Re: WPA regression

[Jukka Salmi <j+nbsd%2008.salmi.ch@localhost>]

Jukka Salmi --> current-users (2008-02-05 21:01:46 +0100):
[...]
> However, after switching back to TKIP again, it seems that I found a
> way to work around the GTK rekeying timeout problem I originally
> reported: if I start wpa_cli(8) in interactive mode (default) after
> wpa_supplicant has been started, GTK rekeying does _not_ timeout (and
> thus the network stays up). Neither do I understand why this causes
> rekeying to succeed, nor can I proove that it always works - but without
> a running wpa_cli, 50 out of 50 monitored rekeyings failed, and with
> a running wpa_cli, all so far ~40 rekeyings succeeded...

Finally rekeying also failed when wpa_cli was running:

[...]
12:36:08.423: Trying to associate with 00:0b:6b:20:38:50 (SSID='BS110' 
freq=2412 MHz)
12:36:08.423: Associated with 00:0b:6b:20:38:50
12:36:10.442: WPA: Key negotiation completed with 00:0b:6b:20:38:50 [PTK=TKIP 
GTK=TKIP]
12:36:10.442: CTRL-EVENT-CONNECTED - Connection to 00:0b:6b:20:38:50 completed 
(auth) [id=0 id_str=]
11:41:15.649: WPA: Group rekeying completed with 00:0b:6b:20:38:50 [GTK=TKIP]
11:51:15.789: WPA: Group rekeying completed with 00:0b:6b:20:38:50 [GTK=TKIP]
11:51:16.799: WPA: Group rekeying completed with 00:0b:6b:20:38:50 [GTK=TKIP]
11:51:17.809: WPA: Group rekeying completed with 00:0b:6b:20:38:50 [GTK=TKIP]
11:51:18.820: WPA: Group rekeying completed with 00:0b:6b:20:38:50 [GTK=TKIP]
11:51:18.820: CTRL-EVENT-DISCONNECTED - Disconnect event - remove keys
11:51:27.974: Trying to associate with 00:0b:6b:20:38:50 (SSID='BS110' 
freq=2412 MHz)
11:51:27.974: Associated with 00:0b:6b:20:38:50
11:51:31.004: WPA: 4-Way Handshake failed - pre-shared key may be incorrect
11:51:31.004: CTRL-EVENT-DISCONNECTED - Disconnect event - remove keys
11:51:38.076: Authentication with 00:00:00:00:00:00 timed out.
11:51:47.230: Trying to associate with 00:0b:6b:20:38:50 (SSID='BS110' 
freq=2412 MHz)
11:51:47.230: Associated with 00:0b:6b:20:38:50
11:51:50.260: WPA: 4-Way Handshake failed - pre-shared key may be incorrect
11:51:50.260: CTRL-EVENT-DISCONNECTED - Disconnect event - remove keys
11:51:57.332: Authentication with 00:00:00:00:00:00 timed out.
[...]
11:53:04.256: Trying to associate with 00:0b:6b:20:38:50 (SSID='BS110' 
freq=2412 MHz)
11:53:04.256: Associated with 00:0b:6b:20:38:50
11:53:07.286: WPA: 4-Way Handshake failed - pre-shared key may be incorrect
11:53:07.286: CTRL-EVENT-DISCONNECTED - Disconnect event - remove keys
11:53:14.358: Authentication with 00:00:00:00:00:00 timed out.
11:53:23.512: Trying to associate with 00:0b:6b:20:38:50 (SSID='BS110' 
freq=2412 MHz)
11:53:23.512: Associated with 00:0b:6b:20:38:50
11:53:24.522: WPA: Key negotiation completed with 00:0b:6b:20:38:50 [PTK=TKIP 
GTK=TKIP]
11:53:24.522: CTRL-EVENT-CONNECTED - Connection to 00:0b:6b:20:38:50 completed 
(reauth) [id=0 id_str=]
[...]

I'm using WPA-PSK, but of course I didn't change the pre-shared key
during the above session...


Regards, Jukka

-- 
bashian roulette:
$ ((RANDOM%6)) || rm -rf ~