On Tue, Feb 07, 2017 at 02:28:31PM +0530, Badrish Adiga H R wrote: > Issue: When 2 peers are running MACsec in PSK mode with CA > established, if the interface goes down and comes up after > time > 10 seconds, CA does not get re-established. > > Root cause: This is because retry_count of both the peers > would have reached MAX_RETRY_CNT and stays idle for other to > respond. This is clear deadlock situation where peer A waits > for MKA packets from peer B to wake up and vice-versa. > > Fix: If MACsec is running in PSK mode, we should send MKPDUs > forever for every 2 seconds. Thanks, applied. -- Jouni Malinen PGP id EFC895FA _______________________________________________ Hostap mailing list Hostap@xxxxxxxxxxxxxxxxxxx http://lists.infradead.org/mailman/listinfo/hostap
