On Wed, 27 May 2020 10:21:29 +0200 Stefan Sperling <[email protected]> wrote:
> On Wed, May 27, 2020 at 01:02:18AM -0700, Brandon Sahlin wrote: > > > > iwm0: received msg 1/4 of the 4-way handshake from > > > > 38:3b:c8:21:5d:fa > > > > iwm0: sending msg 2/4 of the 4-way handshake to > > > > 38:3b:c8:21:5d:fa > > > > > > If the handshake fails like this, that usually means the key is wrong. > > > Are you sure the WPA key is configured correctly? > > > > > > Does it work on an unecrypted AP? > > > > > > Does it work on a different WPA AP? > > > > > > > The key is correct. I literally copied the /etc/hostname.iwm0 file from > > the working 6.6 installation and have rechecked it multiple times since. > > Please try to configure the interface manually with ifconfig, rather > than relying on /etc/netstart to do it for you. > > > If I disable encryption on the access point, it connects. The crazy > > thing is the iwm interface will connect to an iphone acting as an > > encrypted hotspot, but not this access point which it worked fine with > > for years. > > Still looks like a bad key to me. > > > The failure to connect only occured after I installed 6.7 > > over the working 6.6 installation, so my guess is that the code changes > > between releases are responsible for the problem. > > Yes. We need to determine where that code change might have occurred. > > What I am assuming for now is that you are using some crazy characters in > your wpa passphrase and that netstart or something else is not processing > them correctly, resulting in a wrong key being installed in the kernel. > > But that's just a guess. I don't have facts other than that msg 2/4 is > failing. This symptom very strongly points towards a wrong WPA key. > There is no other reasonable explanation I could think of. > > If you could tell us whether manual configuration with ifconfig works or not, > that would help a lot to decide where to look next. > After some trial and error, I found the problem. My rather crufty /etc/hostname.iwm0 file set the mode to 11n. This worked with OpenBSD 6.6 with the problematic access point, but not with OpenBSD 6.7. Commenting out the mode line let the interface card conect in 11g mode. The odd thing is that having the mode set to 11n worked with one access point (iphone 8), giving a reported 11n connection in ifconfig, but fails to complete the handshake with the problematic access point.
