2.10.orig.tar.xz]
[wpa_2.10-12.debian.tar.xz]

Maintainers:

Debian wpasupplicant Maintainers (QA Page)
Andrej Shadura (QA Page)

External Resources:

Homepage [w1.fi]

Similar packages:

wpasupplicant-udeb
libwpa-client-dev
hostapd
wicd-daemon
wicd-cli
wicd-curses
wicd-gtk
python3-wicd
python-wicd

client support for WPA and WPA2 (IEEE 802.11i)

wpa-supplicant is a userspace daemon handling connection and
authentication in wireless and wired networks, primarily secured with
the WPA/WPA2/WPA3 protocols. "


Which can no doubt be found via https://www.google.com/search?q=debiaqn+package+wpasupplicant&ie=utf-8&oe=utf-8

....
Bret Busby
Armadale
Western Australia
(UTC+0800)
.................

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

Sent: Thursday, January 04, 2024 at 7:03 AM
From: "Bret Busby" <bret@busby.net>
To: debian-user@lists.debian.org
Subject: Re: The current package wpasupplicant doesn't support WPA3-Personal authentication. What alternatives to it exist?

On 4/1/24 06:18, tomas@tuxteam.de wrote:

On Wed, Jan 03, 2024 at 10:40:33PM +0100, Stella Ashburne wrote:

This one?

https://packages.debian.org/bookworm/wpasupplicant

Cheers

And, from the link that Tomas posted;

"
-- Package: wpasupplicant (2:2.10-12)

About that web page referenced by Tomas' URL:

The main heading is

Package: wpasupplicant (2:2.10-12)

Immediately below it is the sub-heading that states

client support for WPA and WPA2 (IEEE 802.11i)

I fail to see WPA3 mentioned in said sub-heading.

Stella

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

On 4/1/24 07:11, Stella Ashburne wrote:

Sent: Thursday, January 04, 2024 at 6:57 AM
From: "Bret Busby" <bret@busby.net>
To: debian-user@lists.debian.org
Subject: Re: The current package wpasupplicant doesn't support WPA3-Personal authentication. What alternatives to it exist?


I do not know whether you have heard of the search engine named google,
but, from doing a search of the World Wide Web, using google, the
following are some of the first results displayed.

https://wiki.archlinux.org/title/wpa_supplicant
- "wpa_supplicant is a cross-platform supplicant with support for WPA,
WPA2 and WPA3 (IEEE 802.11i). It is suitable for desktops, laptops and
embedded systems. It is the IEEE 802.1X/WPA component that is used in
the client stations. It implements key negotiation with a WPA
authenticator and it controls the roaming and IEEE 802.11
authentication/association of the wireless driver."

As stated in my original post, I am using Debian, not ArchLinux.

So your quote from ArchLinux's wiki is irrevelant to Debian's version of wpasupplicant.

It is unfortunate that you refused to read the Debian package
description to which you were referred.

--
....
Bret Busby
Armadale
Western Australia
(UTC+0800)
.................

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

On 1/3/24 17:57, Bret Busby wrote:

On 4/1/24 05:40, Stella Ashburne wrote:

Sent: Thursday, January 04, 2024 at 5:16 AM
From: "Anssi Saari" <anssi.saari@debian-user.mail.kapsi.fi>
To: debian-user@lists.debian.org
Subject: Re: The current package wpasupplicant doesn't support
WPA3-Personal authentication. What alternatives to it exist?


Are you sure? WPA3-Personal is hardly new so Bookworm should have the
support. Even the package description says that.

Could you provide me the URL to the package description please?

Thanks.

Stella

I do not know whether you have heard of the search engine named google,
but, from doing a search of the World Wide Web, using google, the
following are some of the first results displayed.

https://wiki.archlinux.org/title/wpa_supplicant
- "wpa_supplicant is a cross-platform supplicant with support for WPA,
WPA2 and WPA3 (IEEE 802.11i). It is suitable for desktops, laptops and embedded systems. It is the IEEE 802.1X/WPA component that is used in
the client stations. It implements key negotiation with a WPA
authenticator and it controls the roaming and IEEE 802.11 authentication/association of the wireless driver."

https://w1.fi/wpa_supplicant/
- "Linux WPA/WPA2/WPA3/IEEE 802.1X Supplicant

wpa_supplicant is a WPA Supplicant for Linux, BSD, Mac OS X, and Windows
with support for WPA, WPA2 (IEEE 802.11i / RSN), and WPA3. It is
suitable for both desktop/laptop computers and embedded systems.
Supplicant is the IEEE 802.1X/WPA component that is used in the client stations. It implements key negotiation with a WPA Authenticator and it controls the roaming and IEEE 802.11 authentication/association of the
wlan driver.

wpa_supplicant is designed to be a "daemon" program that runs in the background and acts as the backend component controlling the wireless connection. wpa_supplicant supports separate frontend programs and a text-based frontend (wpa_cli) and a GUI (wpa_gui) are included with wpa_supplicant."

and, of course, ...

https://en.wikipedia.org/wiki/Wpa_supplicant
- "wpa_supplicant is a free software implementation of an IEEE 802.11i supplicant for Linux, FreeBSD, NetBSD, QNX, AROS, Microsoft Windows,
Solaris, OS/2 (including ArcaOS and eComStation)[2] and Haiku.[3] In
addition to being a WPA3 and WPA2 supplicant, it also implements WPA and older wireless LAN security protocols.
Features

Features include:[4]

    WPA-PSK and WPA2-PSK ("WPA-Personal", pre-shared key)
    WPA3[5]
    WPA with EAP ("WPA-Enterprise", for example with RADIUS authentication server)
    RSN: PMKSA caching, pre-authentication
    IEEE 802.11r
    IEEE 802.11w
    Wi-Fi Protected Setup (WPS)

Included with the supplicant are a GUI and a command-line utility for interacting with the running supplicant. From either of these interfaces
it is possible to review a list of currently visible networks, select
one of them, provide any additional security information needed to authenticate with the network (for example, a passphrase, or username
and password) and add it to the preference list to enable automatic reconnection in the future."

Are you comparing the same package/version arch to debian? The debian
one may not be the latest and the arch is almost always the latest.


--
Hindi madali ang maging ako

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

On Thu, Jan 04, 2024 at 12:04:52AM +0100, Stella Ashburne wrote:

https://packages.debian.org/bookworm/wpasupplicant

The main heading of that web page is Package: wpasupplicant (2:2.10-12)

Immediately below it is the sub-heading that states

client support for WPA and WPA2 (IEEE 802.11i)

I fail to see WPA3 mentioned therein.

Read more.

client support for WPA and WPA2 (IEEE 802.11i)

wpa-supplicant is a userspace daemon handling connection and
authentication in wireless and wired networks, primarily secured with
the WPA/WPA2/WPA3 protocols. This software provides key negotiation
with the access point (WPA Authenticator), and controls association
with IEEE 802.11i networks.

By the way, you don't need a web site to tell you the description of this package in Debian. You can simply run

apt show wpasupplicant

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

Sent: Thursday, January 04, 2024 at 7:16 AM
From: "Bret Busby" <bret@busby.net>
To: debian-user@lists.debian.org
Subject: Re: The current package wpasupplicant doesn't support WPA3-Personal authentication. What alternatives to it exist?

It is unfortunate that you refused to read the Debian package
description to which you were referred.

Rather it's unfortunate that you refused to recognize that the sub-heading contradicts with the so-called package's description.

I may be at least three decades younger than you but you don't have to sound patronizing or condescending.

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

On 4/1/24 07:20, Stella Ashburne wrote:

Sent: Thursday, January 04, 2024 at 7:14 AM
From: "Pocket" <pocket@columbus.rr.com>
To: debian-user@lists.debian.org
Subject: Re: The current package wpasupplicant doesn't support WPA3-Personal authentication. What alternatives to it exist?



Are you comparing the same package/version arch to debian? The debian
one may not be the latest and the arch is almost always the latest.

I totally agree with you on this point.

He quoted ArchLinux's version of wpasupplicant when I am using Debian's version.

He's like comparing apples to oranges.

And, if you had bothered to make the effort to search, using the terms

debian package wpasupplicant bookworm

the first result is

"Debian -- Details of package wpasupplicant in bookworm
packages.debian.org › bookworm › wpasupplicant
wpa-supplicant is a userspace daemon handling connection and
authentication in wireless and wired networks, primarily secured with
the WPA/WPA2/WPA3 protocols.
"

but, as you insist on whining, rather than making an effort, then, you
will never be satisfied until you have caused sufficient (for you)
gratuitous irritation...

....
Bret Busby
Armadale
Western Australia
(UTC+0800)
.................

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

Sent: Thursday, January 04, 2024 at 7:25 AM
From: "Bret Busby" <bret@busby.net>
To: debian-user@lists.debian.org
Subject: Re: The current package wpasupplicant doesn't support WPA3-Personal authentication. What alternatives to it exist?

but, as you insist on whining, rather than making an effort, then, you
will never be satisfied until you have caused sufficient (for you)
gratuitous irritation...

Gramps,

You need to relax and play with your grandchildren more often rather than sitting in front of your computer and taking out your frustrations on young girls like me. Shame on you!!

This will be my last correspondence with grumpy old men like you.

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

Are you sure? WPA3-Personal is hardly new so Bookworm should have the
support. Even the package description says that.

Could you provide me the URL to the package description please?

I think it's better to refer to the actual behavior, since that's the
only thing that matters in the end.
Have you tried and filed to associate using WPA3, and do you have
reasons to believe that it's because of a missing or faulty support
in wpasupplicant?

If so, can you give us any detail to help you find a solution?


Stefan

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

On Wed, 3 Jan 2024 22:40:33 +0100
Stella Ashburne <rewefie@gmx.com> wrote:

Are you sure? WPA3-Personal is hardly new so Bookworm should have
the support. Even the package description says that.

Could you provide me the URL to the package description please?

You can get the package description of any package with:

apt-cache show

It usually includes the project web site.

To answer your question about WPA3-Personal in wpasupplicant, the
change log indicates that it was added on 2022-01-16 to version 2.10,
which is the version I have on Bookworm. Change logs and other package documentation are usually found in /usr/share/doc/<package name>.

--
Does anybody read signatures any more?

https://charlescurley.com
https://charlescurley.com/blog/

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

On Wed, Jan 03 2024 at 06:36:24 PM, Stella Ashburne <rewefie@gmx.com> wrote:

Hi guys

My Debian distro has a kernel version of 6.1.69-1 and the installed wpasupplicant's version for Debian Bookworm is 2:2.10-12.

I don't use Network Manager; instead I rely solely on the ifup and ifdown scripts to bring up my network interfaces.

My wireless router in my BFF's residence is capable of performing WPA3-Personal authentication and so is my device.

Unfortunately, the current package wpasupplicant is unable to do WPA3-Personal authentication.

What alternatives to it exist?

I'm using bookworm and connected to wifi using WPA3-Personal right now.

$ sudo wpa_cli -i wlp2s0 status
bssid=<elided>
freq=5520
ssid=<elided>
id=0
mode=station
wifi_generation=5
pairwise_cipher=CCMP
group_cipher=CCMP
key_mgmt=SAE <--- SAE here is WPA3-Personal
pmf=1
mgmt_group_cipher=BIP
sae_group=19
sae_h2e=0
sae_pk=0
wpa_state=COMPLETED
ip_address=192.168.1.101
p2p_device_address=<elided>
address=<elided>
uuid=<elided>
ieee80211ac=1

I'm using NetworkManager here, but it also uses wpa_supplicant for this
(I did not change NM's default here; wpa_cli is for wpasupplicant). So
if you're having issues connecting to a WPA3 AP, you'll have better
results by describing what actual problem you're getting.

--
regards,
kushal

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

On Thu, Jan 04, 2024 at 07:13:01AM +0800, Bret Busby wrote:

[...]

Then "fail" seems to be the appropriate word.

[...]

If all else fails, read the words in front of you.

Folks, please, no need to be snarky.

Everyone of us overlooks something at times; something obvious to
someone may escape someone else and vice versa [0].

In this case it's honestly difficult to thoroughly understand those
marketing monikers which encompas a thicket of encryption primitives,
key lengths, key exchange protocols, key management strategies, authen protocols and the whole sh*t pie up to the top.

I don't, and I admit it.

Here's one link to the source (which I found in Debian's package page
which seems to suggest that they actually "do" WPA3 [1]. The next step
would be to find out what "to do WPA3" actually means, since there
will be probably lots of things which are optional and both parties
have to negotiate, and there's possibly a policy part where one party
can say "ah, no, if you can't do thingmajig-2 with at least 193 bits
I'm out" or something.

The next step would be to contact their mailing list and ask.

Cheers

[0] And yes, please, remind me if I fail this standard,
which I'm sure I do at times.

[1] https://w1.fi/wpa_supplicant/

--
t

-----BEGIN PGP SIGNATURE-----

iF0EABECAB0WIQRp53liolZD6iXhAoIFyCz1etHaRgUCZZaOTwAKCRAFyCz1etHa RlqgAJ9Mfa+/wdjnpofE+x7fbYGUXF+YOgCdEtj+0PcyJhuzKH9knaxK+eMCNv8=
=YudC
-----END PGP SIGNATURE-----

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

Greg Wooledge <greg@wooledge.org> wrote:

On Thu, Jan 04, 2024 at 12:04:52AM +0100, Stella Ashburne wrote:

https://packages.debian.org/bookworm/wpasupplicant

The main heading of that web page is Package: wpasupplicant
(2:2.10-12)

Immediately below it is the sub-heading that states

client support for WPA and WPA2 (IEEE 802.11i)

I fail to see WPA3 mentioned therein.

Read more.

client support for WPA and WPA2 (IEEE 802.11i)

wpa-supplicant is a userspace daemon handling connection and
authentication in wireless and wired networks, primarily secured
with the WPA/WPA2/WPA3 protocols. This software provides key
negotiation with the access point (WPA Authenticator), and controls association with IEEE 802.11i networks.

I do think Stella has a point in that the description page has a bug -
the sub-heading and the following text are not consistent. She should
raise an issue/bug report/whatever IMHO.

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

you refused to recognize that the sub-heading contradicts with the
so-called package's description

Yes yes, so file a bug report as recommended.

three decades younger than you but you don't have to sound patronizing or condescending.

You started the war.

What's wrong with being old?

You established you're three decades younger but what's your BMI?

--
CK

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

On Fri, Jan 12, 2024 at 02:16:50AM -0500, Charles Kroeger wrote:

you refused to recognize that the sub-heading contradicts with the so-called package's description

Yes yes, so file a bug report as recommended.

three decades younger than you but you don't have to sound patronizing or condescending.

You started the war.

That is debatable. But that will not solve anything.

What's wrong with being old?

You established you're three decades younger but what's your BMI?

What is wrong with you?

-H

--
Henning Follmann | hfollmann@itcfollmann.com

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)