From 275b92572ce55a6b7aa6b69634cde0c98a15b8ce Mon Sep 17 00:00:00 2001
From: Spencer Burris <sburris@posteo.net>
Date: Wed, 26 Nov 2025 21:10:34 -0700
Subject: [PATCH] Add WPA3-SAE support to installer

---
 installer.sh | 15 ++++++++++++---
 1 file changed, 12 insertions(+), 3 deletions(-)

diff --git a/installer.sh b/installer.sh
index c41affcb9f..8c40645c9a 100755
--- a/installer.sh
+++ b/installer.sh
@@ -863,7 +863,7 @@ test_network() {
 configure_wifi() {
     local dev="$1" ssid enc pass _wpasupconf=/etc/wpa_supplicant/wpa_supplicant.conf
 
-    DIALOG --form "Wireless configuration for ${dev}\n(encryption type: wep or wpa)" 0 0 0 \
+    DIALOG --form "Wireless configuration for ${dev}\n(encryption type: wep, wpa, or sae)" 0 0 0 \
         "SSID:" 1 1 "" 1 16 30 0 \
         "Encryption:" 2 1 "" 2 16 4 3 \
         "Password:" 3 1 "" 3 16 63 0 || return 1
@@ -873,8 +873,8 @@ configure_wifi() {
     if [ -z "$ssid" ]; then
         DIALOG --msgbox "Invalid SSID." ${MSGBOXSIZE}
         return 1
-    elif [ -z "$enc" -o "$enc" != "wep" -a "$enc" != "wpa" ]; then
-        DIALOG --msgbox "Invalid encryption type (possible values: wep or wpa)." ${MSGBOXSIZE}
+    elif [ -z "$enc" ] || [[ "$enc" != "wep" && "$enc" != "wpa" && "$enc" != "sae" ]]; then
+        DIALOG --msgbox "Invalid encryption type (possible values: wep, wpa, or sae)." ${MSGBOXSIZE}
         return 1
     elif [ -z "$pass" ]; then
         DIALOG --msgbox "Invalid AP password." ${MSGBOXSIZE}
@@ -895,6 +895,15 @@ network={
   wep_tx_keyidx=0
   auth_alg=SHARED
 }
+EOF
+    elif [ "$enc" = "sae" ]; then
+        cat << EOF >> ${_wpasupconf}
+network={
+    ssid="$ssid"
+    key_mgmt=SAE
+    sae_password="$pass"
+    ieee80211w=2
+}
 EOF
     else
         wpa_passphrase "$ssid" "$pass" >> ${_wpasupconf}