Wi-Fi upmerge for 2.8.0 #2142

For add_interface(), only add STA interface when hostapd enabled, and the Soft-AP interface will be added in zephyr_hostapd_init(). Signed-off-by: Maochen Wang <[email protected]> (cherry picked from commit e2f671e)

wpas_key_mgmt_to_zephyr doesn't support eap secure mode, add code to support eap secure mode. Signed-off-by: Gaofeng Zhang <[email protected]> (cherry picked from commit 94386e1)

Implement AP configuration parameter operations. Signed-off-by: Gang Li <[email protected]> (cherry picked from commit 4bfdb64)

The security check case statements were in frequency band setting checks. This is totally wrong and will cause compiler warnings. Moving the checks to correct function. Signed-off-by: Jukka Rissanen <[email protected]> (cherry picked from commit 2f47de6)

Supp api add reg domain support. Signed-off-by: Rex Chen <[email protected]> (cherry picked from commit 5a19500)

The previous NET_EVENT_SUPPLICANT_CMD_INT_EVENT is from "enum net_event_supplicant_cmd" but the supplicant_send_wifi_mgmt_event() has the event parameter as an "enum net_event_wifi_cmd" and those event number spaces are different. This meant that the wrong event value NET_EVENT_SUPPLICANT_CMD_INT_EVENT maps to NET_EVENT_WIFI_CMD_TWT (from "enum net_event_wifi_cmd") which fortunately did not cause issue in this case because the supplicant_send_wifi_mgmt_event() has no handling for this TWT event value. It is important we fix this as this can cause great confusion in the future. Signed-off-by: Jukka Rissanen <[email protected]> (cherry picked from commit 4b83b23)

Add crypto module test kconfig option CONFIG_WIFI_NM_WPA_SUPPLICANT_CRYPTO_TEST, which is default n and hidden. It is only available by developer for crypto module test. Signed-off-by: Fengming Ye <[email protected]> (cherry picked from commit e40eef2)

This was we can modify it in a single place that works both for native and OS specific code. Signed-off-by: Chaitanya Tata <[email protected]> (cherry picked from commit bcef9ac)

Now that hostap is used k_heap, it needs to reserve the kernel heap not libc heap. Fixes #79477. Signed-off-by: Chaitanya Tata <[email protected]> (cherry picked from commit 3ade4be)

…P mode The default should honor the build time flag. Signed-off-by: Chaitanya Tata <[email protected]> (cherry picked from commit b2c6f6c)

Instead of hard-coded value, use the build time flag. Signed-off-by: Chaitanya Tata <[email protected]> (cherry picked from commit 9704284)

The format of wpa_passphrase and sae_password is wrong when start the SAP, which leads the invaild MIC check error when other STA try to connect in security mode. Change the wrong format can fix this issue. Signed-off-by: Maochen Wang <[email protected]> (cherry picked from commit 838ff13)

Add WPA-Auto-Personal support for AP and STA. This mode uses WPA2/WPA3 SAE mixed security with PSK. Signed-off-by: Gang Li <[email protected]> (cherry picked from commit 79222c9)

Enabling all EAP types for enterprise mode increases memory usage in both ROM and RAM. Provide config options for each type to let solutions choose the methods based on their requirements. Signed-off-by: Ravi Dondaputi <[email protected]> (cherry picked from commit 609520b)

EAP-FAST has extra requirements (TLS 1.3, session tickets etc) and is seldom used, so, remove it from Enterprise list and add a separate Kconfig option. This solves the build error when Enterprise mode is enabled. Signed-off-by: Chaitanya Tata <[email protected]> (cherry picked from commit 39b904d)

Enterprise security doesn't have either SAE or PSK, so, using a blanker else throws a false warning. Fix the checks to proper handler enterprise mode. Signed-off-by: Chaitanya Tata <[email protected]> (cherry picked from commit 48916d6)

When try to start SAP on channel 12 with region code US, the channel check will fail and calls supplicant_send_wifi_mgmt_ap_status() with iface->owner is NULL, which causes DUT hang. Set iface->owner when enable the SAP can fix this issue. Signed-off-by: Maochen Wang <[email protected]> (cherry picked from commit a259900)

Random MAC address setting can never be configured as the two defaults cover all cases. Fix the defaults, now the order is * Fixed * OTP (default, in case of no config) * Random Signed-off-by: Chaitanya Tata <[email protected]> (cherry picked from commit 80db01f)

Update hostap revision to get supplicant event numbers correctly. Signed-off-by: Jukka Rissanen <[email protected]> (cherry picked from commit d59bb2f)

Update hostap revision to get crypto module test. Signed-off-by: Fengming Ye <[email protected]> (cherry picked from commit 20e81f7)

Pull fixes that are in NCS but missed in upstream. Signed-off-by: Chaitanya Tata <[email protected]> (cherry picked from commit 5c9c95b)

The event is sent from both WPA supplicant and hostapd, but hostapd should only be sent when using hostapd to create the AP. Signed-off-by: Chaitanya Tata <[email protected]> (cherry picked from commit edb4744)

…ervice Service for powering peripherals that use GPIO pins in the global power domains: - Active Fast - Active Slow - Main Slow Signed-off-by: Rafal Dyla <[email protected]> (cherry picked from commit ec77fc3)

… tx mode Updated hal_nordic revision contains changes for offloaded raw tx mode. Signed-off-by: Kapil Bhatt <[email protected]> (cherry picked from commit 56a5ac5)

Fix build error of undefined reference to 'inet_aton' in hostap/src/utils/ip_addr.c Signed-off-by: Maochen Wang <[email protected]> (cherry picked from commit 244958c)

Create separate offloaded raw tx mode which will work as stand-alone compile-time mode. Signed-off-by: Kapil Bhatt <[email protected]> (cherry picked from commit 5c3cc37)

Add wrapper APIs for the offloaded raw TX feature supported by nRF70 devices. Signed-off-by: Kapil Bhatt <[email protected]> (cherry picked from commit 28b7494)

…RF70 FW file" This reverts commit fe2288d. Signed-off-by: Chaitanya Tata <[email protected]>

…nges Whenever FW blobs are updated manually, we need to tell cmake to auto-build the source files to use the latest firmware without doing a pristine build. This adds a custom target to be run with nRF Wi-Fi driver and updates timestamp of fw_load.c to rebuild whenevr the blob is updated. Signed-off-by: Chaitanya Tata <[email protected]> (cherry picked from commit e2e96ac)

… are changes" This reverts commit e2e96ac. This will be properly fixes by adding a target for nRF70.bin and removing INCBIN approach. Signed-off-by: Chaitanya Tata <[email protected]> (cherry picked from commit 7f9be54)

…file Instead of relying on INCBIN macros which do not properly add dependencies, e.g., modifying FW file doesn't trigger rebuild. Use the Zephyr cmake tooling to load the FW patch file as a header. This also improves memory report where the patch target is clearly visible instead of a hidden section. Signed-off-by: Chaitanya Tata <[email protected]> (cherry picked from commit b40cb4c)

During watchdog (or any) interrupt processing, RPU accesses are being made and they assert the wakeup_now flag this causes RPU recovery to not trigger. New false or true recovery detection algo: Check the time difference b/w last de-assert and assert, and if it exceeds minimum time needed for RPU to enter sleep, then not the timestamp. This timestamp will be used to compare when a watchdog interrupt is received and see if during the last window if host has given a chance for RPU to attempt sleep, if yes, then attempt recovery else ignore watchdog. Also, add a Kconfig for the 10s active time that triggers recovery, this needs to be passed to the FW (once we have enough patch memory). Also, add a Kconfig for the minimum time needed for RPU to attempt sleep in positive case. Also, add a new _ms API for time stamp fetch, this is to avoid precision loss when converting to and from ms to us and also makes code readable by avoiding *1000 and /1000. Signed-off-by: Chaitanya Tata <[email protected]> (cherry picked from commit 5ad7339)

In case RPU is stuck and need a recovery, the failures in interface down should be ignored as they are expected and we should proceed with device removal that in turn removes power to the RPU. TODO: This works for single VIF, but needs more thought for multi-VIF. Signed-off-by: Chaitanya Tata <[email protected]> (cherry picked from commit 04ddd6d)

Before proceeding with RPU bringup, do a sanity check by reading a known signature to make sure the Host-RPU comms are operational. Signed-off-by: Chaitanya Tata <[email protected]> (cherry picked from commit a23184c)

… recovery These are helpful for debugging RPU recovery only. Signed-off-by: Chaitanya Tata <[email protected]> (cherry picked from commit 1e5db78)

In order for the interface down to propagate and cleanup it needs more time, using Shell 10ms was working due to human delay, but programatically this needs higher delay. Signed-off-by: Chaitanya Tata <[email protected]> (cherry picked from commit c1afe97)

During recovery we might get further watchdog interrupts causing multiple recovery requests, ignore them if a recovery is already in progress. Signed-off-by: Chaitanya Tata <[email protected]> (cherry picked from commit ce521b8)

This is to avoid successive recoveries in case we get successive watchdog interrupts from the RPU. Signed-off-by: Chaitanya Tata <[email protected]> (cherry picked from commit ed7c10e)

Check for RPU context as well. To fix this properly we need more fixes to be backported, but this should suffice for now. Signed-off-by: Chaitanya Tata <[email protected]> (cherry picked from commit 6f7fbf8)

In case RPU is stuck in consecutive recovery over a time period then that means it's not recoverable through RPU recovery, only thing left to do is to trigger a system reboot. This feature is disabled by default, so, either application can do their own implementatio or enable this feature in the driver along with configurable retries and window period. Signed-off-by: Chaitanya Tata <[email protected]> (cherry picked from commit 9b10569)

Fix RPU recovery protection to solve build failures when RPU recovery is disabled. As recovery is primarily based on power-management, add a Kconfig dependency to enforce, this simplies the macros to protect the code. Signed-off-by: Chaitanya Tata <[email protected]> (cherry picked from commit 5c8f180)

During interface down in case TX has pending buffers in either TXQ or Pending_Q then they are not freed instead the Q itself is freed. Fix by traversing the Q and freeing all members. Signed-off-by: Chaitanya Tata <[email protected]> (cherry picked from commit 9c36d97)

These are very frequent, so, a separate debug is added for debugging host RPU recovery logic. Signed-off-by: Chaitanya Tata <[email protected]> (cherry picked from commit a4537a7)

With this offload, host doesn't need to manage RX buffers for management frames, and this saves Host-RPU comms and thus giving RPU to sleep more often and is essential to test RPU recovery. Signed-off-by: Chaitanya Tata <[email protected]> (cherry picked from commit dbda09d)

…rval In crowded environments RPU is active for more than 10s due to too many retries and this triggers a false RPU recovery. To avoid this, increase the default to 50s to handle corner cases, as this will only impact the recovery triggered case, higher timeout doesn't have any impact in normal cases. Signed-off-by: Chaitanya Tata <[email protected]> (cherry picked from commit 94f9fb9)

To handle interoperability issue with few APs, add a feature to keep sending keepalive frames periodically to avoid AP disconnecting the STA. This is disabled by default to avoid unnecessary power consumption as it's only seen with few old APs. Signed-off-by: Chaitanya Tata <[email protected]> (cherry picked from commit 7c3d342)

Add a null check for HAL context in the interrupt handler, this was causing locking issue operating on null. The root cause of null is not known, but this solves the locking issue when data and control paths are excited in parallel. Signed-off-by: Chaitanya Tata <[email protected]> (cherry picked from commit 5f6dca3)

Ideally we should be using Zephyr spinlock APIs but that requires changes to shim API, so, for this maintenance release just replace with mutex to keep the context same and no API changes. This solves the locking issue that we see when control and data path are excited concurrently due to locking semantics of semaphores, the issue is not root caused but mutex enforce strict locking semantics for multiple threads and solve the issue. Signed-off-by: Chaitanya Tata <[email protected]> (cherry picked from commit d0d659b)

Dynamically set power save exit strategy runtime configuration that allows to switch b/w stratgies depending on conserving power and low-latency traffic download. Signed-off-by: Ajay Parida <[email protected]> (cherry picked from commit fe920fc)

There is a race condition when recovery is in progress and in parallel Wi-Fi util commands are being executed (CTF), where the RPU context is de-initialized as part of recovery but no checks are present in the Wi-Fi util command processing causing a crash. This needs a proper fix for all commands, but for maintenance branch fix is added only for commonly used commands. Signed-off-by: Chaitanya Tata <[email protected]> (cherry picked from commit 67216f1)

The RPU context lock is not unlocked this is causing recovery to be stuck waiting for the lock. Signed-off-by: Chaitanya Tata <[email protected]> (cherry picked from commit ce9d71c)

The mutex is used to protect RPU zephyr context which gets modified for every interface down and up (including recovery), so, it was being re-initialized but also used to protect down and up which is a bug. Move the re-initialization to the driver entry so that it happens only once and we can properly use the mutext for down and up protection. Signed-off-by: Chaitanya Tata <[email protected]> (cherry picked from commit d30161c)

If AP indicates the presence of buffered traffic, then it is up to the STA to decide whether to stay in PS or come out of PS, add configuration options that can be used at runtime to choose this. This is tagged as "noup" because it's a backport and "fromlist" cannot be used as it won't apply cleanly. Signed-off-by: Ajay Parida <[email protected]> (cherry picked from commit 0ce5da6)

This path is disabled by default. Signed-off-by: Chaitanya Tata <[email protected]> (cherry picked from commit cd73655)

…d builds" This reverts commit fe339b1. Signed-off-by: Chaitanya Tata <[email protected]>

This ensures we catch basic issues in nRF70 util, which is handy in debugging. Signed-off-by: Chaitanya Tata <[email protected]> (cherry picked from commit c08b846)

This crept-in due to bad merge conflict resolution. Signed-off-by: Chaitanya Tata <[email protected]> (cherry picked from commit 9eedb6d)

Fix DPP build error when HOSTAPD enabled and DPP disabled. Guard hapd_dpp_dispatch in both CONFIG_WIFI_NM_WPA_SUPPLICANT_DPP and CONFIG_WIFI_NM_HOSTAPD_AP. Signed-off-by: Fengming Ye <[email protected]> (cherry picked from commit 9e8b7bd)

EAP-TLS enumeration is now changed due to recent SAE additions. Signed-off-by: Chaitanya Tata <[email protected]> (cherry picked from commit 6cac954)

Now, Enterprise mode has a separate overlay. Signed-off-by: Chaitanya Tata <[email protected]> (cherry picked from commit b643070)

…ert files enable time checking for mbedtls certificate files, return failed if certificate files expired. Signed-off-by: Rex Chen <[email protected]> (cherry picked from commit 6551e40)

This overlay has all necessary configuration needed for Enterprise mode. Two variants are given, once with fixed size network buffers and other with variable size network buffers (still experimental). Signed-off-by: Chaitanya Tata <[email protected]> (cherry picked from commit d107b04)

Ensure that the output certificates directory is created, where generated certificates will be placed. This fixes a build error seen when using `make` to build samples/net/wifi for the rd_rw612_bga board, where the output directory for generated certificates did not exist at build time. Signed-off-by: Daniel DeGrasse <[email protected]> (cherry picked from commit bc8cb0b)

…_ap_auth_init` The `cmd_wifi_dpp_ap_auth_init` function was added but is not yet aligned with others. This update enhances consistency with the following changes: - Unified the order of declaration for `opt`, `opt_index`, `state`, and `long_options`. - Wrapped lines in the `long_options` declaration to prevent them from extending too far to the right. - Applied `struct option` as `static const` - Unified the wrapping of `getopt_long` calls, regardless of the length of the `options` string. - Using `getopt_state` to access `optarg` and also `optopt` offers a better alternative to direct global access. Signed-off-by: Pisit Sawangvonganan <[email protected]> (cherry picked from commit 7d19539)

This reverts commit 330eb81. Signed-off-by: Chaitanya Tata <[email protected]>

In case WPA supplicant disabled DPP, we need to compile out the corresponding DPP code in Wi-Fi shell too. Signed-off-by: Chaitanya Tata <[email protected]> (cherry picked from commit 1da74ef)

The parse_number() did not print newline after error or warning message. Signed-off-by: Jukka Rissanen <[email protected]> (cherry picked from commit 8105f70)

The 11v_btm_query shell command was calling parse_number() using a pointer to uint8_t. This will cause memory overwrite and possible crash. Convert to use long temporary value to avoid this. Fix also the output prints in case of an error. Signed-off-by: Jukka Rissanen <[email protected]> (cherry picked from commit c6aa9e3)

MbedTLS specifically checks for null-terminator, else it skips PEM format processing and tries to parse it as DER causing parsing failures. Signed-off-by: Chaitanya Tata <[email protected]> (cherry picked from commit 4c5a72f)

Should support setting band for both STA and SAP mode. Signed-off-by: Maochen Wang <[email protected]> (cherry picked from commit 4af697a)

In "connect" all networks are removed and new network is always added, but in disconnect the network isn't deleted, so, the memory is unnecessarily held till next connect. This is not exactly a leak, but if someone profiles using "kernel heap" then this can be construed as a leak. Fix this by removing network during the disconnection (for now "all") so that the memory can be used by someone else. Signed-off-by: Chaitanya Tata <[email protected]> (cherry picked from commit be65de0)

Fixes WPA3 connection regression. Signed-off-by: Chaitanya Tata <[email protected]> (cherry picked from commit 734fc58)

…atch Update hal_nordic manifest to include lpcomp-int-dis-on-stop patch Signed-off-by: Bjarki Arge Andreasen <[email protected]> (cherry picked from commit 0f6a35c)

…river This pulls in changes to support promiscuous mode filtering in driver. Signed-off-by: Vivekananda Uppunda <[email protected]> (cherry picked from commit 2f23313)

…port in driver This set of changes brings in promiscuous mode filtering support in driver. Since, firmware would be unable to filter packets due to connection issues, the filtering support for promiscuous mode is moved to the driver. Signed-off-by: Vivekananda Uppunda <[email protected]> (cherry picked from commit c9b56de)

…unctions This adds promiscuous mode support functions into build for filter operation when the configuration CONFIG_NRF70_PROMISC_DATA_RX is enabled. Signed-off-by: Vivekananda Uppunda <[email protected]> (cherry picked from commit da0c30d)

This log helps in identifing if the event is solicited or not. Signed-off-by: Chaitanya Tata <[email protected]> (cherry picked from commit f333e1f)

…cited reg event This flag can be used to drop unsolicited regulatory event as it's not supported. Signed-off-by: Chaitanya Tata <[email protected]> (cherry picked from commit 0baff42)

During Wi-Fi connection UMAC sends an unsolicited regulatory change event but the driver code always assumes that this event is solicited hence doesn't free the memory for the event. Fix this by dropping the unsolicited event as it's not supported yet. Fixes #79733. Signed-off-by: Chaitanya Tata <[email protected]> (cherry picked from commit ea7d3be)

Fix couple of bugs in exit path: - In case of calloc failure, return's without unlocking - memory is freed outside lock, in case of a tiny window of race, this can cause a crash when this function is called from two threads. Signed-off-by: Chaitanya Tata <[email protected]> (cherry picked from commit a21648d)

Opriv was removed but the doxygen doc string was left. Signed-off-by: Chaitanya Tata <[email protected]> (cherry picked from commit 9a9f899)

Update kconfig choice name to enable overriding from other parts of the code. Upstream PR: zephyrproject-rtos/zephyr#78852 Signed-off-by: Triveni Danda <[email protected]>

…urations Add variable network configuration control into the driver to optimize RAM usage by default. The pool sizes are default, and tuning is left to the applications or samples. Upstream PR: zephyrproject-rtos/zephyr#78852 Signed-off-by: Triveni Danda <[email protected]>

The nrf7000, nrf7001 and nrf7002 expose a coex hardware interface which is independent from the wifi/control interface (spi and control pins) These interfaces where previously combined into a single model. This is incompatible with the actual usage of the interfaces where one core may interact only with the coex interface, and another with the wifi/control interface. This commit moves the coex interface, commonly described in "nordic,nrf70-coex.yaml", out of the wifi/control models "nrf700<variant>-<bus>.yaml" to its own models "nrf700<variant>-coex.yaml" Upstream PR: zephyrproject-rtos/zephyr#79606 Signed-off-by: Bjarki Arge Andreasen <[email protected]>

…terface Remove the unused coex interface from the cpuapp of the nrf7002dk nrf5340 SoC. Upstream PR: zephyrproject-rtos/zephyr#79606 Signed-off-by: Bjarki Arge Andreasen <[email protected]>

…nterface Exclude the coex interface if the coex variant of the nrf7002eb is selected instead of adding the interface alongside the wifi/control interface. Upstream PR: zephyrproject-rtos/zephyr#79606 Signed-off-by: Bjarki Arge Andreasen <[email protected]>

…nterface Add variant for the coex interface and move the coex interface out if the wifi/control interface variants. Upstream PR: zephyrproject-rtos/zephyr#79606 Signed-off-by: Bjarki Arge Andreasen <[email protected]>

Add kconfig option for forced passive scan, It will use for only scan only mode. Signed-off-by: Kapil Bhatt <[email protected]> (cherry picked from commit 0b11b39)

Though nRF7000 is a special Scan only chipset, scan only can work with any nRF70 platforms, no need for this enforcement and we can keep things flexible. Signed-off-by: Chaitanya Tata <[email protected]> (cherry picked from commit f7ef64d)

Add changes for offloaded raw tx regulatory domain. Signed-off-by: Kapil Bhatt <[email protected]> (cherry picked from commit 7161a7a)

…main Update update hal_nordic revision for regularity domain changes. Set regularity domain in umac command init. Signed-off-by: Kapil Bhatt <[email protected]> (cherry picked from commit b8c18f5)

Fix DPP build error when HOSTAPD enabled and DPP disabled. Guard hapd_dpp_dispatch in both CONFIG_WIFI_NM_WPA_SUPPLICANT_DPP and CONFIG_WIFI_NM_HOSTAPD_AP. Signed-off-by: Fengming Ye <[email protected]> (cherry picked from commit 9e8b7bd)

Add wps pin and wps pbc L2 layer cmd support. Signed-off-by: Rex Chen <[email protected]> (cherry picked from commit 82ec1d7)

Fix build error in DPP struct when building Matter over Wi-Fi. The struct declaration must be done outside of the anonymous union. Only struct definition can be done inside the anonymous union. Signed-off-by: Maochen Wang <[email protected]> (cherry picked from commit 9487952)

add ap status in l2 wifi Signed-off-by: Gaofeng Zhang <[email protected]> (cherry picked from commit 0c54a3f)

Rework the wifi-shell code so that external subcommands can be bolted into it easily. This means that the commands should be created using SHELL_SUBCMD_ADD(). Place the various subcommands in alphabetical order to find them more easily. Split long lines in order to pass CI checks. Signed-off-by: Jukka Rissanen <[email protected]> (cherry picked from commit 32aa1d6)

Add EAP-TLS, EAP-PEAP-MSCHAPv2, EAP-PEAP-GTC, EAP-TTLS-MSCHAPv2, EAP-PEAP-TLS, EAP-TLS-SHA256 enterprise wpa2 and wpa3 suiteb support for station. Signed-off-by: Rex Chen <[email protected]> (cherry picked from commit be15190)

…ed twice The CONFIG_IEEE8021X_EAPOL was in the Kconfig file twice so remove the extra entry. Signed-off-by: Jukka Rissanen <[email protected]> (cherry picked from commit 5c5f3b0)

The supplicant_ap_status() is only available if CONFIG_WIFI_NM_HOSTAPD_AP is enabled. Signed-off-by: Jukka Rissanen <[email protected]> (cherry picked from commit 18275f8)

The functions in ip-addr.c are needed in more places than just for hostapd so add it unconditionally to the build. Signed-off-by: Jukka Rissanen <[email protected]> (cherry picked from commit 0edb64d)

The P2P support needs EAPOL support in order to avoid a compilation error about missing eap field in wpa_ssid struct. modules/lib/hostap/wpa_supplicant/wpa_supplicant.c:5102:65: error: ‘struct wpa_ssid’ has no member named ‘eap’ 5102 | eap_is_wps_pin_enrollee(&wpa_s->current_ssid->eap)) { Signed-off-by: Jukka Rissanen <[email protected]> (cherry picked from commit 6827ec0)

…is enabled The code was missing ")" when checking crypto support. Signed-off-by: Jukka Rissanen <[email protected]> (cherry picked from commit 33bc6f0)

Without this there is an error modules/lib/hostap/src/crypto/fips_prf_internal.c:47: \ undefined reference to `SHA1Transform' Signed-off-by: Jukka Rissanen <[email protected]> (cherry picked from commit e9ec7a2)

If CONFIG_WIFI_NM_WPA_SUPPLICANT_CRYPTO_NONE is enabled, there are lot of missing functions reported during linking. Add missing C files to the compilation to fix this. Signed-off-by: Jukka Rissanen <[email protected]> (cherry picked from commit 980a352)

Both the supplicant_set_btwt() and supplicant_ap_bandwidth() are not found in Zephyr sources so remove them. Signed-off-by: Jukka Rissanen <[email protected]> (cherry picked from commit 6ac4e9c)

The "enum wpa_msg_type" was not found by default so add needed include files to get the definitions. modules/hostap/src/supp_main.h:61:57: warning: ‘enum wpa_msg_type’ declared inside parameter list will not be visible outside of this definition or declaration 61 | void wpa_supplicant_msg_send(void *ctx, int level, enum wpa_msg_type type, const char *txt, Signed-off-by: Jukka Rissanen <[email protected]> (cherry picked from commit c9b8365)

Even if the enum contains the same values, the values might change if the wpa_supplicant sources change or Zephyr values change. In order to avoid weird errors later and prevent the following warning, add a conversion functions for the enums. modules/hostap/src/supp_api.c:1172:23: warning: implicit conversion from enumeration type 'enum mfp_options' to different enumeration type 'enum wifi_mfp_options' [-Wenum-conversion] status->mfp = ssid->ieee80211w; /* Same mapping */ modules/hostap/src/supp_api.c:1190:30: warning: implicit conversion from enumeration type 'enum wpas_mode' to different enumeration type 'enum wifi_iface_mode' [-Wenum-conversion] status->iface_mode = ssid->mode; Signed-off-by: Jukka Rissanen <[email protected]> (cherry picked from commit ec21dab)

…mbinations Try to compile test wifi with various configuration combinations. This is trying to catch simple compilation issues in the PRs. Signed-off-by: Jukka Rissanen <[email protected]> (cherry picked from commit 3f8828d)

This is related to work on #79973 which creates build tests for hostap with different configurations. Signed-off-by: Jukka Rissanen <[email protected]> (cherry picked from commit 3cf8b09)

…imeout WPA control interface timeout is hardcoded to 10s, add a configuration option to remove the hardcode, this is needed sometimes as a workaround e.g., crypto taking too long to complete the request. Work around for #79834, increase the default from 10 to 15s, in positive case this will have no impact. Signed-off-by: Chaitanya Tata <[email protected]> (cherry picked from commit 78f5821)

Execute certificate headers creation rules only if Wi-Fi Enterprise mode is enabled. Upstream PR: zephyrproject-rtos/zephyr#80212 Signed-off-by: Ravi Dondaputi <[email protected]>

Few build errors due to bugs in previous commits. Signed-off-by: Chaitanya Tata <[email protected]> (cherry picked from commit f6b60bd)

The defines should explicitly be passed to nordic HAL as they dont' use the CONFIG_ prefix. Signed-off-by: Chaitanya Tata <[email protected]> (cherry picked from commit 3098c48)

Missed adding CONFIG_ to the configuration option. Signed-off-by: Chaitanya Tata <[email protected]> (cherry picked from commit f840f66)

When debug is disabled, seeing a build error for unused variable. Upstream PR: zephyrproject-rtos/zephyr#80315 Signed-off-by: Chaitanya Tata <[email protected]>

Support Wi-Fi enterprise mode with NRF_SECURITY. Signed-off-by: Ravi Dondaputi <[email protected]>

Enable wifi sample to connect in EAP-TLS mode. Create sample certificates. Signed-off-by: Ravi Dondaputi <[email protected]>

This brings in PSA Kconfig and CMakelist.txt changes to NCS. Currently, it contains known PSA configurations and source files that are needed or will be needed in the future. WPA3 and Enterprise is currently disabled with this setting. Signed-off-by: Vivekananda Uppunda <[email protected]> Signed-off-by: Chaitanya Tata <[email protected]>

Make sure Wi-Fi driver is enabled when sysbuild is used. For shields we cannot automate this, as sysbuild doesn't recognize shields, so, Wi-Fi has to be explicitly enabled, this is done for twister. Signed-off-by: Chaitanya Tata <[email protected]>

Build throw macro redefined error as it's already defined by the nRF security module. Signed-off-by: Chaitanya Tata <[email protected]>

The file has been removed upstream, but as upstream doesn't have NS support, this need to be fixed explicitly. Upstream PR: zephyrproject-rtos/zephyr#79606 Signed-off-by: Chaitanya Tata <[email protected]>

NS builds need to use PSA for entropy same as 54L. Signed-off-by: Chaitanya Tata <[email protected]>

Upstream certificates are RSA3K + Suite-B, they are not support yet on nRF boards, so, generate a new certificate for both phase1 and phase2 and use them. Signed-off-by: Chaitanya Tata <[email protected]> Signed-off-by: Ravi Dondaputi <[email protected]>

For 54H Legacy mode is broken, so, enable PSA at the cost of supporting WPA2 only. Signed-off-by: Chaitanya Tata <[email protected]>

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Wi-Fi upmerge for 2.8.0 #2142

Wi-Fi upmerge for 2.8.0 #2142

Commits on Oct 24, 2024