From 4e9119c52efd4800b51101fb1a378e626280d0e8 Mon Sep 17 00:00:00 2001
From: Thomas Haller <thaller@redhat.com>
Date: Tue, 7 Jan 2020 11:29:09 +0100
Subject: [PATCH] libnm: let nm_utils_security_valid() reject TKIP with SAE
 (WPA3)

SAE should always use CCMP.
---
 libnm-core/nm-utils.c | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/libnm-core/nm-utils.c b/libnm-core/nm-utils.c
index cf5c1de28c..b6d085d961 100644
--- a/libnm-core/nm-utils.c
+++ b/libnm-core/nm-utils.c
@@ -1287,9 +1287,6 @@ nm_utils_security_valid (NMUtilsSecurityType type,
 		if (!have_ap)
 			return TRUE;
 		if (ap_rsn & NM_802_11_AP_SEC_KEY_MGMT_SAE) {
-			if (   (ap_rsn & NM_802_11_AP_SEC_PAIR_TKIP)
-			    && (wifi_caps & NM_WIFI_DEVICE_CAP_CIPHER_TKIP))
-				return TRUE;
 			if (   (ap_rsn & NM_802_11_AP_SEC_PAIR_CCMP)
 			    && (wifi_caps & NM_WIFI_DEVICE_CAP_CIPHER_CCMP))
 				return TRUE;