Hi Michael,

On 08/10/2025 16:38, Michael Tremer wrote:
Thank you. That confirms it.

This change will fix it. Most of the bits have been wrong. I have no idea what 
happened there…

   
https://git.ipfire.org/?p=ipfire-2.x.git;a=commitdiff;h=0c6f6f182d0b2ac78d869582e7e2e2f8babecab5

I just tested the change out with a new CU197 installation and restoring my 
previous CU197 backup. I then changed the password to only include the special 
characters you mentioned.

Tested wireless connection out with that CU197 system and successfully made a 
connection.

Then updated to CU199 and tested again and everything worked fine from 
immediately after updating and rebooting.

Regards,

Adolf.


On my system this also changes some settings.

Best,
-Michael

On 8 Oct 2025, at 14:45, Adolf Belka <[email protected]> wrote:

Hi Michael,

On 08/10/2025 15:40, Michael Tremer wrote:
Hello Adolf,
Thank you for testing this.
Could you send me the output of “iw list” as well please?

Here is the output

# iw list
Wiphy phy0
wiphy index: 0
max # scan SSIDs: 4
max scan IEs length: 2257 bytes
max # sched scan SSIDs: 0
max # match sets: 0
Retry short long limit: 2
Coverage class: 0 (up to 0m)
Device supports RSN-IBSS.
Supported Ciphers:
* WEP40 (00-0f-ac:1)
* WEP104 (00-0f-ac:5)
* TKIP (00-0f-ac:2)
* CCMP-128 (00-0f-ac:4)
* CCMP-256 (00-0f-ac:10)
* GCMP-128 (00-0f-ac:8)
* GCMP-256 (00-0f-ac:9)
* CMAC (00-0f-ac:6)
* CMAC-256 (00-0f-ac:13)
* GMAC-128 (00-0f-ac:11)
* GMAC-256 (00-0f-ac:12)
Available Antennas: TX 0 RX 0
Supported interface modes:
* IBSS
* managed
* AP
* AP/VLAN
* monitor
* mesh point
Band 1:
Capabilities: 0x2fe
HT20/HT40
SM Power Save disabled
RX Greenfield
RX HT20 SGI
RX HT40 SGI
TX STBC
RX STBC 2-streams
Max AMSDU length: 3839 bytes
No DSSS/CCK HT40
Maximum RX AMPDU length 65535 bytes (exponent: 0x003)
Minimum RX AMPDU time spacing: 2 usec (0x04)
HT TX/RX MCS rate indexes supported: 0-15, 32
Bitrates (non-HT):
* 1.0 Mbps
* 2.0 Mbps (short preamble supported)
* 5.5 Mbps (short preamble supported)
* 11.0 Mbps (short preamble supported)
* 6.0 Mbps
* 9.0 Mbps
* 12.0 Mbps
* 18.0 Mbps
* 24.0 Mbps
* 36.0 Mbps
* 48.0 Mbps
* 54.0 Mbps
Frequencies:
* 2412.0 MHz [1] (20.0 dBm)
* 2417.0 MHz [2] (20.0 dBm)
* 2422.0 MHz [3] (20.0 dBm)
* 2427.0 MHz [4] (20.0 dBm)
* 2432.0 MHz [5] (20.0 dBm)
* 2437.0 MHz [6] (20.0 dBm)
* 2442.0 MHz [7] (20.0 dBm)
* 2447.0 MHz [8] (20.0 dBm)
* 2452.0 MHz [9] (20.0 dBm)
* 2457.0 MHz [10] (20.0 dBm)
* 2462.0 MHz [11] (20.0 dBm)
* 2467.0 MHz [12] (20.0 dBm) (no IR)
* 2472.0 MHz [13] (20.0 dBm) (no IR)
* 2484.0 MHz [14] (20.0 dBm) (no IR)
Band 2:
Capabilities: 0x2fe
HT20/HT40
SM Power Save disabled
RX Greenfield
RX HT20 SGI
RX HT40 SGI
TX STBC
RX STBC 2-streams
Max AMSDU length: 3839 bytes
No DSSS/CCK HT40
Maximum RX AMPDU length 65535 bytes (exponent: 0x003)
Minimum RX AMPDU time spacing: 2 usec (0x04)
HT TX/RX MCS rate indexes supported: 0-15, 32
Bitrates (non-HT):
* 6.0 Mbps
* 9.0 Mbps
* 12.0 Mbps
* 18.0 Mbps
* 24.0 Mbps
* 36.0 Mbps
* 48.0 Mbps
* 54.0 Mbps
Frequencies:
* 5180.0 MHz [36] (20.0 dBm) (no IR)
* 5190.0 MHz [38] (20.0 dBm) (no IR)
* 5200.0 MHz [40] (20.0 dBm) (no IR)
* 5210.0 MHz [42] (20.0 dBm) (no IR)
* 5220.0 MHz [44] (20.0 dBm) (no IR)
* 5230.0 MHz [46] (20.0 dBm) (no IR)
* 5240.0 MHz [48] (20.0 dBm) (no IR)
* 5250.0 MHz [50] (20.0 dBm) (no IR, radar detection)
* 5260.0 MHz [52] (20.0 dBm) (no IR, radar detection)
* 5270.0 MHz [54] (20.0 dBm) (no IR, radar detection)
* 5280.0 MHz [56] (20.0 dBm) (no IR, radar detection)
* 5290.0 MHz [58] (20.0 dBm) (no IR, radar detection)
* 5300.0 MHz [60] (20.0 dBm) (no IR, radar detection)
* 5310.0 MHz [62] (20.0 dBm) (no IR, radar detection)
* 5320.0 MHz [64] (20.0 dBm) (no IR, radar detection)
* 5500.0 MHz [100] (20.0 dBm) (no IR, radar detection)
* 5510.0 MHz [102] (20.0 dBm) (no IR, radar detection)
* 5520.0 MHz [104] (20.0 dBm) (no IR, radar detection)
* 5530.0 MHz [106] (20.0 dBm) (no IR, radar detection)
* 5540.0 MHz [108] (20.0 dBm) (no IR, radar detection)
* 5550.0 MHz [110] (20.0 dBm) (no IR, radar detection)
* 5560.0 MHz [112] (20.0 dBm) (no IR, radar detection)
* 5570.0 MHz [114] (20.0 dBm) (no IR, radar detection)
* 5580.0 MHz [116] (20.0 dBm) (no IR, radar detection)
* 5590.0 MHz [118] (20.0 dBm) (no IR, radar detection)
* 5600.0 MHz [120] (20.0 dBm) (no IR, radar detection)
* 5610.0 MHz [122] (20.0 dBm) (no IR, radar detection)
* 5620.0 MHz [124] (20.0 dBm) (no IR, radar detection)
* 5630.0 MHz [126] (20.0 dBm) (no IR, radar detection)
* 5640.0 MHz [128] (20.0 dBm) (no IR, radar detection)
* 5650.0 MHz [130] (20.0 dBm) (no IR, radar detection)
* 5660.0 MHz [132] (20.0 dBm) (no IR, radar detection)
* 5670.0 MHz [134] (20.0 dBm) (no IR, radar detection)
* 5680.0 MHz [136] (20.0 dBm) (no IR, radar detection)
* 5690.0 MHz [138] (20.0 dBm) (no IR, radar detection)
* 5700.0 MHz [140] (20.0 dBm) (no IR, radar detection)
* 5745.0 MHz [149] (20.0 dBm) (no IR)
* 5755.0 MHz [151] (20.0 dBm) (no IR)
* 5765.0 MHz [153] (20.0 dBm) (no IR)
* 5775.0 MHz [155] (20.0 dBm) (no IR)
* 5785.0 MHz [157] (20.0 dBm) (no IR)
* 5795.0 MHz [159] (20.0 dBm) (no IR)
* 5805.0 MHz [161] (20.0 dBm) (no IR)
* 5825.0 MHz [165] (20.0 dBm) (no IR)
* 4920.0 MHz [184] (disabled)
* 4940.0 MHz [188] (disabled)
* 4960.0 MHz [192] (disabled)
* 4980.0 MHz [196] (disabled)
Supported commands:
* new_interface
* set_interface
* new_key
* start_ap
* new_station
* new_mpath
* set_mesh_config
* set_bss
* authenticate
* associate
* deauthenticate
* disassociate
* join_ibss
* join_mesh
* remain_on_channel
* set_tx_bitrate_mask
* frame
* frame_wait_cancel
* set_wiphy_netns
* set_channel
* probe_client
* set_noack_map
* register_beacons
* start_p2p_device
* set_mcast_rate
* testmode
* connect
* disconnect
* set_qos_map
* set_multicast_to_unicast
software interface modes (can always be added):
* AP/VLAN
* monitor
valid interface combinations:
* #{ AP, mesh point } <= 8,
   total <= 8, #channels <= 1
HT Capability overrides:
* MCS: ff ff ff ff ff ff ff ff ff ff
* maximum A-MSDU length
* supported channel width
* short GI for 40 MHz
* max A-MPDU length exponent
* min MPDU start spacing
Device supports TX status socket option.
Device supports HT-IBSS.
Device supports SAE with AUTHENTICATE command
Device supports low priority scan.
Device supports scan flush.
Device supports AP scan.
Device supports per-vif TX power setting
Driver supports full state transitions for AP/GO clients
Driver supports a userspace MPM
Device supports configuring vdev MAC-addr on create.
max # scan plans: 1
max scan plan interval: -1
max scan plan iterations: 0
Supported TX frame types:
* IBSS: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 
0xe0 0xf0
* managed: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 
0xd0 0xe0 0xf0
* AP: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 
0xe0 0xf0
* AP/VLAN: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 
0xd0 0xe0 0xf0
* mesh point: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 
0xd0 0xe0 0xf0
* P2P-client: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 
0xd0 0xe0 0xf0
* P2P-GO: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 
0xe0 0xf0
* P2P-device: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 
0xd0 0xe0 0xf0
Supported RX frame types:
* IBSS: 0x40 0xb0 0xc0 0xd0
* managed: 0x40 0xb0 0xd0
* AP: 0x00 0x20 0x40 0xa0 0xb0 0xc0 0xd0
* AP/VLAN: 0x00 0x20 0x40 0xa0 0xb0 0xc0 0xd0
* mesh point: 0xb0 0xc0 0xd0
* P2P-client: 0x40 0xd0
* P2P-GO: 0x00 0x20 0x40 0xa0 0xb0 0xc0 0xd0
* P2P-device: 0x40 0xd0
Supported extended features:
* [ RRM ]: RRM
* [ FILS_STA ]: STA FILS (Fast Initial Link Setup)
* [ CQM_RSSI_LIST ]: multiple CQM_RSSI_THOLD records
* [ CONTROL_PORT_OVER_NL80211 ]: control port over nl80211
* [ TXQS ]: FQ-CoDel-enabled intermediate TXQs
* [ SCAN_RANDOM_SN ]: use random sequence numbers in scans
* [ SCAN_MIN_PREQ_CONTENT ]: use probe request with only rate IEs in scans
* [ CONTROL_PORT_NO_PREAUTH ]: disable pre-auth over nl80211 control port 
support
* [ DEL_IBSS_STA ]: deletion of IBSS station support
* [ SCAN_FREQ_KHZ ]: scan on kHz frequency support
* [ CONTROL_PORT_OVER_NL80211_TX_STATUS ]: tx status for nl80211 control port 
support
* [ POWERED_ADDR_CHANGE ]: can change MAC address while up


Regards,

Adolf.

Either I have an error somewhere checking for the [MAX-AMSDU-7935] capability, 
or the device claims to support it but actually doesn't.
-Michael
On 8 Oct 2025, at 14:38, Adolf Belka <[email protected]> wrote:

Hi Michael,

As mentioned at the monthly conf call I tested out today the wireless function 
in CU199 but it won't start for me.

Basically the code overwrites the WPA Passphrase in hostapd.conf with a 
directory. In the WUI the passphrase is still correctly shown. It is correctly 
stored in the wlanap/settings file. It is just not correct in the hostapd.conf 
file.

The first time I tried the update the WPA Passphrase was replaced with 
/srv/web/ipfire/cgi-bin/

The second time I tried the update it was overwritten by / which is the version 
shown below.

The hostapd.conf with CU197 (with 63 character Passphrase redacted) was

-------------------------------------
driver=nl80211
######################### basic hostapd configuration ##########################
#
country_code=NL
country3=0x49 # indoor
ieee80211d=1
ieee80211h=1
channel=6

# Always advertise TPC
local_pwr_constraint=3
spectrum_mgmt_required=1
hw_mode=g
ieee80211n=1
wmm_enabled=1
ht_capab=
# Enable logging
logger_syslog=-1
logger_syslog_level=4
auth_algs=1
ctrl_interface=/var/run/hostapd
ctrl_interface_group=0
disassoc_low_ack=1

# SSID
ssid2="Jarnsaxa"
utf8_ssid=1

noscan=1
ieee80211w=0
######################### wpa hostapd configuration ############################
#
wpa=2
wpa_passphrase=***************************************************************
wpa_key_mgmt=WPA-PSK SAE
rsn_pairwise=CCMP
-------------------------------------

After the update the file contained

-------------------------------------
# Automatically generated configuration
# DO NOT EDIT
logger_syslog=-1
logger_syslog_level=4
driver=nl80211
country_code=NL
country3=0x49
ieee80211d=1
ieee80211h=1
channel=6
local_pwr_constraint=3
spectrum_mgmt_required=1
enable_background_radar=1
wmm_enabled=1
hw_mode=g
ieee80211n=1
ht_capab=[HT40+][HT40-] [GF] [RX-STBC1] [SHORT-GI-40] [TX-STBC] 
[MAX-AMSDU-7935] [SHORT-GI-20]
auth_algs=1
ctrl_interface=/var/run/hostapd
ctrl_interface_group=0
disassoc_low_ack=1
ssid2="Jarnsaxa"
utf8_ssid=1
noscan=1
ieee80211w=0
wpa=2
wpa_passphrase=/
wpa_key_mgmt=WPA-PSK WPA-PSK-SHA256 SAE
rsn_pairwise=CCMP
ssid_protection=1
extended_key_id=1
oce=7
interworking=1
access_network_type=0
internet=1
time_advertisement=2
multicast_to_unicast=1
-------------------------------------

The wireless log not surprisingly had a problem with the passphrase

15:00:00 hostapd:  blue0: interface state ENABLED->DISABLED
15:00:00 hostapd:  blue0: AP-DISABLED
15:00:00 hostapd:  blue0: CTRL-EVENT-TERMINATING
15:00:00 hostapd:  nl80211: deinit ifname=blue0 disabled_11b_rates=0
15:00:02 hostapd:  blue0: interface state UNINITIALIZED->COUNTRY_UPDATE
15:00:02 hostapd:  Driver does not support configured HT capability 
[MAX-AMSDU-7935]
15:00:02 hostapd:  blue0: interface state COUNTRY_UPDATE->DISABLED
15:00:02 hostapd:  blue0: AP-DISABLED
15:00:02 hostapd:  blue0: Unable to setup interface.
15:00:02 hostapd:  blue0: interface state DISABLED->DISABLED
15:00:02 hostapd:  blue0: AP-DISABLED
15:00:02 hostapd:  blue0: CTRL-EVENT-TERMINATING
15:00:02 hostapd:  hostapd_free_hapd_data: Interface blue0 wasn't started
15:00:02 hostapd:  nl80211: deinit ifname=blue0 disabled_11b_rates=0
15:04:57 hostapd:  Line 27: invalid WPA passphrase length 1 (expected 8..63)
15:04:57 hostapd:  WPA-PSK enabled, but PSK or passphrase is not configured.
15:04:57 hostapd:  2 errors found in configuration file '/etc/hostapd.conf'
15:04:57 hostapd:  Failed to set up interface with /etc/hostapd.conf
15:04:58 hostapd:  Failed to initialize interface

The log also mentions that the driver for the wireless chip in the Prime unit 
doesn't support a configured HT capability.
I am presuming that that issue is the second error hostapd found in the 
configuration file.

I have also just noticed that the hostapd.conf file that was used in CU197 is 
still physically present in /var/ipfire/wlanap/ while the new version is in 
/etc. Probably should delete the version from the old location if it is being 
replaced by the new version.

Regards,

Adolf.







Reply via email to