Re: SAE not behaving as expected in hostapd

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Wed, Feb 13, 2019 at 01:36:21PM -0800, James Prestwood wrote:
> And in Section 12.4.8.6.4:
> 
> "If the Status code is UNSUPPORTED_FINITE_CYCLIC_GROUP, the protocol
> instance shall check the finite cyclic group field being rejected. If
> the rejected group does not match the last offered group the protocol
> instance shall silently discard the message and set the t0
> retransmission) timer."

I could still interpret that field as a reference to another frame (the
request). Sure, it would seem that the design here was to expect the
field to be included, but the language in 12.4.8.6.3 and 12.4.8.6.4 is
not exactly accurate and the even those field names are spelled
incorrect (they need to be using upper case if they are referring to a
specific field).

> So now we have 2 places that contradict Table 9-36.
> 
> In addition, Section 12.4.8.6.4 is quite clear that "the protocol
> instance shall check the finite cyclic group field being rejected",
> which I don't see wpa_supplicant doing (and how could it? hostapd
> doesn't include the group). So this, at the very least, shows
> wpa_supplicant is violating the spec by not checking the group. And if
> this is true, hostapd is in violation as well by not including the
> group.

I disagree with any claims of non-compliance taken into account the
standard is ambiguous. As far as station behavior is concerned, I don't
see any significant benefit from modifying the current implementation.

> Obviously this needs to get straitened out in the spec since there is
> an obvious contradiction with Table 9-36, which doesn't happen
> overnight. But in terms of hostapd/wpa_s, I believe this should be
> enough to make an intelligent decision on how to proceed.

I initiated discussion for this to be addressed in the IEEE 802.11
maintenance effort (REVmd). So far, the direction has been more towards
a modification in Table 9-36. Based on this, I added the field to the
hostapd response. However, I'm not planning on modifying wpa_supplicant
behavior for this taken into account the previously used hostapd
implementation, the ambiguity in the current standard, and lack of any
clear benefits from enforcing the field to be present in the rejection
response (the station knows what it asked for and there is no case of
wpa_supplicant issuing multiple requests with different groups in
parallel).

-- 
Jouni Malinen                                            PGP id EFC895FA

_______________________________________________
Hostap mailing list
Hostap@xxxxxxxxxxxxxxxxxxx
http://lists.infradead.org/mailman/listinfo/hostap



[Index of Archives]     [Linux Wireless]     [Linux Kernel]     [ATH6KL]     [Linux Bluetooth]     [Linux Netdev]     [Kernel Newbies]     [IDE]     [Security]     [Git]     [Netfilter]     [Bugtraq]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Linux ATA RAID]     [Samba]     [Device Mapper]

  Powered by Linux