Skip to content

Commit 05aa17e

Browse files
committed
modules: hostap: Add Kconfig option for debug key material
Add CONFIG_WIFI_NM_WPA_SUPPLICANT_DEBUG_SHOW_KEYS option to control whether key material (passwords, encryption keys, etc.) is included in debug output. This is equivalent to the -K command line flag in wpa_supplicant. The option: - Defaults to disabled (n) for security reasons - Includes clear warning about security risks - Should only be enabled during development/debugging - Provides compile-time control over key material logging This allows developers to enable key material debugging when needed while maintaining security by default.
1 parent f52d71c commit 05aa17e

File tree

1 file changed

+12
-0
lines changed

1 file changed

+12
-0
lines changed

modules/hostap/Kconfig

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -79,6 +79,18 @@ config WIFI_NM_WPA_SUPPLICANT_DEBUG_LEVEL
7979
runtime filtering can also be configured in addition to the compile-time
8080
filtering.
8181

82+
config WIFI_NM_WPA_SUPPLICANT_DEBUG_SHOW_KEYS
83+
bool "Include key material in debug output"
84+
default n
85+
help
86+
This option enables inclusion of key material (passwords, encryption keys,
87+
etc.) in debug output. This is equivalent to the -K command line flag
88+
in wpa_supplicant.
89+
90+
WARNING: This is a security risk and should only be enabled during
91+
development or debugging. Key material should never be logged in production
92+
systems as it can compromise network security.
93+
8294
if WIFI_NM_WPA_SUPPLICANT_LOG_LEVEL_DBG
8395
# hostap debug is very verbose and despite large log buffer sizes
8496
# log messages can be lost. So, we set the log mode to immediate

0 commit comments

Comments
 (0)