netplan not support to establish a wireless WPA3 connection

Bug #2023238 reported by Laider Lai
18
This bug affects 3 people
Affects Status Importance Assigned to Milestone
Netplan
Fix Released
Medium
Danilo Egea Gondolfo
OEM Priority Project
Fix Released
Medium
Laider Lai
netplan.io (Ubuntu)
Fix Released
Undecided
Lukas Märdian
Jammy
Fix Released
Undecided
Unassigned
Kinetic
Won't Fix
Undecided
Unassigned
Lunar
Fix Released
Undecided
Unassigned
Mantic
Fix Released
Undecided
Lukas Märdian

Bug Description

Hi,

We found netplan failed to establish a wireless WPA3 connection.

[Steps to reproduce]
1. Boot into Ubuntu OS.
2. Modify the netplan configuration and apply it. ($ netplan --debug apply)

[Result]
Failed to establish a WPA3 connection to wireless router

[Failure rate]
100%

[Platform information]
system-manufacturer: Dell EMC
system-product-name: Edge Gateway 5200
bios-version: 1.08.10
CPU: Intel(R) Core(TM) i7-9700TE CPU @ 1.80GHz (8x)
kernel-version: 5.15.0-1028-intel-iotg
Wifi card: Wi-Fi 6 AX210
OS: 22.04.2 LTS

#netplan configuration
network:
  version: 2
  wifis:
    wlp6s0:
      access-points:
        xxx-ax-wpa3-test: {password: xxxxxxxx}
      addresses: []
      dhcp4: True
      nameservers: {}

#error console log from netplan
 no-carrier (configuring)
 no-carrier (configuring)
 no-carrier (configuring)
 no-carrier (configuring)
 no-carrier (configuring)
 no-carrier (configuring)
 no-carrier (configuring)
 no-carrier (configuring)
 no-carrier (configuring)
 no-carrier (configuring)
 no-carrier (configuring)
 no-carrier (configuring)
 no-carrier (configuring)
 no-carrier (configuring)
 no-carrier (configuring)
 no-carrier (configuring)
 no-carrier (configuring)
 no-carrier (configuring)
 no-carrier (configuring)
 no-carrier (configuring)
 no-carrier (configuring)
 no-carrier (configuring)
 no-carrier (configuring)
 no-carrier (configuring)
 no-carrier (configuring)
 no-carrier (configuring)
 no-carrier (configuring)
 no-carrier (configuring)
 no-carrier (configuring)
 no-carrier (configuring)
ERROR: did not reach routable state

#netplan journal log
...
May 24 08:17:35 ceqa-egw5200 systemd[1]: netplan-wpa-wlp6s0.service: Deactivated successfully.
May 24 08:17:35 ceqa-egw5200 systemd[1]: Stopped WPA supplicant for netplan wlp6s0.
May 24 08:17:35 ceqa-egw5200 systemd-networkd[950]: wlp6s0: Re-configuring with /run/systemd/network/10-netplan-wlp6s0.network
May 24 08:17:35 ceqa-egw5200 systemd-networkd[950]: wlp6s0: DHCPv6 lease lost
May 24 08:17:35 ceqa-egw5200 systemd-networkd[950]: wlp6s0: Re-configuring with /run/systemd/network/10-netplan-wlp6s0.network
May 24 08:17:35 ceqa-egw5200 systemd[1]: Condition check resulted in OpenVSwitch configuration for cleanup being skipped.
May 24 08:17:35 ceqa-egw5200 systemd-networkd[950]: wlp6s0: DHCPv6 lease lost
May 24 08:17:35 ceqa-egw5200 systemd[1]: Started WPA supplicant for netplan wlp6s0.
May 24 08:17:35 ceqa-egw5200 wpa_supplicant[8583]: Successfully initialized wpa_supplicant
<No SSID connection successfully information>
May 24 08:18:26 ceqa-egw5200 wpa_supplicant[8583]: p2p-dev-wlp6s0: CTRL-EVENT-DSCP-POLICY clear_all
...

Revision history for this message
Danilo Egea Gondolfo (danilogondolfo) wrote :

Hello, thank you for your bug report.

In fact Netplan is missing the authentication method required by the WPA3 protocol.

I've created a patch adding support for it. It's available here https://github.com/canonical/netplan/pull/369

Changed in netplan:
status: New → In Progress
importance: Undecided → Medium
Revision history for this message
Laider Lai (laiderlai) wrote :

Hi,

It's glad to know the progress and may support it in the near future. Tks.

Changed in oem-priority:
assignee: nobody → Laider Lai (laiderlai)
importance: Undecided → Medium
status: New → Confirmed
tags: added: fr-4612
Laider Lai (laiderlai)
tags: added: oem-priority originate-from-2020644
tags: added: foundations-todo
Changed in netplan:
status: In Progress → Triaged
Changed in netplan:
assignee: nobody → Danilo Egea Gondolfo (danilogondolfo)
Changed in netplan.io (Ubuntu):
status: New → Triaged
Changed in netplan:
status: Triaged → Fix Committed
Changed in netplan.io (Ubuntu):
status: Triaged → Fix Committed
tags: removed: foundations-todo
Revision history for this message
Lukas Märdian (slyon) wrote :

Laider,

may I ask you to test the WPA3 connectivity, using the Netplan 0.106.1 backport from this PPA (including the requested WPA3 patches)?

https://launchpad.net/~slyon/+archive/ubuntu/lp2023238-wpa3

If that works as expected, we can include the patches into the netplan.io package in Mantic and eventually get it SRUed back to Jammy.

Revision history for this message
Danilo Egea Gondolfo (danilogondolfo) wrote :

Note: you need to use "key-management: sae" as shown here https://github.com/canonical/netplan/blob/main/examples/wireless_wpa3.yaml

Revision history for this message
Laider Lai (laiderlai) wrote :

Hi Lukas / Danilo,

Thanks for your information. The test result is passed on the target platform.
If there are no other concerns, could you help to make WPA3 patches into the netplan.io package in Mantic and SRUed back to Jammy? Tks.

===verification log (sensitive information is replaced as <xxx>)===
ubuntu@ubuntu:~$ apt list --installed | grep netplan
...
libnetplan0/jammy,now 0.106.1-2~22.04.1~ppa0 amd64 [installed,automatic]
netplan.io/jammy,now 0.106.1-2~22.04.1~ppa0 amd64 [installed,automatic]

ubuntu@ubuntu:~$ cat /etc/netplan/00-wpa3-init.yaml
network:
  version: 2
  wifis:
    wlp1s0:
      access-points:
        <WPA3 SSID>:
          auth:
            key-management: sae
            password: <password>
      addresses: []
      dhcp4: True
      nameservers: {}

ubuntu@ubuntu:~$ iwconfig wlp1s0
wlp1s0 IEEE 802.11 ESSID:"<WPA3 SSID>"
          Mode:Managed Frequency:5.18 GHz Access Point: A2:C9:EB:F0:DD:88
          Bit Rate=866.7 Mb/s Tx-Power=22 dBm
          Retry short limit:7 RTS thr:off Fragment thr:off
          Encryption key:off
          Power Management:on
          Link Quality=53/70 Signal level=-57 dBm
          Rx invalid nwid:0 Rx invalid crypt:0 Rx invalid frag:0
          Tx excessive retries:0 Invalid misc:3 Missed beacon:0

ubuntu@ubuntu:~$ ip addr show dev wlp1s0
5: wlp1s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
    link/ether e0:d0:45:fe:0a:74 brd ff:ff:ff:ff:ff:ff
    inet 192.168.1.6/24 metric 600 brd 192.168.1.255 scope global dynamic wlp1s0
       valid_lft 1518sec preferred_lft 1518sec
    inet6 fe80::e2d0:45ff:fefe:a74/64 scope link
       valid_lft forever preferred_lft forever

Lukas Märdian (slyon)
Changed in netplan.io (Ubuntu Mantic):
status: Fix Committed → In Progress
assignee: nobody → Lukas Märdian (slyon)
Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in netplan.io (Ubuntu Jammy):
status: New → Confirmed
Changed in netplan.io (Ubuntu Kinetic):
status: New → Confirmed
Changed in netplan.io (Ubuntu Lunar):
status: New → Confirmed
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package netplan.io - 0.106.1-6

---------------
netplan.io (0.106.1-6) unstable; urgency=medium

  * Fix ethernets,vlans,scenarios autopkgtests on systemd 254, Closes: #1041311

 -- Lukas Märdian <email address hidden> Tue, 18 Jul 2023 17:35:49 +0200

Changed in netplan.io (Ubuntu Mantic):
status: In Progress → Fix Released
Lukas Märdian (slyon)
Changed in netplan.io (Ubuntu Kinetic):
status: Confirmed → Won't Fix
Revision history for this message
Laider Lai (laiderlai) wrote :

Confirmed the 0.106.1-7ubuntu0.22.04.2 is published under jammy-updates.
Confirmed this version includes the WPA3 support.

Changed in oem-priority:
status: Confirmed → Fix Released
Revision history for this message
Lukas Märdian (slyon) wrote :

Fixed as part of the 0.106.1 backport in Jammy and Lunar (LP: #2025519)

Changed in netplan.io (Ubuntu Jammy):
status: Confirmed → Fix Released
Changed in netplan.io (Ubuntu Lunar):
status: Confirmed → Fix Released
Lukas Märdian (slyon)
Changed in netplan:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.