Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
[SOLVED]: wpa_supplicant do not support TKIP cipher anymore
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
ONEEYEMAN
Advocate
Advocate


Joined: 01 Mar 2005
Posts: 3650

PostPosted: Sat Mar 30, 2024 4:35 pm    Post subject: [SOLVED]: wpa_supplicant do not support TKIP cipher anymore Reply with quote

H, ALL,
I updated my system, rebooted and now getting this:

Code:

invalid cipher: 'CCMP TKIP'
failed to parse paiwise 'CCMP TKIP'
invalid cipher: 'CCMP TKIP WEP104 WEP40'
failed to parse group 'CCMP TKIP WEP104 WEP40'


I checked the WiFi guide and the configuration file still references that.

Thank you


Last edited by ONEEYEMAN on Sat Mar 30, 2024 7:21 pm; edited 1 time in total
Back to top
View user's profile Send private message
NeddySeagoon
Administrator
Administrator


Joined: 05 Jul 2003
Posts: 54572
Location: 56N 3W

PostPosted: Sat Mar 30, 2024 4:50 pm    Post subject: Reply with quote

ONEEYEMAN,

It does if you ask nicely but the tkip cypher is broken and should not be used.
Switch your AP to use WPA2 or WPA3 instead.

If moving to WPA2/3 is not possible, rebuild wpa_supplicant with USE=tkip.
_________________
Regards,

NeddySeagoon

Computer users fall into two groups:-
those that do backups
those that have never had a hard drive fail.
Back to top
View user's profile Send private message
ONEEYEMAN
Advocate
Advocate


Joined: 01 Mar 2005
Posts: 3650

PostPosted: Sat Mar 30, 2024 5:29 pm    Post subject: Reply with quote

NeddySeagoon,
Can I try to remove it and try again?

My AP is using WPA2-PSK (AES). Just checked.

Thank you.
Back to top
View user's profile Send private message
NeddySeagoon
Administrator
Administrator


Joined: 05 Jul 2003
Posts: 54572
Location: 56N 3W

PostPosted: Sat Mar 30, 2024 5:59 pm    Post subject: Reply with quote

ONEEYEMAN,

WPA2-PSK is fine.
WPA/WPA2 mixed mode on your AP is not.
_________________
Regards,

NeddySeagoon

Computer users fall into two groups:-
those that do backups
those that have never had a hard drive fail.
Back to top
View user's profile Send private message
ONEEYEMAN
Advocate
Advocate


Joined: 01 Mar 2005
Posts: 3650

PostPosted: Sat Mar 30, 2024 6:06 pm    Post subject: Reply with quote

NeddySeagoon,
So I can just remove TKIP from configuration file?

Thank you.
Back to top
View user's profile Send private message
NeddySeagoon
Administrator
Administrator


Joined: 05 Jul 2003
Posts: 54572
Location: 56N 3W

PostPosted: Sat Mar 30, 2024 6:22 pm    Post subject: Reply with quote

ONEEYEMAN,

You need to specify some crypto in the configuration file.

If TKIP is in a section that you no longer use, remove the whole section.
You need something that says WPA2-PSK to work with your AP.
_________________
Regards,

NeddySeagoon

Computer users fall into two groups:-
those that do backups
those that have never had a hard drive fail.
Back to top
View user's profile Send private message
ONEEYEMAN
Advocate
Advocate


Joined: 01 Mar 2005
Posts: 3650

PostPosted: Sat Mar 30, 2024 6:56 pm    Post subject: Reply with quote

NeddySeagoon,
As written in here, this is what I have in my conf file;

Code:

# The below line not be changed otherwise wpa_supplicant refuses to work
ctrl_interface=/var/run/wpa_supplicant
 
# Ensure that only root can read the WPA configuration
ctrl_interface_group=0
 
# Let wpa_supplicant take care of scanning and AP selection
ap_scan=1
network = {
  ssid="example"
  proto=WPA
  key_mgmt=WPA-PSK
  pairwise=CCMP TKIP
  group=CCMP TKIP WEP104 WEP40
  psk=XXX
  priority=2
}:

Back to top
View user's profile Send private message
NeddySeagoon
Administrator
Administrator


Joined: 05 Jul 2003
Posts: 54572
Location: 56N 3W

PostPosted: Sat Mar 30, 2024 7:04 pm    Post subject: Reply with quote

ONEEYEMAN,

Yes, remove both TKIP and the WEP104 WEP40,
WEP is even more broken than TKIP
_________________
Regards,

NeddySeagoon

Computer users fall into two groups:-
those that do backups
those that have never had a hard drive fail.
Back to top
View user's profile Send private message
ONEEYEMAN
Advocate
Advocate


Joined: 01 Mar 2005
Posts: 3650

PostPosted: Sat Mar 30, 2024 7:05 pm    Post subject: Reply with quote

NeddySeagoon,
Which means someone needs to fix that page... ;-)

Thank you.
Back to top
View user's profile Send private message
NeddySeagoon
Administrator
Administrator


Joined: 05 Jul 2003
Posts: 54572
Location: 56N 3W

PostPosted: Sat Mar 30, 2024 7:17 pm    Post subject: Reply with quote

ONEEYEMAN,

You can be that someone, its a wiki. :)
If you are shy, start a discussion topic on the discussion page.

See also
_________________
Regards,

NeddySeagoon

Computer users fall into two groups:-
those that do backups
those that have never had a hard drive fail.
Back to top
View user's profile Send private message
flexibeast
Guru
Guru


Joined: 04 Apr 2022
Posts: 425
Location: Naarm/Melbourne, Australia

PostPosted: Sun Mar 31, 2024 8:06 am    Post subject: Reply with quote

NeddySeagoon wrote:
You can be that someone, its a wiki. :)

It's a Handbook page, though, so it's protected; i don't know if ONEEYEMAN has the required privileges, but i certainly don't, so i've started a new topic on the discussion page.
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum