Pleese clarify how to force WPA2 /WPA3 wifi modes in manpage

Bug #2041723 reported by Josef Wolf
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
netplan
New
Undecided
Unassigned

Bug Description

netplan(5) manpage states:

   Authentication
       [ ... ]
       auth (mapping)
              Specifies authentication settings for a device of type ether‐
              nets:, or an access-points: entry on a wifis: device.

              The auth block supports the following properties:

              key-management (scalar)
                     The supported key management modes are none (no key man‐
                     agement); psk (WPA with pre-shared key, common for home
                     wifi); eap (WPA with EAP, common for enterprise wifi);
                     and 802.1x (used primarily for wired Ethernet connec‐
                     tions).

              password (scalar)
                     The password string for EAP, or the pre-shared key for
                     WPA-PSK.

This section talks only about WPA (not WPA2).

   Properties for device type wifis:
       [ ... ]
       access-points (mapping)
              [ ... ]
              password (scalar)
                     Enable WPA2 authentication and set the passphrase for it.
                     If neither this nor an auth block are given, the network
                     is assumed to be open. The setting

                              password: "S3kr1t"

                     is equivalent to

                              auth:
                                key-management: psk
                                password: "S3kr1t"

This section talks about WPA2, but it is not clear that falling back to WPA (which also supports PSK) is prohibited.

So it is not clear at all how to enforce WPA2 and forbid falling back to the less secure WPA.

It is also not clear how to enforce WPA3 and forbid falling back to WPA2 and/or WPA.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.