From 41ebe2b57417efbe224dff7cf33f5b0a5ce4a566 Mon Sep 17 00:00:00 2001
From: null <null@email.com>
Date: Fri, 9 Feb 2024 17:06:42 -0500
Subject: [PATCH] adding support of WPA3 Transition Mode

---
 src/scripts/create_ap | 23 +++++++++++++++++++++--
 1 file changed, 21 insertions(+), 2 deletions(-)

diff --git a/src/scripts/create_ap b/src/scripts/create_ap
index 0937e53..fa37033 100755
--- a/src/scripts/create_ap
+++ b/src/scripts/create_ap
@@ -1730,21 +1730,40 @@ if [[ $IEEE80211N -eq 1 ]] || [[ $IEEE80211AC -eq 1 ]]; then
 fi
 
 if [[ -n "$PASSPHRASE" ]]; then
-    [[ "$WPA_VERSION" == "1+2" ]] && WPA_VERSION=3
+    if [[ "$WPA_VERSION" == "1+2" ]]; then
+        WPA_VERSION=2 # Assuming you want to default to WPA2 for the "1+2" setting
+    fi
     if [[ $USE_PSK -eq 0 ]]; then
         WPA_KEY_TYPE=passphrase
     else
         WPA_KEY_TYPE=psk
     fi
-    cat << EOF >> $CONFDIR/hostapd.conf
+
+    if [[ "$WPA_VERSION" == "3" ]]; then
+        # Configuring for WPA3 Transition Mode
+        # 80211w must be 1 or Apple Devices will not connect. 
+        # 1 is the only valid value for WPA3 Transition Mode
+        cat << EOF >> $CONFDIR/hostapd.conf
+wpa=2
+wpa_${WPA_KEY_TYPE}=${PASSPHRASE}
+wpa_key_mgmt=WPA-PSK SAE
+wpa_pairwise=CCMP
+rsn_pairwise=CCMP
+ieee80211w=1
+EOF
+    else
+        # Original configuration for WPA_VERSION other than 3
+        cat << EOF >> $CONFDIR/hostapd.conf
 wpa=${WPA_VERSION}
 wpa_${WPA_KEY_TYPE}=${PASSPHRASE}
 wpa_key_mgmt=WPA-PSK
 wpa_pairwise=CCMP
 rsn_pairwise=CCMP
 EOF
+    fi
 fi
 
+
 if [[ "$SHARE_METHOD" == "bridge" ]]; then
     echo "bridge=${BRIDGE_IFACE}" >> $CONFDIR/hostapd.conf
 elif [[ $NO_DNSMASQ -eq 0 ]]; then