luci-mod-network: Cipher option is not required for WPA3 Enterprise security mode
Cipher option is not required for WPA3 Enterprise security mode, as Openwrt only supports CCMP cipher for wpa3.
Steps to reproduce:
Actual behavior:
These options for Cipher is not required and it can default to CCMP
Expected behavior:
if encryption is wpa3, default cipher to CCMP
https://github.com/openwrt/luci/pull/6963
I agree with this observation, but there may be newer ciphers in the future which could appear there. So the choice field should remain.
It should be AES and AES192, certainly no TKIP. https://www.wi-fi.org/system/files/Wi-Fi_Alliance_Technical_Note_TKIP_v1.0.pdf
I confirm no TKIP for WPA3:
- WPA3 Personal -> Simultaneous Authentication of Equals (SAE) with forward secrecy (FS/PFS) -> GCMP - AES
- WPA3 Enterprise -> 802.1X/EAP -> GCMP - AES
It must be solved.
Cipher option is not required for WPA3 Enterprise security mode, as Openwrt only supports CCMP cipher for wpa3.
Steps to reproduce:
Actual behavior:
These options for Cipher is not required and it can default to CCMP
Expected behavior:
if encryption is wpa3, default cipher to CCMP
Note: The table is from here https://openwrt.org/docs/guide-user/network/wifi/basic#encryption_modes