RSN IE in 3/4 msg does not match with IE in Beacon/ProbeResp

Hey,

I want to set up an access point (wpa2 eap-tls with ccmp) on
a soekris
net4801 using hostapd and an Atheros pci card (00:0a.0
Ethernet
controller: Atheros Communications, Inc. AR5212 802.11abg
NIC (rev 01)).

My configuration works using wpa but when I switch to wpa2
the 3/4 pre
authentication fails with a rsn ie mismatch:
WPA: RSN IE in Beacon/ProbeResp - hexdump(len=22): 30 14 01
00 00 0f ac
04 01 00 00 0f ac 04 01 00 00 0f ac 01 00 00
WPA: RSN IE in 3/4 msg - hexdump(len=22): 30 14 01 00 00 0f
ac 04 01 00
00 0f ac 04 01 00 00 0f ac 01 0c 00

I tried various wpa2 configurations (psk/eap, ccmp/tkip)
with the same
result. Connecting from another client machine using
different
hard/software didnt work neither.  I also tried different
hostapd
versions (0.5.5, 0.5.7 and current) and madwifi driver
versions (0.9.2,
0.9.3 and current).

Since the configuration and debug log files (using wpa2 eap
tls with
ccmp) are too big for this list, I put them online at
http://www.a
nnessi.at/hostapd/index.html

tia,
Robert


-- 
/"  ASCII Ribbon Campaign against - html email
 /     ______________________     - microsoft office
attachments
 X      | signed & encrypted |     - text above
fullquote below
/      |  emails preferred  |     - lines longer than 79
characters



_______________________________________________
HostAP mailing list
HostAPshmoo.com
http:/
/lists.shmoo.com/mailman/listinfo/hostap

On Sun, Jul 22, 2007 at 06:25:47PM +0200, Robert Annessi
wrote:

> I want to set up an access point (wpa2 eap-tls with
ccmp) on a soekris
> net4801 using hostapd and an Atheros pci card (00:0a.0
Ethernet
> controller: Atheros Communications, Inc. AR5212
802.11abg NIC (rev 01)).
> 
> My configuration works using wpa but when I switch to
wpa2 the 3/4 pre
> authentication fails with a rsn ie mismatch:

This is a known issue with using madwifi and hostapd. The
driver selects
its own RSN IE and hostapd's default value does not match
with that. The
driver would need to be modified to either support
configuration of
the IE or to report its current IE so that both components
could use the
same IE.

-- 
Jouni Malinen                                            PGP
id EFC895FA
_______________________________________________
HostAP mailing list
HostAPshmoo.com
http:/
/lists.shmoo.com/mailman/listinfo/hostap

On 07/22/07 19:16, Jouni Malinen wrote:
> On Sun, Jul 22, 2007 at 06:25:47PM +0200, Robert
Annessi wrote:
> 
>> My configuration works using wpa but when I switch
to wpa2 the 3/4 pre
>> authentication fails with a rsn ie mismatch:
> 
> This is a known issue with using madwifi and hostapd.
The driver selects
> its own RSN IE and hostapd's default value does not
match with that. The
> driver would need to be modified to either support
configuration of
> the IE or to report its current IE so that both
components could use the
> same IE.
> 

For the archive:
Disabling wme (wme_enabled=0) makes it work.

-- 
/"  ASCII Ribbon Campaign against - html email
 /     ______________________     - microsoft office
attachments
 X      | signed & encrypted |     - text above
fullquote below
/      |  emails preferred  |     - lines longer than 79
characters


_______________________________________________
HostAP mailing list
HostAPshmoo.com
http:/
/lists.shmoo.com/mailman/listinfo/hostap