Skip to content

Commit 0bc9c16

Browse files
krish2718fabiobaltieri
authored andcommitted
modules: hostap: Add Kconfig option for debug key material
Add CONFIG_WIFI_NM_WPA_SUPPLICANT_DEBUG_SHOW_KEYS option to control whether key material (passwords, encryption keys, etc.) is included in debug output. This is equivalent to the -K command line flag in wpa_supplicant. The option: - Defaults to disabled (n) for security reasons - Includes clear warning about security risks - Should only be enabled during development/debugging - Provides compile-time control over key material logging This allows developers to enable key material debugging when needed while maintaining security by default. Signed-off-by: Chaitanya Tata <[email protected]>
1 parent 4ef042a commit 0bc9c16

File tree

1 file changed

+11
-0
lines changed

1 file changed

+11
-0
lines changed

modules/hostap/Kconfig

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -101,6 +101,17 @@ config WIFI_NM_WPA_SUPPLICANT_DEBUG_LEVEL
101101
runtime filtering can also be configured in addition to the compile-time
102102
filtering.
103103

104+
config WIFI_NM_WPA_SUPPLICANT_DEBUG_SHOW_KEYS
105+
bool "Include key material in debug output"
106+
help
107+
This option enables inclusion of key material (passwords, encryption keys,
108+
etc.) in debug output. This is equivalent to the -K command line flag
109+
in wpa_supplicant.
110+
111+
WARNING: This is a security risk and should only be enabled during
112+
development or debugging. Key material should never be logged in production
113+
systems as it can compromise network security.
114+
104115
if WIFI_NM_WPA_SUPPLICANT_LOG_LEVEL_DBG
105116
# hostap debug is very verbose and despite large log buffer sizes
106117
# log messages can be lost. So, we set the log mode to immediate

0 commit comments

Comments
 (0)