From 549a876004b3b77f0bc9c656d6a7a441ef8ea131 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Joel=20Wir=C4=81mu=20Pauling?= Date: Wed, 11 Mar 2026 13:50:27 +1300 Subject: [PATCH] linux: enable PKCS8 private key parser for WPA3/SAE on all targets MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Enable CONFIG_PKCS8_PRIVATE_KEY_PARSER=y on all 10 device targets. iwd requires the PKCS8 parser to read modern certificate and key formats during WPA3 SAE authentication — its absence causes Status 77 rejections. --- projects/ROCKNIX/devices/H700/linux/linux.aarch64.conf | 2 +- projects/ROCKNIX/devices/RK3326/linux/linux.aarch64.conf | 2 +- projects/ROCKNIX/devices/RK3399/linux/linux.aarch64.conf | 2 +- projects/ROCKNIX/devices/RK3566/linux/linux.aarch64.conf | 2 +- projects/ROCKNIX/devices/RK3588/linux/linux.aarch64.conf | 2 +- projects/ROCKNIX/devices/S922X/linux/linux.aarch64.conf | 2 +- projects/ROCKNIX/devices/SDM845/linux/linux.aarch64.conf | 2 +- projects/ROCKNIX/devices/SM8250/linux/linux.aarch64.conf | 2 +- projects/ROCKNIX/devices/SM8550/linux/linux.aarch64.conf | 2 +- projects/ROCKNIX/devices/SM8650/linux/linux.aarch64.conf | 2 +- 10 files changed, 10 insertions(+), 10 deletions(-) diff --git a/projects/ROCKNIX/devices/H700/linux/linux.aarch64.conf b/projects/ROCKNIX/devices/H700/linux/linux.aarch64.conf index 91f7467849..4a53c57351 100644 --- a/projects/ROCKNIX/devices/H700/linux/linux.aarch64.conf +++ b/projects/ROCKNIX/devices/H700/linux/linux.aarch64.conf @@ -7616,7 +7616,7 @@ CONFIG_CRYPTO_DEV_CCREE=y CONFIG_ASYMMETRIC_KEY_TYPE=y CONFIG_ASYMMETRIC_PUBLIC_KEY_SUBTYPE=y CONFIG_X509_CERTIFICATE_PARSER=y -# CONFIG_PKCS8_PRIVATE_KEY_PARSER is not set +CONFIG_PKCS8_PRIVATE_KEY_PARSER=y CONFIG_PKCS7_MESSAGE_PARSER=y # CONFIG_PKCS7_TEST_KEY is not set # CONFIG_SIGNED_PE_FILE_VERIFICATION is not set diff --git a/projects/ROCKNIX/devices/RK3326/linux/linux.aarch64.conf b/projects/ROCKNIX/devices/RK3326/linux/linux.aarch64.conf index eeaa4f14a3..b03eb8491b 100644 --- a/projects/ROCKNIX/devices/RK3326/linux/linux.aarch64.conf +++ b/projects/ROCKNIX/devices/RK3326/linux/linux.aarch64.conf @@ -6509,7 +6509,7 @@ CONFIG_CRYPTO_DEV_ROCKCHIP=m CONFIG_ASYMMETRIC_KEY_TYPE=y CONFIG_ASYMMETRIC_PUBLIC_KEY_SUBTYPE=y CONFIG_X509_CERTIFICATE_PARSER=y -# CONFIG_PKCS8_PRIVATE_KEY_PARSER is not set +CONFIG_PKCS8_PRIVATE_KEY_PARSER=y CONFIG_PKCS7_MESSAGE_PARSER=y # CONFIG_PKCS7_TEST_KEY is not set # CONFIG_SIGNED_PE_FILE_VERIFICATION is not set diff --git a/projects/ROCKNIX/devices/RK3399/linux/linux.aarch64.conf b/projects/ROCKNIX/devices/RK3399/linux/linux.aarch64.conf index 22ca855917..e351a4906d 100644 --- a/projects/ROCKNIX/devices/RK3399/linux/linux.aarch64.conf +++ b/projects/ROCKNIX/devices/RK3399/linux/linux.aarch64.conf @@ -6515,7 +6515,7 @@ CONFIG_CRYPTO_DEV_ROCKCHIP_DEBUG=y CONFIG_ASYMMETRIC_KEY_TYPE=y CONFIG_ASYMMETRIC_PUBLIC_KEY_SUBTYPE=y CONFIG_X509_CERTIFICATE_PARSER=y -# CONFIG_PKCS8_PRIVATE_KEY_PARSER is not set +CONFIG_PKCS8_PRIVATE_KEY_PARSER=y CONFIG_PKCS7_MESSAGE_PARSER=y # CONFIG_PKCS7_TEST_KEY is not set # CONFIG_SIGNED_PE_FILE_VERIFICATION is not set diff --git a/projects/ROCKNIX/devices/RK3566/linux/linux.aarch64.conf b/projects/ROCKNIX/devices/RK3566/linux/linux.aarch64.conf index c6956980bf..94f7eccdda 100644 --- a/projects/ROCKNIX/devices/RK3566/linux/linux.aarch64.conf +++ b/projects/ROCKNIX/devices/RK3566/linux/linux.aarch64.conf @@ -7267,7 +7267,7 @@ CONFIG_CRYPTO_DEV_ROCKCHIP=y CONFIG_ASYMMETRIC_KEY_TYPE=y CONFIG_ASYMMETRIC_PUBLIC_KEY_SUBTYPE=y CONFIG_X509_CERTIFICATE_PARSER=y -# CONFIG_PKCS8_PRIVATE_KEY_PARSER is not set +CONFIG_PKCS8_PRIVATE_KEY_PARSER=y CONFIG_PKCS7_MESSAGE_PARSER=y # CONFIG_PKCS7_TEST_KEY is not set # CONFIG_SIGNED_PE_FILE_VERIFICATION is not set diff --git a/projects/ROCKNIX/devices/RK3588/linux/linux.aarch64.conf b/projects/ROCKNIX/devices/RK3588/linux/linux.aarch64.conf index 512a925268..1bc395e3b5 100644 --- a/projects/ROCKNIX/devices/RK3588/linux/linux.aarch64.conf +++ b/projects/ROCKNIX/devices/RK3588/linux/linux.aarch64.conf @@ -8390,7 +8390,7 @@ CONFIG_CRYPTO_DEV_ROCKCHIP_DEV=y CONFIG_ASYMMETRIC_KEY_TYPE=y CONFIG_ASYMMETRIC_PUBLIC_KEY_SUBTYPE=y CONFIG_X509_CERTIFICATE_PARSER=y -# CONFIG_PKCS8_PRIVATE_KEY_PARSER is not set +CONFIG_PKCS8_PRIVATE_KEY_PARSER=y CONFIG_PKCS7_MESSAGE_PARSER=y # CONFIG_PKCS7_TEST_KEY is not set # CONFIG_SIGNED_PE_FILE_VERIFICATION is not set diff --git a/projects/ROCKNIX/devices/S922X/linux/linux.aarch64.conf b/projects/ROCKNIX/devices/S922X/linux/linux.aarch64.conf index 9260a57e56..109e313dea 100644 --- a/projects/ROCKNIX/devices/S922X/linux/linux.aarch64.conf +++ b/projects/ROCKNIX/devices/S922X/linux/linux.aarch64.conf @@ -6547,7 +6547,7 @@ CONFIG_CRYPTO_DEV_AMLOGIC_GXL=y CONFIG_ASYMMETRIC_KEY_TYPE=y CONFIG_ASYMMETRIC_PUBLIC_KEY_SUBTYPE=y CONFIG_X509_CERTIFICATE_PARSER=y -CONFIG_PKCS8_PRIVATE_KEY_PARSER=m +CONFIG_PKCS8_PRIVATE_KEY_PARSER=y CONFIG_PKCS7_MESSAGE_PARSER=y # CONFIG_PKCS7_TEST_KEY is not set # CONFIG_SIGNED_PE_FILE_VERIFICATION is not set diff --git a/projects/ROCKNIX/devices/SDM845/linux/linux.aarch64.conf b/projects/ROCKNIX/devices/SDM845/linux/linux.aarch64.conf index 8ead96be1b..0f3636a482 100644 --- a/projects/ROCKNIX/devices/SDM845/linux/linux.aarch64.conf +++ b/projects/ROCKNIX/devices/SDM845/linux/linux.aarch64.conf @@ -8818,7 +8818,7 @@ CONFIG_CRYPTO_DEV_QCOM_RNG=m CONFIG_ASYMMETRIC_KEY_TYPE=y CONFIG_ASYMMETRIC_PUBLIC_KEY_SUBTYPE=y CONFIG_X509_CERTIFICATE_PARSER=y -# CONFIG_PKCS8_PRIVATE_KEY_PARSER is not set +CONFIG_PKCS8_PRIVATE_KEY_PARSER=y CONFIG_PKCS7_MESSAGE_PARSER=y # CONFIG_PKCS7_TEST_KEY is not set # CONFIG_SIGNED_PE_FILE_VERIFICATION is not set diff --git a/projects/ROCKNIX/devices/SM8250/linux/linux.aarch64.conf b/projects/ROCKNIX/devices/SM8250/linux/linux.aarch64.conf index 1e51be7c91..399ec64902 100644 --- a/projects/ROCKNIX/devices/SM8250/linux/linux.aarch64.conf +++ b/projects/ROCKNIX/devices/SM8250/linux/linux.aarch64.conf @@ -7947,7 +7947,7 @@ CONFIG_CRYPTO_DEV_QCOM_RNG=y CONFIG_ASYMMETRIC_KEY_TYPE=y CONFIG_ASYMMETRIC_PUBLIC_KEY_SUBTYPE=y CONFIG_X509_CERTIFICATE_PARSER=y -# CONFIG_PKCS8_PRIVATE_KEY_PARSER is not set +CONFIG_PKCS8_PRIVATE_KEY_PARSER=y CONFIG_PKCS7_MESSAGE_PARSER=y # CONFIG_PKCS7_TEST_KEY is not set # CONFIG_SIGNED_PE_FILE_VERIFICATION is not set diff --git a/projects/ROCKNIX/devices/SM8550/linux/linux.aarch64.conf b/projects/ROCKNIX/devices/SM8550/linux/linux.aarch64.conf index de808fb109..8d80b87efd 100644 --- a/projects/ROCKNIX/devices/SM8550/linux/linux.aarch64.conf +++ b/projects/ROCKNIX/devices/SM8550/linux/linux.aarch64.conf @@ -8039,7 +8039,7 @@ CONFIG_CRYPTO_DEV_AMLOGIC_GXL=m CONFIG_ASYMMETRIC_KEY_TYPE=y CONFIG_ASYMMETRIC_PUBLIC_KEY_SUBTYPE=y CONFIG_X509_CERTIFICATE_PARSER=y -# CONFIG_PKCS8_PRIVATE_KEY_PARSER is not set +CONFIG_PKCS8_PRIVATE_KEY_PARSER=y CONFIG_PKCS7_MESSAGE_PARSER=y # CONFIG_PKCS7_TEST_KEY is not set # CONFIG_SIGNED_PE_FILE_VERIFICATION is not set diff --git a/projects/ROCKNIX/devices/SM8650/linux/linux.aarch64.conf b/projects/ROCKNIX/devices/SM8650/linux/linux.aarch64.conf index dabd0f4e27..070e0ee054 100644 --- a/projects/ROCKNIX/devices/SM8650/linux/linux.aarch64.conf +++ b/projects/ROCKNIX/devices/SM8650/linux/linux.aarch64.conf @@ -8038,7 +8038,7 @@ CONFIG_CRYPTO_DEV_AMLOGIC_GXL=m CONFIG_ASYMMETRIC_KEY_TYPE=y CONFIG_ASYMMETRIC_PUBLIC_KEY_SUBTYPE=y CONFIG_X509_CERTIFICATE_PARSER=y -# CONFIG_PKCS8_PRIVATE_KEY_PARSER is not set +CONFIG_PKCS8_PRIVATE_KEY_PARSER=y CONFIG_PKCS7_MESSAGE_PARSER=y # CONFIG_PKCS7_TEST_KEY is not set # CONFIG_SIGNED_PE_FILE_VERIFICATION is not set