Driver cannot safely Rekeying with 801.1x

Read from https://forum.openwrt.org/t/wifi-wpa2-enterprise-eap-tls-connection-drops/37251 that @alexw65500 suggested disable rekeying by:

option eap_reauth_period '0'

with EAP-TLS configured APs, due to not being able to correctly Rekeying could cause more serious safety issues.

It's probably a workaround, but is there an solution to this problem?

BTW, my AP is a D-Link DIR-860L B1 with mt76 wifi drivers, not sure if the driver is able to handle Rekeying correctly, or safe enough though.

Edit: Another confusion is that, what is the difference between WPA group rekey and EAP reauth, does disabling EAP reauth really hurt security with 801.1x?

1 Like