Broken WPA Enterprise

[majorz]

After an upgrade from balenaOS v2.101.7+rev1 to v2.115.4 on a Raspberry Pi 4 device, functioning WiFi WPA-EAP authentication stopped working.

The device has very simple WPA-EAP configuration:

[802-1x]
eap=peap;
identity=<hidden>

and

Aug 21 18:20:39 07cc269 NetworkManager[1864]: <info>  [1692642039.4552] Config: added 'ssid' value '<hidden>'
Aug 21 18:20:39 07cc269 NetworkManager[1864]: <info>  [1692642039.4553] Config: added 'scan_ssid' value '1'
Aug 21 18:20:39 07cc269 NetworkManager[1864]: <info>  [1692642039.4553] Config: added 'bgscan' value 'simple:30:-65:300'
Aug 21 18:20:39 07cc269 NetworkManager[1864]: <info>  [1692642039.4554] Config: added 'key_mgmt' value 'WPA-EAP FT-EAP FT-EAP-SHA384 WPA-EAP-SHA256'
Aug 21 18:20:39 07cc269 NetworkManager[1864]: <info>  [1692642039.4554] Config: added 'auth_alg' value 'OPEN'
Aug 21 18:20:39 07cc269 NetworkManager[1864]: <info>  [1692642039.4555] Config: added 'password' value '<hidden>'
Aug 21 18:20:39 07cc269 NetworkManager[1864]: <info>  [1692642039.4555] Config: added 'eap' value 'PEAP'
Aug 21 18:20:39 07cc269 NetworkManager[1864]: <info>  [1692642039.4555] Config: added 'fragment_size' value '1266'
Aug 21 18:20:39 07cc269 NetworkManager[1864]: <info>  [1692642039.4556] Config: added 'phase2' value 'auth=MSCHAPV2'
Aug 21 18:20:39 07cc269 NetworkManager[1864]: <info>  [1692642039.4556] Config: added 'identity' value '<hidden>'
Aug 21 18:20:39 07cc269 NetworkManager[1864]: <info>  [1692642039.4557] Config: added 'proactive_key_caching' value '1'

We were notified that this is most probably related to upgrade in OpenSSL version. See [1] & [2].

---

[1]. https://bbs.archlinux.org/viewtopic.php?id=281039
[2]. https://bugs.launchpad.net/ubuntu/+source/wpa/+bug/1958267

[majorz]

A small hostapd setup project that could be helpful in reproducing this locally: https://github.com/balena-io-examples/hostapd-enterprise