On Fri, Nov 28, 2025 at 10:41:16AM +0100, Stefan Sperling wrote:
> On Fri, Nov 28, 2025 at 09:29:06AM +0100, Remi Locherer wrote:
> > Yes it connects whrn I disable PMF for the SSID.
> > --> openbsd-arista_pmf-disabled_r-optional.pcap
> 
> Thanks, that is good to know.  Nothing seems wrong in this case.
>  
> > > Are there any obvious AP settings for enabling the AKM "PSK"?
> > > Could you try disabling fast-transition roaming (11k / 11r) in AP settings?
> > > Perhaps this will switch "FT using PSK" to regular "PSK"?
> > 
> > No success when I disable 11r but keep 11w required. Also not with the
> > patch below applied on top of the PMF patches.
> > --> openbsd-arista_pmf-required_r-disabled.pcap
> 
> Now this AP is only advertising PSK 256, no PSK anymore.

Turns out I also have an AP which switches to only PSK SHA256 once
PMF is set to "required". The two patches below make it work.

The first patch is for /usr/src/sbin/ifconfig. You can apply this and
rebuild just ifconfig to enable use of sha256-psk, even on an unpatched
kernel:

  cd /usr/src/sbin/ifconfig; make obj; make; make install

  ifconfig iwx0 nwid A-LAB-PSK wpaakms "psk,sha256-psk" wpakey ...

This should give you a working connection.


The second patch enables SHA256-PSK by default in the kernel if the driver
supports PMF. With this, the extra ifconfig wpaakms parameter is not needed
and the interface should be able to connect to your AP setup out of the box.

Ok for both diffs?


add support for 802.11 AKM SHA256-PSK to ifconfig

M  sbin/ifconfig/ifconfig.8  |   8+  2-
M  sbin/ifconfig/ifconfig.c  |  11+  0-

2 files changed, 19 insertions(+), 2 deletions(-)

commit - a3f552335f9430f1104d6386773eb4a1f854d21f
commit + 6aad21a921d3c66792022357a27183d168fee44d
blob - 65ba2eabc00bf6a8391eeffc5e95b5628c2a184b
blob + 9bde644c086d54094a40281b9e82870fbcbf8993
--- sbin/ifconfig/ifconfig.8
+++ sbin/ifconfig/ifconfig.8
@@ -1261,7 +1261,8 @@ Set the comma-separated list of allowed authentication
 protocols.
 .Pp
 The supported values are
-.Dq psk
+.Dq psk ,
+.Dq sha256-psk ,
 and
 .Dq 802.1x .
 .Ar psk
@@ -1271,8 +1272,13 @@ authentication (also known as enterprise mode) is used
 an external IEEE 802.1X authentication server,
 such as wpa_supplicant.
 The default value is
-.Dq psk .
+.Dq psk ,
+or
+.Dq psk,sha256-psk
+if the driver for the interface supports protected management frames (PMF).
 .Dq psk
+and
+.Dq sha256-psk
 can only be used if a pre-shared key is configured using the
 .Cm wpakey
 option.
blob - dce9d1a98e34e25bbc24d64f84bc7ceebe15835c
blob + 2b0d1ccab3c968e216817c11c24ea22b2bdc3167
--- sbin/ifconfig/ifconfig.c
+++ sbin/ifconfig/ifconfig.c
@@ -2118,6 +2118,8 @@ setifwpaakms(const char *val, int d)
 	while (str != NULL) {
 		if (strcasecmp(str, "psk") == 0)
 			rval |= IEEE80211_WPA_AKM_PSK;
+		else if (strcasecmp(str, "sha256-psk") == 0)
+			rval |= IEEE80211_WPA_AKM_SHA256_PSK;
 		else if (strcasecmp(str, "802.1x") == 0)
 			rval |= IEEE80211_WPA_AKM_8021X;
 		else
@@ -2563,6 +2565,10 @@ ieee80211_status(void)
 			fputs("psk", stdout);
 			sep = ",";
 		}
+		if (wpa.i_akms & IEEE80211_WPA_AKM_SHA256_PSK) {
+			printf("%ssha256-psk", sep);
+			sep = ",";
+		}
 		if (wpa.i_akms & IEEE80211_WPA_AKM_8021X)
 			printf("%s802.1x", sep);
 
@@ -2678,6 +2684,11 @@ join_status(void)
 					printf("psk");
 					sep = ",";
 				}
+				if (wpa->i_akms &
+				    IEEE80211_WPA_AKM_SHA256_PSK) {
+					printf("%ssha256-psk", sep);
+					sep = ",";
+				}
 				if (wpa->i_akms & IEEE80211_WPA_AKM_8021X)
 					printf("%s802.1x", sep);
 


enable 802.11 AKM SHA256-PSK by default if the driver supports PMF

M  sys/net80211/ieee80211_crypto.c  |   2+  0-
M  sys/net80211/ieee80211_ioctl.c   |   4+  1-
M  sys/net80211/ieee80211_node.c    |  11+  3-

3 files changed, 17 insertions(+), 4 deletions(-)

commit - 6aad21a921d3c66792022357a27183d168fee44d
commit + a7fbcfb0ae9c0fe6d7449664f5bd0eb024d87724
blob - 265b82e816052b25f70a2bcf722454e238c90dbb
blob + 8188360f72bd797a3d30f303da478ea463b65b85
--- sys/net80211/ieee80211_crypto.c
+++ sys/net80211/ieee80211_crypto.c
@@ -62,6 +62,8 @@ ieee80211_crypto_attach(struct ifnet *ifp)
 	if (ic->ic_caps & IEEE80211_C_RSN) {
 		ic->ic_rsnprotos = IEEE80211_PROTO_RSN;
 		ic->ic_rsnakms = IEEE80211_AKM_PSK;
+		if (ic->ic_caps & IEEE80211_C_MFP)
+			ic->ic_rsnakms |= IEEE80211_AKM_SHA256_PSK;
 		ic->ic_rsnciphers = IEEE80211_CIPHER_CCMP;
 		ic->ic_rsngroupcipher = IEEE80211_CIPHER_CCMP;
 		ic->ic_rsngroupmgmtcipher = IEEE80211_CIPHER_BIP;
blob - 5dbfc382e3770749adf0001148111deb3f3a6e49
blob + 6d7142e64059ce1daff1018be1b805c47d38c649
--- sys/net80211/ieee80211_ioctl.c
+++ sys/net80211/ieee80211_ioctl.c
@@ -325,8 +325,11 @@ ieee80211_ioctl_setwpaparms(struct ieee80211com *ic,
 		ic->ic_rsnakms |= IEEE80211_AKM_8021X;
 	if (wpa->i_akms & IEEE80211_WPA_AKM_SHA256_8021X)
 		ic->ic_rsnakms |= IEEE80211_AKM_SHA256_8021X;
-	if (ic->ic_rsnakms == 0)	/* set to default (PSK) */
+	if (ic->ic_rsnakms == 0) {	/* set to default (PSK) */
 		ic->ic_rsnakms = IEEE80211_AKM_PSK;
+		if (ic->ic_caps & IEEE80211_C_MFP)
+			ic->ic_rsnakms |= IEEE80211_AKM_SHA256_PSK;
+	}
 
 	if (wpa->i_groupcipher == IEEE80211_WPA_CIPHER_WEP40)
 		ic->ic_rsngroupcipher = IEEE80211_CIPHER_WEP40;
blob - dec464f269c66186021c6de4e15cc13d2b71ef2d
blob + dbf6d091fe9455b189852082b3e848750bc7bfd3
--- sys/net80211/ieee80211_node.c
+++ sys/net80211/ieee80211_node.c
@@ -143,6 +143,11 @@ ieee80211_print_ess(struct ieee80211_ess *ess)
 		if (ess->rsnprotos & IEEE80211_PROTO_WPA)
 			printf(",wpa1");
 
+		if (ess->rsnakms & IEEE80211_AKM_PSK)
+			printf(",psk");
+		if (ess->rsnakms & IEEE80211_AKM_SHA256_PSK)
+			printf(",sha256-psk");
+
 		if (ess->rsnakms & IEEE80211_AKM_8021X ||
 		    ess->rsnakms & IEEE80211_AKM_SHA256_8021X)
 			printf(",802.1x");
@@ -264,7 +269,7 @@ ieee80211_ess_setnwkeys(struct ieee80211_ess *ess,
 
 /* Keep in sync with ieee80211_ioctl.c:ieee80211_ioctl_setwpaparms() */
 static int
-ieee80211_ess_setwpaparms(struct ieee80211_ess *ess,
+ieee80211_ess_setwpaparms(struct ieee80211com *ic, struct ieee80211_ess *ess,
     const struct ieee80211_wpaparams *wpa)
 {
 	if (!wpa->i_enabled) {
@@ -297,8 +302,11 @@ ieee80211_ess_setwpaparms(struct ieee80211_ess *ess,
 		ess->rsnakms |= IEEE80211_AKM_SHA256_8021X;
 	if (wpa->i_akms & IEEE80211_WPA_AKM_SAE)
 		ess->rsnakms |= IEEE80211_AKM_SAE;
-	if (ess->rsnakms == 0)	/* set to default (PSK) */
+	if (ess->rsnakms == 0)	{ /* set to default (PSK) */
 		ess->rsnakms = IEEE80211_AKM_PSK;
+		if (ic->ic_caps & IEEE80211_C_MFP)
+			ess->rsnakms = IEEE80211_AKM_SHA256_PSK;
+	}
 
 	if (wpa->i_groupcipher == IEEE80211_WPA_CIPHER_WEP40)
 		ess->rsngroupcipher = IEEE80211_CIPHER_WEP40;
@@ -399,7 +407,7 @@ ieee80211_add_ess(struct ieee80211com *ic, struct ieee
 				free(ess, M_DEVBUF, sizeof(*ess));
 				return ENODEV;
 			}
-			ieee80211_ess_setwpaparms(ess,
+			ieee80211_ess_setwpaparms(ic, ess,
 			    &join->i_wpaparams);
 			if (join->i_flags & IEEE80211_JOIN_WPAPSK) {
 				ess->flags |= IEEE80211_F_PSK;