Ticket #7825 (assigned defect)
can't complete WPA handshake with D-Link WBR-2310
|Reported by:||dsd||Owned by:||jcardona|
|Priority:||blocker||Milestone:||8.2.0 (was Update.2)|
|Keywords:||8.2.0:? relnote||Cc:||jcardona, carrano, gregorio, holt, sph0lt0n, dsaxena, ashishs@…, mbletsas, cjl|
|Action Needed:||test in release||Verified:||yes|
|Deployments affected:||Blocked By:|
Testing a D-Link WBR-2310 in WPA mode. Authentication completes, association too, but WPA PTK/GTK handshake fails.
There are 4 handshake messages as usual (supplicant, authenticator, supplicant, authenticator) at which point the PTK is installed. It then enters group handshake mode but wpa_supplicant does not see the next EAPOL.
I ran a system in monitor mode next to it and confirmed that the AP did send the 5th EAPOL. It did not retransmit it, suggesting that it also received acknowledgement (my monitor does not show acks). So the message is being lost somewhere.
Interestingly, it is timing-sensitive too. If I run wpa_supplicant in verbose mode on the XO console, the extra delay imposed by printing a lot of messages results in WPA PTK+GTK completing. Odd.