From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail02.haj.ipfire.org (localhost [IPv6:::1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4chkLN2xgQz32gQ for ; Wed, 08 Oct 2025 19:57:16 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [IPv6:2001:678:b28::25]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mail01.haj.ipfire.org", Issuer "R13" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4chkLK0Wxnz2xQd for ; Wed, 08 Oct 2025 19:57:13 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4chkLC3vYdz7b; Wed, 08 Oct 2025 19:57:07 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1759953427; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=1Q46yTemBRAqjgFBU+HP24S0ZTpmw4A1k4qPr04344w=; b=YX2tsjayjc9YLl9YJgU4YvSbf7LRATqRZeLhkEThwa43yisBhYU0AogSbiVRNHRpbR9v+v b79EPoCE5CMpSjDQ== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1759953427; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=1Q46yTemBRAqjgFBU+HP24S0ZTpmw4A1k4qPr04344w=; b=aLS4H6nyaearlmkvRLyskf1RLUzjLPT0RirMXSiSYCi6O6i089N6NfdK/6AOaaFwCYDrSL 7eaP4mFbbn5vT9VXHsnl9w6jMklImEbm8kmwgQ+6sH5pVUTSNSJbPBWd6rrVrJkSlOaJ2p wpW7bAyGGbPP6I7J0IQU0RtpM236TDuF3u4pcfoQYKl2U4MhM0RJAivmQgD3B3PwGrKBcR 2nYOEh3sTG4leq97AmxmV30wCaq4UBDaGtELa0OwWvnw9Knc/KGNBRVZvAeJLpsSnKFemT pn6zg2+J6P3LdtOHpSKYvl8ozYeZYkUKyoPBn9Ry2/M4wwVImajeVL8/YUsNAg== Message-ID: <875add1f-d838-462a-afc3-67f684a569a3@ipfire.org> Date: Wed, 8 Oct 2025 21:57:04 +0200 Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: MIME-Version: 1.0 Subject: Re: hostapd not working in CU199 To: Michael Tremer References: <116580b6-d16f-406d-b029-0df2277a5f80@ipfire.org> Content-Language: en-GB Cc: "IPFire: Development-List" From: Adolf Belka In-Reply-To: Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit Hi Michael, On 08/10/2025 16:38, Michael Tremer wrote: > Thank you. That confirms it. > > This change will fix it. Most of the bits have been wrong. I have no idea what happened there… > > https://git.ipfire.org/?p=ipfire-2.x.git;a=commitdiff;h=0c6f6f182d0b2ac78d869582e7e2e2f8babecab5 I just tested the change out with a new CU197 installation and restoring my previous CU197 backup. I then changed the password to only include the special characters you mentioned. Tested wireless connection out with that CU197 system and successfully made a connection. Then updated to CU199 and tested again and everything worked fine from immediately after updating and rebooting. Regards, Adolf. > > On my system this also changes some settings. > > Best, > -Michael > >> On 8 Oct 2025, at 14:45, Adolf Belka wrote: >> >> Hi Michael, >> >> On 08/10/2025 15:40, Michael Tremer wrote: >>> Hello Adolf, >>> Thank you for testing this. >>> Could you send me the output of “iw list” as well please? >> >> Here is the output >> >> # iw list >> Wiphy phy0 >> wiphy index: 0 >> max # scan SSIDs: 4 >> max scan IEs length: 2257 bytes >> max # sched scan SSIDs: 0 >> max # match sets: 0 >> Retry short long limit: 2 >> Coverage class: 0 (up to 0m) >> Device supports RSN-IBSS. >> Supported Ciphers: >> * WEP40 (00-0f-ac:1) >> * WEP104 (00-0f-ac:5) >> * TKIP (00-0f-ac:2) >> * CCMP-128 (00-0f-ac:4) >> * CCMP-256 (00-0f-ac:10) >> * GCMP-128 (00-0f-ac:8) >> * GCMP-256 (00-0f-ac:9) >> * CMAC (00-0f-ac:6) >> * CMAC-256 (00-0f-ac:13) >> * GMAC-128 (00-0f-ac:11) >> * GMAC-256 (00-0f-ac:12) >> Available Antennas: TX 0 RX 0 >> Supported interface modes: >> * IBSS >> * managed >> * AP >> * AP/VLAN >> * monitor >> * mesh point >> Band 1: >> Capabilities: 0x2fe >> HT20/HT40 >> SM Power Save disabled >> RX Greenfield >> RX HT20 SGI >> RX HT40 SGI >> TX STBC >> RX STBC 2-streams >> Max AMSDU length: 3839 bytes >> No DSSS/CCK HT40 >> Maximum RX AMPDU length 65535 bytes (exponent: 0x003) >> Minimum RX AMPDU time spacing: 2 usec (0x04) >> HT TX/RX MCS rate indexes supported: 0-15, 32 >> Bitrates (non-HT): >> * 1.0 Mbps >> * 2.0 Mbps (short preamble supported) >> * 5.5 Mbps (short preamble supported) >> * 11.0 Mbps (short preamble supported) >> * 6.0 Mbps >> * 9.0 Mbps >> * 12.0 Mbps >> * 18.0 Mbps >> * 24.0 Mbps >> * 36.0 Mbps >> * 48.0 Mbps >> * 54.0 Mbps >> Frequencies: >> * 2412.0 MHz [1] (20.0 dBm) >> * 2417.0 MHz [2] (20.0 dBm) >> * 2422.0 MHz [3] (20.0 dBm) >> * 2427.0 MHz [4] (20.0 dBm) >> * 2432.0 MHz [5] (20.0 dBm) >> * 2437.0 MHz [6] (20.0 dBm) >> * 2442.0 MHz [7] (20.0 dBm) >> * 2447.0 MHz [8] (20.0 dBm) >> * 2452.0 MHz [9] (20.0 dBm) >> * 2457.0 MHz [10] (20.0 dBm) >> * 2462.0 MHz [11] (20.0 dBm) >> * 2467.0 MHz [12] (20.0 dBm) (no IR) >> * 2472.0 MHz [13] (20.0 dBm) (no IR) >> * 2484.0 MHz [14] (20.0 dBm) (no IR) >> Band 2: >> Capabilities: 0x2fe >> HT20/HT40 >> SM Power Save disabled >> RX Greenfield >> RX HT20 SGI >> RX HT40 SGI >> TX STBC >> RX STBC 2-streams >> Max AMSDU length: 3839 bytes >> No DSSS/CCK HT40 >> Maximum RX AMPDU length 65535 bytes (exponent: 0x003) >> Minimum RX AMPDU time spacing: 2 usec (0x04) >> HT TX/RX MCS rate indexes supported: 0-15, 32 >> Bitrates (non-HT): >> * 6.0 Mbps >> * 9.0 Mbps >> * 12.0 Mbps >> * 18.0 Mbps >> * 24.0 Mbps >> * 36.0 Mbps >> * 48.0 Mbps >> * 54.0 Mbps >> Frequencies: >> * 5180.0 MHz [36] (20.0 dBm) (no IR) >> * 5190.0 MHz [38] (20.0 dBm) (no IR) >> * 5200.0 MHz [40] (20.0 dBm) (no IR) >> * 5210.0 MHz [42] (20.0 dBm) (no IR) >> * 5220.0 MHz [44] (20.0 dBm) (no IR) >> * 5230.0 MHz [46] (20.0 dBm) (no IR) >> * 5240.0 MHz [48] (20.0 dBm) (no IR) >> * 5250.0 MHz [50] (20.0 dBm) (no IR, radar detection) >> * 5260.0 MHz [52] (20.0 dBm) (no IR, radar detection) >> * 5270.0 MHz [54] (20.0 dBm) (no IR, radar detection) >> * 5280.0 MHz [56] (20.0 dBm) (no IR, radar detection) >> * 5290.0 MHz [58] (20.0 dBm) (no IR, radar detection) >> * 5300.0 MHz [60] (20.0 dBm) (no IR, radar detection) >> * 5310.0 MHz [62] (20.0 dBm) (no IR, radar detection) >> * 5320.0 MHz [64] (20.0 dBm) (no IR, radar detection) >> * 5500.0 MHz [100] (20.0 dBm) (no IR, radar detection) >> * 5510.0 MHz [102] (20.0 dBm) (no IR, radar detection) >> * 5520.0 MHz [104] (20.0 dBm) (no IR, radar detection) >> * 5530.0 MHz [106] (20.0 dBm) (no IR, radar detection) >> * 5540.0 MHz [108] (20.0 dBm) (no IR, radar detection) >> * 5550.0 MHz [110] (20.0 dBm) (no IR, radar detection) >> * 5560.0 MHz [112] (20.0 dBm) (no IR, radar detection) >> * 5570.0 MHz [114] (20.0 dBm) (no IR, radar detection) >> * 5580.0 MHz [116] (20.0 dBm) (no IR, radar detection) >> * 5590.0 MHz [118] (20.0 dBm) (no IR, radar detection) >> * 5600.0 MHz [120] (20.0 dBm) (no IR, radar detection) >> * 5610.0 MHz [122] (20.0 dBm) (no IR, radar detection) >> * 5620.0 MHz [124] (20.0 dBm) (no IR, radar detection) >> * 5630.0 MHz [126] (20.0 dBm) (no IR, radar detection) >> * 5640.0 MHz [128] (20.0 dBm) (no IR, radar detection) >> * 5650.0 MHz [130] (20.0 dBm) (no IR, radar detection) >> * 5660.0 MHz [132] (20.0 dBm) (no IR, radar detection) >> * 5670.0 MHz [134] (20.0 dBm) (no IR, radar detection) >> * 5680.0 MHz [136] (20.0 dBm) (no IR, radar detection) >> * 5690.0 MHz [138] (20.0 dBm) (no IR, radar detection) >> * 5700.0 MHz [140] (20.0 dBm) (no IR, radar detection) >> * 5745.0 MHz [149] (20.0 dBm) (no IR) >> * 5755.0 MHz [151] (20.0 dBm) (no IR) >> * 5765.0 MHz [153] (20.0 dBm) (no IR) >> * 5775.0 MHz [155] (20.0 dBm) (no IR) >> * 5785.0 MHz [157] (20.0 dBm) (no IR) >> * 5795.0 MHz [159] (20.0 dBm) (no IR) >> * 5805.0 MHz [161] (20.0 dBm) (no IR) >> * 5825.0 MHz [165] (20.0 dBm) (no IR) >> * 4920.0 MHz [184] (disabled) >> * 4940.0 MHz [188] (disabled) >> * 4960.0 MHz [192] (disabled) >> * 4980.0 MHz [196] (disabled) >> Supported commands: >> * new_interface >> * set_interface >> * new_key >> * start_ap >> * new_station >> * new_mpath >> * set_mesh_config >> * set_bss >> * authenticate >> * associate >> * deauthenticate >> * disassociate >> * join_ibss >> * join_mesh >> * remain_on_channel >> * set_tx_bitrate_mask >> * frame >> * frame_wait_cancel >> * set_wiphy_netns >> * set_channel >> * probe_client >> * set_noack_map >> * register_beacons >> * start_p2p_device >> * set_mcast_rate >> * testmode >> * connect >> * disconnect >> * set_qos_map >> * set_multicast_to_unicast >> software interface modes (can always be added): >> * AP/VLAN >> * monitor >> valid interface combinations: >> * #{ AP, mesh point } <= 8, >> total <= 8, #channels <= 1 >> HT Capability overrides: >> * MCS: ff ff ff ff ff ff ff ff ff ff >> * maximum A-MSDU length >> * supported channel width >> * short GI for 40 MHz >> * max A-MPDU length exponent >> * min MPDU start spacing >> Device supports TX status socket option. >> Device supports HT-IBSS. >> Device supports SAE with AUTHENTICATE command >> Device supports low priority scan. >> Device supports scan flush. >> Device supports AP scan. >> Device supports per-vif TX power setting >> Driver supports full state transitions for AP/GO clients >> Driver supports a userspace MPM >> Device supports configuring vdev MAC-addr on create. >> max # scan plans: 1 >> max scan plan interval: -1 >> max scan plan iterations: 0 >> Supported TX frame types: >> * IBSS: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0 >> * managed: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0 >> * AP: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0 >> * AP/VLAN: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0 >> * mesh point: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0 >> * P2P-client: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0 >> * P2P-GO: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0 >> * P2P-device: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0 >> Supported RX frame types: >> * IBSS: 0x40 0xb0 0xc0 0xd0 >> * managed: 0x40 0xb0 0xd0 >> * AP: 0x00 0x20 0x40 0xa0 0xb0 0xc0 0xd0 >> * AP/VLAN: 0x00 0x20 0x40 0xa0 0xb0 0xc0 0xd0 >> * mesh point: 0xb0 0xc0 0xd0 >> * P2P-client: 0x40 0xd0 >> * P2P-GO: 0x00 0x20 0x40 0xa0 0xb0 0xc0 0xd0 >> * P2P-device: 0x40 0xd0 >> Supported extended features: >> * [ RRM ]: RRM >> * [ FILS_STA ]: STA FILS (Fast Initial Link Setup) >> * [ CQM_RSSI_LIST ]: multiple CQM_RSSI_THOLD records >> * [ CONTROL_PORT_OVER_NL80211 ]: control port over nl80211 >> * [ TXQS ]: FQ-CoDel-enabled intermediate TXQs >> * [ SCAN_RANDOM_SN ]: use random sequence numbers in scans >> * [ SCAN_MIN_PREQ_CONTENT ]: use probe request with only rate IEs in scans >> * [ CONTROL_PORT_NO_PREAUTH ]: disable pre-auth over nl80211 control port support >> * [ DEL_IBSS_STA ]: deletion of IBSS station support >> * [ SCAN_FREQ_KHZ ]: scan on kHz frequency support >> * [ CONTROL_PORT_OVER_NL80211_TX_STATUS ]: tx status for nl80211 control port support >> * [ POWERED_ADDR_CHANGE ]: can change MAC address while up >> >> >> Regards, >> >> Adolf. >> >>> Either I have an error somewhere checking for the [MAX-AMSDU-7935] capability, or the device claims to support it but actually doesn't. >>> -Michael >>>> On 8 Oct 2025, at 14:38, Adolf Belka wrote: >>>> >>>> Hi Michael, >>>> >>>> As mentioned at the monthly conf call I tested out today the wireless function in CU199 but it won't start for me. >>>> >>>> Basically the code overwrites the WPA Passphrase in hostapd.conf with a directory. In the WUI the passphrase is still correctly shown. It is correctly stored in the wlanap/settings file. It is just not correct in the hostapd.conf file. >>>> >>>> The first time I tried the update the WPA Passphrase was replaced with /srv/web/ipfire/cgi-bin/ >>>> >>>> The second time I tried the update it was overwritten by / which is the version shown below. >>>> >>>> The hostapd.conf with CU197 (with 63 character Passphrase redacted) was >>>> >>>> ------------------------------------- >>>> driver=nl80211 >>>> ######################### basic hostapd configuration ########################## >>>> # >>>> country_code=NL >>>> country3=0x49 # indoor >>>> ieee80211d=1 >>>> ieee80211h=1 >>>> channel=6 >>>> >>>> # Always advertise TPC >>>> local_pwr_constraint=3 >>>> spectrum_mgmt_required=1 >>>> hw_mode=g >>>> ieee80211n=1 >>>> wmm_enabled=1 >>>> ht_capab= >>>> # Enable logging >>>> logger_syslog=-1 >>>> logger_syslog_level=4 >>>> auth_algs=1 >>>> ctrl_interface=/var/run/hostapd >>>> ctrl_interface_group=0 >>>> disassoc_low_ack=1 >>>> >>>> # SSID >>>> ssid2="Jarnsaxa" >>>> utf8_ssid=1 >>>> >>>> noscan=1 >>>> ieee80211w=0 >>>> ######################### wpa hostapd configuration ############################ >>>> # >>>> wpa=2 >>>> wpa_passphrase=*************************************************************** >>>> wpa_key_mgmt=WPA-PSK SAE >>>> rsn_pairwise=CCMP >>>> ------------------------------------- >>>> >>>> After the update the file contained >>>> >>>> ------------------------------------- >>>> # Automatically generated configuration >>>> # DO NOT EDIT >>>> logger_syslog=-1 >>>> logger_syslog_level=4 >>>> driver=nl80211 >>>> country_code=NL >>>> country3=0x49 >>>> ieee80211d=1 >>>> ieee80211h=1 >>>> channel=6 >>>> local_pwr_constraint=3 >>>> spectrum_mgmt_required=1 >>>> enable_background_radar=1 >>>> wmm_enabled=1 >>>> hw_mode=g >>>> ieee80211n=1 >>>> ht_capab=[HT40+][HT40-] [GF] [RX-STBC1] [SHORT-GI-40] [TX-STBC] [MAX-AMSDU-7935] [SHORT-GI-20] >>>> auth_algs=1 >>>> ctrl_interface=/var/run/hostapd >>>> ctrl_interface_group=0 >>>> disassoc_low_ack=1 >>>> ssid2="Jarnsaxa" >>>> utf8_ssid=1 >>>> noscan=1 >>>> ieee80211w=0 >>>> wpa=2 >>>> wpa_passphrase=/ >>>> wpa_key_mgmt=WPA-PSK WPA-PSK-SHA256 SAE >>>> rsn_pairwise=CCMP >>>> ssid_protection=1 >>>> extended_key_id=1 >>>> oce=7 >>>> interworking=1 >>>> access_network_type=0 >>>> internet=1 >>>> time_advertisement=2 >>>> multicast_to_unicast=1 >>>> ------------------------------------- >>>> >>>> The wireless log not surprisingly had a problem with the passphrase >>>> >>>> 15:00:00 hostapd: blue0: interface state ENABLED->DISABLED >>>> 15:00:00 hostapd: blue0: AP-DISABLED >>>> 15:00:00 hostapd: blue0: CTRL-EVENT-TERMINATING >>>> 15:00:00 hostapd: nl80211: deinit ifname=blue0 disabled_11b_rates=0 >>>> 15:00:02 hostapd: blue0: interface state UNINITIALIZED->COUNTRY_UPDATE >>>> 15:00:02 hostapd: Driver does not support configured HT capability [MAX-AMSDU-7935] >>>> 15:00:02 hostapd: blue0: interface state COUNTRY_UPDATE->DISABLED >>>> 15:00:02 hostapd: blue0: AP-DISABLED >>>> 15:00:02 hostapd: blue0: Unable to setup interface. >>>> 15:00:02 hostapd: blue0: interface state DISABLED->DISABLED >>>> 15:00:02 hostapd: blue0: AP-DISABLED >>>> 15:00:02 hostapd: blue0: CTRL-EVENT-TERMINATING >>>> 15:00:02 hostapd: hostapd_free_hapd_data: Interface blue0 wasn't started >>>> 15:00:02 hostapd: nl80211: deinit ifname=blue0 disabled_11b_rates=0 >>>> 15:04:57 hostapd: Line 27: invalid WPA passphrase length 1 (expected 8..63) >>>> 15:04:57 hostapd: WPA-PSK enabled, but PSK or passphrase is not configured. >>>> 15:04:57 hostapd: 2 errors found in configuration file '/etc/hostapd.conf' >>>> 15:04:57 hostapd: Failed to set up interface with /etc/hostapd.conf >>>> 15:04:58 hostapd: Failed to initialize interface >>>> >>>> The log also mentions that the driver for the wireless chip in the Prime unit doesn't support a configured HT capability. >>>> I am presuming that that issue is the second error hostapd found in the configuration file. >>>> >>>> I have also just noticed that the hostapd.conf file that was used in CU197 is still physically present in /var/ipfire/wlanap/ while the new version is in /etc. Probably should delete the version from the old location if it is being replaced by the new version. >>>> >>>> Regards, >>>> >>>> Adolf. >>>> >> >> > >