Comments (30)
tecoboot
commented on July 18, 2024
Here debug=1023 logging.
It looks like two nodes keep on negotiating.
from authsae.
tecoboot
commented on July 18, 2024
Maybe the problem is caused by receiving a Confirm while in Confirmed state?
Thu Dec 17 21:32:59 2015 ----------
Thu Dec 17 21:32:59 2015 rx frame hexdump
Thu Dec 17 21:32:59 2015 00000000 b0 00 3a 01 00 0c 42 18 d1 29 00 15 6d 64 e7 70
Thu Dec 17 21:32:59 2015 00000010 00 0c 42 18 d1 29 90 24 03 00 02 00 00 00 01 00
Thu Dec 17 21:32:59 2015 00000020 1b 4c cf e4 2a b5 35 96 e0 e5 9f d2 5e f4 c7 b7
Thu Dec 17 21:32:59 2015 00000030 7c 8c bb e5 5d d8 b7 a2 fe fa ab bd 12 51 da 32
Thu Dec 17 21:32:59 2015 ----------
Thu Dec 17 21:32:59 2015
Thu Dec 17 21:32:59 2015 recv'd CONFIRM from 00:15:6d:64:e7:70 while in CONFIRMED
Thu Dec 17 21:32:59 2015 processing confirm (1)
Thu Dec 17 21:32:59 2015 confirm did not verify!
Thu Dec 17 21:32:59 2015 Delete event received from protocol instance for 00:15:6d:64:e7:70
Thu Dec 17 21:32:59 2015 fin: 1, key len:0 peer:00:15:6d:64:e7:70 me:00:0c:42:18:d1:29
Thu Dec 17 21:32:59 2015 removing peer candidate 00:15:6d:64:e7:70
Thu Dec 17 21:32:59 2015 deleting peer at 00:15:6d:64:e7:70 in state CONFIRMED
Thu Dec 17 21:32:59 2015 peer's confirm:
Thu Dec 17 21:32:59 2015 01001b4c cfe42ab5 3596e0e5 9fd25ef4 c7b77c8c bbe55dd8 b7a2fefa abbd1251
Thu Dec 17 21:32:59 2015 da32
from authsae.
bcopeland
commented on July 18, 2024
On Fri, Dec 18, 2015 at 01:21:52AM -0800, tecoboot wrote:
Maybe the problem is caused by receiving a Confirm while in Confirmed state?
Thu Dec 17 21:32:59 2015 ----------
Thu Dec 17 21:32:59 2015 rx frame hexdump
Thu Dec 17 21:32:59 2015 00000000 b0 00 3a 01 00 0c 42 18 d1 29 00 15 6d 64 e7 70
Thu Dec 17 21:32:59 2015 00000010 00 0c 42 18 d1 29 90 24 03 00 02 00 00 00 01 00
Thu Dec 17 21:32:59 2015 00000020 1b 4c cf e4 2a b5 35 96 e0 e5 9f d2 5e f4 c7 b7
Thu Dec 17 21:32:59 2015 00000030 7c 8c bb e5 5d d8 b7 a2 fe fa ab bd 12 51 da 32
Thu Dec 17 21:32:59 2015 ----------
Thu Dec 17 21:32:59 2015
Thu Dec 17 21:32:59 2015 recv'd CONFIRM from 00:15:6d:64:e7:70 while in CONFIRMED
Thu Dec 17 21:32:59 2015 processing confirm (1)
Thu Dec 17 21:32:59 2015 confirm did not verify!
Thu Dec 17 21:32:59 2015 Delete event received from protocol instance for 00:15:6d:64:e7:70
I'm not sure about the memory usage bug (haven't had time to look) but in
some cases you do delete the peering instance when confirm is received
in commit state (basically if too many tries of resending commit have
failed). See 802.11-2012 11.3.8.6.4.
We perhaps aren't cleaning up all the state?
Bob Copeland %% http://bobcopeland.com/
from authsae.
tecoboot
commented on July 18, 2024
I'm checking full log after start peering of only two nodes.
It looks like a triggered beacon upon received beacon or commit. This results in simultaneous commits and confirms. This should not be a problem. But what I see:
Fri Dec 18 12:05:11 2015
Fri Dec 18 12:05:11 2015 state of 4c:5e:0c:13:bd:ca is now (1) COMMITTED
Fri Dec 18 12:05:11 2015
Fri Dec 18 12:05:11 2015 new peer candidate (seq num=1450440242)
Fri Dec 18 12:05:11 2015 recv'd COMMIT from 4c:5e:0c:13:bd:ca while in NOTHING
Fri Dec 18 12:05:11 2015 computing PWE on 256 bit curve number 19
Fri Dec 18 12:05:11 2015 it took 1 tries to find PWE: 19
How can peer state be NOTHING after it is turned in COMMITTED?
(maybe I should use microsecond timestamping...). Or I have out-of-order logging.
Other node does not have this problem:
Fri Dec 18 12:05:11 2015 recv'd COMMIT from 00:0c:42:18:d1:29 while in COMMITTED
Fri Dec 18 12:05:11 2015 in COMMITTED, sending CONFIRM (sc=1), len 64
from authsae.
tecoboot
commented on July 18, 2024
Below SAE state changes of node that has strange behavior.
It looks like outdated state is used. Is this valid?
root@R-173:/var/log# egrep "NOTHING|COMMIT|CONFIRM|ACCEPT" meshd-nl80211.log
Fri Dec 18 12:05:11 2015 in NOTHING, sending COMMIT (no token), len 128, group 19
Fri Dec 18 12:05:11 2015 state of 4c:5e:0c:13:bd:ca is now (1) COMMITTED
Fri Dec 18 12:05:11 2015 recv'd COMMIT from 4c:5e:0c:13:bd:ca while in NOTHING
Fri Dec 18 12:05:11 2015 COMMIT received for unknown peer, committing and confirming
Fri Dec 18 12:05:11 2015 in NOTHING, sending COMMIT (no token), len 128, group 19
Fri Dec 18 12:05:12 2015 in NOTHING, sending CONFIRM (sc=1), len 64
Fri Dec 18 12:05:12 2015 state of 4c:5e:0c:13:bd:ca is now (2) CONFIRMED
Fri Dec 18 12:05:12 2015 recv'd CONFIRM from 4c:5e:0c:13:bd:ca while in COMMITTED
Fri Dec 18 12:05:12 2015 got CONFIRM before COMMIT, try again
Fri Dec 18 12:05:12 2015 in COMMITTED, sending COMMIT (no token), len 128, group 19
Fri Dec 18 12:05:12 2015 state of 4c:5e:0c:13:bd:ca is now (1) COMMITTED
Fri Dec 18 12:05:12 2015 recv'd COMMIT from 4c:5e:0c:13:bd:ca while in COMMITTED
Fri Dec 18 12:05:12 2015 in COMMITTED, sending CONFIRM (sc=1), len 64
Fri Dec 18 12:05:12 2015 state of 4c:5e:0c:13:bd:ca is now (2) CONFIRMED
Fri Dec 18 12:05:12 2015 recv'd CONFIRM from 4c:5e:0c:13:bd:ca while in CONFIRMED
Fri Dec 18 12:05:12 2015 state of 4c:5e:0c:13:bd:ca is now (3) ACCEPTED
Fri Dec 18 12:05:12 2015 recv'd COMMIT from 4c:5e:0c:13:bd:ca while in CONFIRMED
Fri Dec 18 12:05:12 2015 got COMMIT again, try to resync
Fri Dec 18 12:05:12 2015 in CONFIRMED, sending COMMIT (no token), len 128, group 19
Fri Dec 18 12:05:12 2015 in CONFIRMED, sending CONFIRM (sc=2), len 64
Fri Dec 18 12:05:12 2015 state of 4c:5e:0c:13:bd:ca is now (2) CONFIRMED
Fri Dec 18 12:05:12 2015 recv'd CONFIRM from 4c:5e:0c:13:bd:ca while in CONFIRMED
Fri Dec 18 12:05:12 2015 deleting peer at 4c:5e:0c:13:bd:ca in state CONFIRMED
Fri Dec 18 12:05:12 2015 deleting peer at 4c:5e:0c:13:bd:ca in state ACCEPTED
Fri Dec 18 12:05:12 2015 recv'd COMMIT from 4c:5e:0c:13:bd:ca while in NOTHING
Fri Dec 18 12:05:12 2015 COMMIT received for unknown peer, committing and confirming
Fri Dec 18 12:05:12 2015 in NOTHING, sending COMMIT (no token), len 128, group 19
Fri Dec 18 12:05:12 2015 in NOTHING, sending CONFIRM (sc=1), len 64
Fri Dec 18 12:05:12 2015 state of 4c:5e:0c:13:bd:ca is now (2) CONFIRMED
Fri Dec 18 12:05:12 2015 recv'd CONFIRM from 4c:5e:0c:13:bd:ca while in CONFIRMED
Fri Dec 18 12:05:12 2015 deleting peer at 4c:5e:0c:13:bd:ca in state CONFIRMED
Fri Dec 18 12:05:12 2015 recv'd COMMIT from 4c:5e:0c:13:bd:ca while in NOTHING
Fri Dec 18 12:05:12 2015 COMMIT received for unknown peer, committing and confirming
Fri Dec 18 12:05:12 2015 in NOTHING, sending COMMIT (no token), len 128, group 19
Fri Dec 18 12:05:12 2015 in NOTHING, sending CONFIRM (sc=1), len 64
Fri Dec 18 12:05:12 2015 state of 4c:5e:0c:13:bd:ca is now (2) CONFIRMED
Fri Dec 18 12:05:12 2015 recv'd CONFIRM from 4c:5e:0c:13:bd:ca while in CONFIRMED
Fri Dec 18 12:05:12 2015 deleting peer at 4c:5e:0c:13:bd:ca in state CONFIRMED
Fri Dec 18 12:05:12 2015 recv'd COMMIT from 4c:5e:0c:13:bd:ca while in NOTHING
Fri Dec 18 12:05:13 2015 COMMIT received for unknown peer, committing and confirming
Fri Dec 18 12:05:13 2015 in NOTHING, sending COMMIT (no token), len 128, group 19
Fri Dec 18 12:05:13 2015 in NOTHING, sending CONFIRM (sc=1), len 64
Fri Dec 18 12:05:13 2015 state of 4c:5e:0c:13:bd:ca is now (2) CONFIRMED
Fri Dec 18 12:05:13 2015 recv'd CONFIRM from 4c:5e:0c:13:bd:ca while in CONFIRMED
Fri Dec 18 12:05:13 2015 deleting peer at 4c:5e:0c:13:bd:ca in state CONFIRMED
Fri Dec 18 12:05:13 2015 recv'd COMMIT from 4c:5e:0c:13:bd:ca while in NOTHING
Fri Dec 18 12:05:13 2015 COMMIT received for unknown peer, committing and confirming
Fri Dec 18 12:05:13 2015 in NOTHING, sending COMMIT (no token), len 128, group 19
Fri Dec 18 12:05:13 2015 in NOTHING, sending CONFIRM (sc=1), len 64
Fri Dec 18 12:05:13 2015 state of 4c:5e:0c:13:bd:ca is now (2) CONFIRMED
Fri Dec 18 12:05:13 2015 recv'd CONFIRM from 4c:5e:0c:13:bd:ca while in CONFIRMED
Fri Dec 18 12:05:13 2015 deleting peer at 4c:5e:0c:13:bd:ca in state CONFIRMED
Fri Dec 18 12:05:13 2015 recv'd COMMIT from 4c:5e:0c:13:bd:ca while in NOTHING
from authsae.
tecoboot
commented on July 18, 2024
Captured logging with script, now with prepended subsecond.
bash is a bit slow, writing a single line talkes 6ms or so. Much more than transfer time on WLAN :-((.
Still the strange NOTHING state, while is was set to COMMITTED.
2015-12-18T15:26:53,822483537+0000 : state of 4c:5e:0c:13:bd:ca is now (1) COMMITTED
2015-12-18T15:26:53,828823239+0000 :
2015-12-18T15:26:53,836981730+0000 : new peer candidate (seq num=1450452111)
2015-12-18T15:26:53,843406422+0000 : recv'd COMMIT from 4c:5e:0c:13:bd:ca while in NOTHING
from authsae.
bcopeland
commented on July 18, 2024
On Fri, Dec 18, 2015 at 07:39:06AM -0800, tecoboot wrote:
Captured logging with script, now with prepended subsecond.
bash is a bit slow, writing a single line talkes 6ms or so. Much more than transfer time on WLAN :-((.Still the strange NOTHING state, while is was set to COMMITTED.
I bet the peer is in the candidate list twice.
Can you try reverting this as a guess:
Bob Copeland %% http://bobcopeland.com/
from authsae.
tecoboot
commented on July 18, 2024
This looks much better. Tried couple of times.
from authsae.
tecoboot
commented on July 18, 2024
Hmm, added the other two nodes and rebooted all four. Still the problem.
On longest lived node:
2015-12-18T16:37:37,633750660+0000 : state of 4c:5e:0c:13:bd:ca is now (2) CONFIRMED
2015-12-18T16:37:37,640944059+0000 :
2015-12-18T16:37:37,648259812+0000 : nlerror, cmd 19, seq 1450456611: File exists
2015-12-18T16:37:37,657073926+0000 : NL80211_CMD_TX_STATUS (1450456654.863573)
2015-12-18T16:37:37,664290651+0000 : NL80211_CMD_FRAME (1450456654.863691)
2015-12-18T16:37:37,671416279+0000 : ----------
2015-12-18T16:37:37,678580613+0000 : rx frame hexdump
2015-12-18T16:37:37,685948465+0000 : 00000000 b0 00 3a 01 00 0c 42 18 d1 29 4c 5e 0c 13 bd ca
2015-12-18T16:37:37,693468368+0000 : 00000010 00 0c 42 18 d1 29 70 00 03 00 02 00 00 00 01 00
2015-12-18T16:37:37,700777163+0000 : 00000020 02 96 16 42 1d b1 3f 50 54 18 79 fd 9a 6b d9 f6
2015-12-18T16:37:37,708140796+0000 : 00000030 30 dc ed 8d 7d 9b 00 97 22 b5 2b b8 3f 37 c0 26
2015-12-18T16:37:37,715306333+0000 : ----------
2015-12-18T16:37:37,733820011+0000 :
2015-12-18T16:37:37,741271915+0000 : recv'd CONFIRM from 4c:5e:0c:13:bd:ca while in CONFIRMED
2015-12-18T16:37:37,748521344+0000 : processing confirm (1)
2015-12-18T16:37:37,755851432+0000 : peer in CONFIRMED has just ACCEPTED, found another in ACCEPTED, deleting
2015-12-18T16:37:37,763345654+0000 : deleting peer at 4c:5e:0c:13:bd:ca in state ACCEPTED
from authsae.
tecoboot
commented on July 18, 2024
Filtered log. Still the strange state changes.
root@R-173:~# egrep "NOTHING|CONFIRM|COMMIT|ACCEPT" /var/log/meshd-nl80211.log | head -50
2015-12-18T16:36:34,264784494+0000 : in NOTHING, sending COMMIT (no token), len 128, group 19
2015-12-18T16:36:37,165543111+0000 : state of 4c:5e:0c:13:bd:ca is now (1) COMMITTED
2015-12-18T16:36:37,832364010+0000 : recv'd COMMIT from 4c:5e:0c:13:bd:ca while in COMMITTED
2015-12-18T16:36:37,854953179+0000 : in COMMITTED, sending CONFIRM (sc=1), len 64
2015-12-18T16:36:39,056565646+0000 : state of 4c:5e:0c:13:bd:ca is now (2) CONFIRMED
2015-12-18T16:36:39,367399331+0000 : recv'd CONFIRM from 4c:5e:0c:13:bd:ca while in CONFIRMED
2015-12-18T16:36:43,547805259+0000 : state of 4c:5e:0c:13:bd:ca is now (3) ACCEPTED
2015-12-18T16:37:34,630125678+0000 : recv'd COMMIT from 4c:5e:0c:13:bd:ca while in NOTHING
2015-12-18T16:37:36,355202321+0000 : COMMIT received for unknown peer, committing and confirming
2015-12-18T16:37:36,371258604+0000 : in NOTHING, sending COMMIT (no token), len 128, group 19
2015-12-18T16:37:37,003709209+0000 : in NOTHING, sending CONFIRM (sc=1), len 64
2015-12-18T16:37:37,633750660+0000 : state of 4c:5e:0c:13:bd:ca is now (2) CONFIRMED
2015-12-18T16:37:37,741271915+0000 : recv'd CONFIRM from 4c:5e:0c:13:bd:ca while in CONFIRMED
2015-12-18T16:37:37,755851432+0000 : peer in CONFIRMED has just ACCEPTED, found another in ACCEPTED, deleting
2015-12-18T16:37:37,763345654+0000 : deleting peer at 4c:5e:0c:13:bd:ca in state ACCEPTED
2015-12-18T16:37:38,345092648+0000 : state of 4c:5e:0c:13:bd:ca is now (3) ACCEPTED
from authsae.
bcopeland
commented on July 18, 2024
On Fri, Dec 18, 2015 at 08:52:15AM -0800, tecoboot wrote:
Filtered log. Still the strange state changes.
root@R-173:~# egrep "NOTHING|CONFIRM|COMMIT|ACCEPT" /var/log/meshd-nl80211.log | head -50
2015-12-18T16:36:34,264784494+0000 : in NOTHING, sending COMMIT (no token), len 128, group 19
2015-12-18T16:36:37,165543111+0000 : state of 4c:5e:0c:13:bd:ca is now (1) COMMITTED
2015-12-18T16:36:37,832364010+0000 : recv'd COMMIT from 4c:5e:0c:13:bd:ca while in COMMITTED
2015-12-18T16:36:37,854953179+0000 : in COMMITTED, sending CONFIRM (sc=1), len 64
2015-12-18T16:36:39,056565646+0000 : state of 4c:5e:0c:13:bd:ca is now (2) CONFIRMED
2015-12-18T16:36:39,367399331+0000 : recv'd CONFIRM from 4c:5e:0c:13:bd:ca while in CONFIRMED
2015-12-18T16:36:43,547805259+0000 : state of 4c:5e:0c:13:bd:ca is now (3) ACCEPTED
2015-12-18T16:37:34,630125678+0000 : recv'd COMMIT from 4c:5e:0c:13:bd:ca while in NOTHING
2015-12-18T16:37:36,355202321+0000 : COMMIT received for unknown peer, committing and confirming
2015-12-18T16:37:36,371258604+0000 : in NOTHING, sending COMMIT (no token), len 128, group 19
2015-12-18T16:37:37,003709209+0000 : in NOTHING, sending CONFIRM (sc=1), len 64
2015-12-18T16:37:37,633750660+0000 : state of 4c:5e:0c:13:bd:ca is now (2) CONFIRMED
2015-12-18T16:37:37,741271915+0000 : recv'd CONFIRM from 4c:5e:0c:13:bd:ca while in CONFIRMED
2015-12-18T16:37:37,755851432+0000 : peer in CONFIRMED has just ACCEPTED, found another in ACCEPTED, deleting
2015-12-18T16:37:37,763345654+0000 : deleting peer at 4c:5e:0c:13:bd:ca in state ACCEPTED
2015-12-18T16:37:38,345092648+0000 : state of 4c:5e:0c:13:bd:ca is now (3) ACCEPTED
I guess it would be helpful for debugging this kind of thing if the
log messages always had both this node's address and the peer's...
Bob Copeland %% http://bobcopeland.com/
from authsae.
tecoboot
commented on July 18, 2024
Only part of all sae_debug is for peers, right?
Maybe update to "Peer " MACSTR ...., MAC2STR(peer->peer_mac), ....
Is own address important? Echoed frames?
from authsae.
bcopeland
commented on July 18, 2024
On Fri, Dec 18, 2015 at 09:43:01AM -0800, tecoboot wrote:
Only part of all sae_debug is for peers, right?
Maybe update to "Peer " MACSTR ...., MAC2STR(peer->peer_mac), ....
Is own address important? Echoed frames?
No, nevermind, I was thinking of a log of multiple nodes aggregated, but
clearly that's not the case here.
Bob Copeland %% http://bobcopeland.com/
from authsae.
tecoboot
commented on July 18, 2024
I'll retest with only two nodes.
from authsae.
bcopeland
commented on July 18, 2024
It would be handy to have in any case:
2015-12-18T16:37:36,371258604+0000 : in NOTHING, sending COMMIT (no token), len 128, group 19y
...would be a lot more useful if it told you the state with respect to which peer. By the way, have you tried wpa_supplicant in this setup?
from authsae.
tecoboot
commented on July 18, 2024
I'll add peer MAC address in a couple of messages.
Stupid question: can this have to do with multi-threading? I have single core CPU. Logging by bash script slows down a lot. I I have seen delayed logging, logged with different mechanisms.
meshd is in openwrt. I just does what we need (we includes Jeffrey Kogels and me). When this goes nowhere, wpa_supplicant is our next option. It might not be an option for openwrt.
from authsae.
bcopeland
commented on July 18, 2024
Oh, ok, I didn't realize you were working together. Wpa_s with mesh is in bleeding edge openwrt (but it could be more resource intensive, not sure).
WRT multithread, I don't really think so. The daemon is single threaded, so in any case all the events should be processed sequentially. I'd say it's more likely (like in the one case we already saw) that a peer is being added to the list of peers even though it already exists there. So state updates that go to that peer get lost because of the other copy.
from authsae.
tecoboot
commented on July 18, 2024
Package authsae is still there.
We started from vanilla openwrt and ported authsae to our debian. We try to keep in sync with openwrt.
from authsae.
bcopeland
commented on July 18, 2024
Yes, they both are in there.
from authsae.
tecoboot
commented on July 18, 2024
We checked with openwrt config like below, this uses (used??) meshd.
This config disables 11s routing. We use olsrd.
config wifi-iface
option device radio0
option network lan
option mode mesh
option mesh_id mesh
option mesh_fwding 0
option mesh_ttl 1
option mesh_element_ttl 1
option encryption psk2
option key 123-mesh-password-123
from authsae.
tecoboot
commented on July 18, 2024
Now with peer addresses.
I'll polish (few more spaces) and push.
root@R-090:~# egrep "NOTHING|CONFIRM|COMMIT|ACCEPT" /var/log/meshd-nl80211.log | head -50
2015-12-18T18:27:24,375754266+0000 : peer 00:0c:42:18:d1:29in NOTHING, sending COMMIT (no token), len 128, group 19
2015-12-18T18:27:24,450722204+0000 : state of 00:0c:42:18:d1:29 is now (1) COMMITTED
2015-12-18T18:27:24,453896873+0000 : recv'd COMMIT from 00:0c:42:18:d1:29 while in NOTHING
2015-12-18T18:27:24,648942303+0000 : COMMIT received for unknown peer 00:0c:42:18:d1:29, committing and confirming
2015-12-18T18:27:24,650028015+0000 : peer 00:0c:42:18:d1:29in NOTHING, sending COMMIT (no token), len 128, group 19
2015-12-18T18:27:24,717422022+0000 : 00:0c:42:18:d1:29in NOTHING, sending CONFIRM (sc=1), len 64
2015-12-18T18:27:24,757735018+0000 : state of 00:0c:42:18:d1:29 is now (2) CONFIRMED
2015-12-18T18:27:24,774762279+0000 : recv'd CONFIRM from 00:0c:42:18:d1:29 while in COMMITTED
2015-12-18T18:27:24,775822449+0000 : got CONFIRM before COMMIT, try again
2015-12-18T18:27:24,776910211+0000 : peer 00:0c:42:18:d1:29in COMMITTED, sending COMMIT (no token), len 128, group 19
2015-12-18T18:27:24,804449051+0000 : state of 00:0c:42:18:d1:29 is now (1) COMMITTED
2015-12-18T18:27:24,821691001+0000 : recv'd COMMIT from 00:0c:42:18:d1:29 while in COMMITTED
2015-12-18T18:27:24,822772531+0000 : 00:0c:42:18:d1:29in COMMITTED, sending CONFIRM (sc=1), len 64
2015-12-18T18:27:24,862746580+0000 : state of 00:0c:42:18:d1:29 is now (2) CONFIRMED
2015-12-18T18:27:24,875520815+0000 : recv'd CONFIRM from 00:0c:42:18:d1:29 while in CONFIRMED
2015-12-18T18:27:24,941538001+0000 : state of 00:0c:42:18:d1:29 is now (3) ACCEPTED
2015-12-18T18:27:25,134977130+0000 : recv'd COMMIT from 00:0c:42:18:d1:29 while in CONFIRMED
2015-12-18T18:27:25,136412332+0000 : got COMMIT again, try to resync
2015-12-18T18:27:25,137763813+0000 : peer 00:0c:42:18:d1:29in CONFIRMED, sending COMMIT (no token), len 128, group 19
2015-12-18T18:27:25,168811428+0000 : 00:0c:42:18:d1:29in CONFIRMED, sending CONFIRM (sc=2), len 64
2015-12-18T18:27:25,190275586+0000 : state of 00:0c:42:18:d1:29 is now (2) CONFIRMED
2015-12-18T18:27:25,293736670+0000 : recv'd CONFIRM from 00:0c:42:18:d1:29 while in CONFIRMED
2015-12-18T18:27:25,302801345+0000 : deleting peer at 00:0c:42:18:d1:29 in state CONFIRMED
2015-12-18T18:27:25,309836229+0000 : deleting peer at 00:0c:42:18:d1:29 in state ACCEPTED
2015-12-18T18:27:25,778312850+0000 : recv'd COMMIT from 00:0c:42:18:d1:29 while in NOTHING
2015-12-18T18:27:25,976457531+0000 : COMMIT received for unknown peer 00:0c:42:18:d1:29, committing and confirming
2015-12-18T18:27:25,977554228+0000 : peer 00:0c:42:18:d1:29in NOTHING, sending COMMIT (no token), len 128, group 19
2015-12-18T18:27:26,051486505+0000 : 00:0c:42:18:d1:29in NOTHING, sending CONFIRM (sc=1), len 64
2015-12-18T18:27:26,095407982+0000 : state of 00:0c:42:18:d1:29 is now (2) CONFIRMED
2015-12-18T18:27:26,110623130+0000 : recv'd CONFIRM from 00:0c:42:18:d1:29 while in CONFIRMED
2015-12-18T18:27:26,117016948+0000 : deleting peer at 00:0c:42:18:d1:29 in state CONFIRMED
2015-12-18T18:27:26,432409710+0000 : recv'd COMMIT from 00:0c:42:18:d1:29 while in NOTHING
2015-12-18T18:27:26,629697864+0000 : COMMIT received for unknown peer 00:0c:42:18:d1:29, committing and confirming
2015-12-18T18:27:26,630793442+0000 : peer 00:0c:42:18:d1:29in NOTHING, sending COMMIT (no token), len 128, group 19
2015-12-18T18:27:26,698091188+0000 : 00:0c:42:18:d1:29in NOTHING, sending CONFIRM (sc=1), len 64
2015-12-18T18:27:26,739738430+0000 : state of 00:0c:42:18:d1:29 is now (2) CONFIRMED
2015-12-18T18:27:26,754750168+0000 : recv'd CONFIRM from 00:0c:42:18:d1:29 while in CONFIRMED
2015-12-18T18:27:26,764672617+0000 : deleting peer at 00:0c:42:18:d1:29 in state CONFIRMED
2015-12-18T18:27:33,249814022+0000 : peer 00:0c:42:18:d1:29in NOTHING, sending COMMIT (no token), len 128, group 19
2015-12-18T18:27:33,317481453+0000 : state of 00:0c:42:18:d1:29 is now (1) COMMITTED
2015-12-18T18:27:36,057069593+0000 : peer 00:0c:42:18:d1:29in COMMITTED, sending COMMIT (no token), len 128, group 19
2015-12-18T18:27:36,915165134+0000 : recv'd COMMIT from 00:0c:42:18:d1:29 while in COMMITTED
2015-12-18T18:27:36,916561918+0000 : 00:0c:42:18:d1:29in COMMITTED, sending CONFIRM (sc=1), len 64
2015-12-18T18:27:36,960620389+0000 : state of 00:0c:42:18:d1:29 is now (2) CONFIRMED
2015-12-18T18:27:37,576672393+0000 : recv'd CONFIRM from 00:0c:42:18:d1:29 while in CONFIRMED
2015-12-18T18:27:37,583922398+0000 : deleting peer at 00:0c:42:18:d1:29 in state CONFIRMED
2015-12-18T18:27:43,490917946+0000 : peer 00:0c:42:18:d1:29in NOTHING, sending COMMIT (no token), len 128, group 19
2015-12-18T18:27:43,558978194+0000 : state of 00:0c:42:18:d1:29 is now (1) COMMITTED
2015-12-18T18:27:46,302924080+0000 : peer 00:0c:42:18:d1:29in COMMITTED, sending COMMIT (no token), len 128, group 19
2015-12-18T18:27:47,750549753+0000 : recv'd COMMIT from 00:0c:42:18:d1:29 while in COMMITTED
root@R-173:~# egrep "NOTHING|CONFIRM|COMMIT|ACCEPT" /var/log/meshd-nl80211.log | head -50
2015-12-18T18:27:25,258128288+0000 : peer 4c:5e:0c:13:bd:cain NOTHING, sending COMMIT (no token), len 128, group 19
2015-12-18T18:27:28,240470910+0000 : state of 4c:5e:0c:13:bd:ca is now (1) COMMITTED
2015-12-18T18:27:29,431219012+0000 : recv'd COMMIT from 4c:5e:0c:13:bd:ca while in COMMITTED
2015-12-18T18:27:29,473810799+0000 : 4c:5e:0c:13:bd:cain COMMITTED, sending CONFIRM (sc=1), len 64
2015-12-18T18:27:30,968232253+0000 : state of 4c:5e:0c:13:bd:ca is now (2) CONFIRMED
2015-12-18T18:27:31,491711580+0000 : recv'd COMMIT from 4c:5e:0c:13:bd:ca while in CONFIRMED
2015-12-18T18:27:31,522218356+0000 : got COMMIT again, try to resync
2015-12-18T18:27:31,559941321+0000 : peer 4c:5e:0c:13:bd:cain CONFIRMED, sending COMMIT (no token), len 128, group 19
2015-12-18T18:27:32,196001359+0000 : 4c:5e:0c:13:bd:cain CONFIRMED, sending CONFIRM (sc=2), len 64
2015-12-18T18:27:32,564117163+0000 : state of 4c:5e:0c:13:bd:ca is now (2) CONFIRMED
2015-12-18T18:27:33,097494021+0000 : recv'd CONFIRM from 4c:5e:0c:13:bd:ca while in CONFIRMED
2015-12-18T18:27:33,421864865+0000 : deleting peer at 4c:5e:0c:13:bd:ca in state CONFIRMED
2015-12-18T18:27:34,946288857+0000 : recv'd COMMIT from 4c:5e:0c:13:bd:ca while in NOTHING
2015-12-18T18:27:44,555962977+0000 : COMMIT received for unknown peer 4c:5e:0c:13:bd:ca, committing and confirming
2015-12-18T18:27:44,584403800+0000 : peer 4c:5e:0c:13:bd:cain NOTHING, sending COMMIT (no token), len 128, group 19
2015-12-18T18:27:46,241772011+0000 : 4c:5e:0c:13:bd:cain NOTHING, sending CONFIRM (sc=1), len 64
2015-12-18T18:27:47,274732787+0000 : state of 4c:5e:0c:13:bd:ca is now (2) CONFIRMED
2015-12-18T18:27:47,658872919+0000 : recv'd CONFIRM from 4c:5e:0c:13:bd:ca while in CONFIRMED
2015-12-18T18:27:47,855814787+0000 : deleting peer at 4c:5e:0c:13:bd:ca in state CONFIRMED
2015-12-18T18:27:48,973279474+0000 : recv'd COMMIT from 4c:5e:0c:13:bd:ca while in NOTHING
2015-12-18T18:27:53,976743611+0000 : COMMIT received for unknown peer 4c:5e:0c:13:bd:ca, committing and confirming
2015-12-18T18:27:53,999797392+0000 : peer 4c:5e:0c:13:bd:cain NOTHING, sending COMMIT (no token), len 128, group 19
2015-12-18T18:27:55,763718615+0000 : 4c:5e:0c:13:bd:cain NOTHING, sending CONFIRM (sc=1), len 64
2015-12-18T18:27:56,739149482+0000 : state of 4c:5e:0c:13:bd:ca is now (2) CONFIRMED
2015-12-18T18:27:56,981215501+0000 : recv'd CONFIRM from 4c:5e:0c:13:bd:ca while in CONFIRMED
2015-12-18T18:27:57,167825589+0000 : deleting peer at 4c:5e:0c:13:bd:ca in state CONFIRMED
2015-12-18T18:27:57,899900855+0000 : recv'd COMMIT from 4c:5e:0c:13:bd:ca while in NOTHING
2015-12-18T18:28:03,413421895+0000 : COMMIT received for unknown peer 4c:5e:0c:13:bd:ca, committing and confirming
2015-12-18T18:28:03,448897614+0000 : peer 4c:5e:0c:13:bd:cain NOTHING, sending COMMIT (no token), len 128, group 19
2015-12-18T18:28:05,274613447+0000 : 4c:5e:0c:13:bd:cain NOTHING, sending CONFIRM (sc=1), len 64
2015-12-18T18:28:05,972684170+0000 : state of 4c:5e:0c:13:bd:ca is now (2) CONFIRMED
2015-12-18T18:28:06,146651931+0000 : recv'd CONFIRM from 4c:5e:0c:13:bd:ca while in CONFIRMED
2015-12-18T18:28:06,251617771+0000 : deleting peer at 4c:5e:0c:13:bd:ca in state CONFIRMED
2015-12-18T18:28:06,688095892+0000 : recv'd COMMIT from 4c:5e:0c:13:bd:ca while in NOTHING
2015-12-18T18:28:09,973349038+0000 : COMMIT received for unknown peer 4c:5e:0c:13:bd:ca, committing and confirming
2015-12-18T18:28:09,998797781+0000 : peer 4c:5e:0c:13:bd:cain NOTHING, sending COMMIT (no token), len 128, group 19
2015-12-18T18:28:11,516315783+0000 : 4c:5e:0c:13:bd:cain NOTHING, sending CONFIRM (sc=1), len 64
2015-12-18T18:28:12,127659167+0000 : state of 4c:5e:0c:13:bd:ca is now (2) CONFIRMED
2015-12-18T18:28:12,378390871+0000 : recv'd CONFIRM from 4c:5e:0c:13:bd:ca while in CONFIRMED
2015-12-18T18:28:12,519259483+0000 : deleting peer at 4c:5e:0c:13:bd:ca in state CONFIRMED
2015-12-18T18:28:13,013424047+0000 : recv'd COMMIT from 4c:5e:0c:13:bd:ca while in NOTHING
2015-12-18T18:28:16,393463614+0000 : COMMIT received for unknown peer 4c:5e:0c:13:bd:ca, committing and confirming
2015-12-18T18:28:16,431691303+0000 : peer 4c:5e:0c:13:bd:cain NOTHING, sending COMMIT (no token), len 128, group 19
2015-12-18T18:28:17,674477045+0000 : 4c:5e:0c:13:bd:cain NOTHING, sending CONFIRM (sc=1), len 64
2015-12-18T18:28:18,467602121+0000 : state of 4c:5e:0c:13:bd:ca is now (2) CONFIRMED
2015-12-18T18:28:18,821411544+0000 : recv'd COMMIT from 4c:5e:0c:13:bd:ca while in CONFIRMED
2015-12-18T18:28:18,856749768+0000 : got COMMIT again, try to resync
2015-12-18T18:28:18,884338726+0000 : peer 4c:5e:0c:13:bd:cain CONFIRMED, sending COMMIT (no token), len 128, group 19
2015-12-18T18:28:19,490859754+0000 : 4c:5e:0c:13:bd:cain CONFIRMED, sending CONFIRM (sc=2), len 64
2015-12-18T18:28:19,781310205+0000 : state of 4c:5e:0c:13:bd:ca is now (2) CONFIRMED
from authsae.
tecoboot
commented on July 18, 2024
The patch. I can't push, or I don't know how.
.
more_mac_addr_in_debug.patch.txt
from authsae.
bcopeland
commented on July 18, 2024
Thanks, applied. In the future you could send a pull request inside github if you want.
from authsae.
tecoboot
commented on July 18, 2024
I added some more debug info: "own hash for peer ... :"
Below a failure, "peer 00:15:6d:64:e7:70 confirm did not verify!"
It looks the normal SAE procedure:
- Rx COMMIT
- Tx COMMIT
- Tx CONFIRM
- Rx CONFIRM
The last confirm did not pass the hash check.
This problem occurs every now and then. No clue yet why this happens.
When there is no problem, peer's and own hashes are equal, memcmp(tmp, (frame->authenticate.u.var8 + sizeof(unsigned short)), SHA256_DIGEST_LENGTH) is OK.
rx frame hexdump
00000000 b0 00 3a 01 4c 5e 0c 13 bd ca 00 15 6d 64 e7 70
00000010 4c 5e 0c 13 bd ca f0 06 03 00 01 00 00 00 13 00
00000020 98 45 c1 5f 50 49 1e 71 4f b4 d0 85 dc f3 5d a0
00000030 70 97 63 f7 bb 81 ac 4b 88 99 0b 2a 2d 62 07 b4
00000040 1a fc b3 78 33 e9 be 84 eb 04 3f db ec 32 ac 60
00000050 5f 83 dd 0d d4 aa c1 1a 57 75 c1 2d 28 b7 16 89
00000060 ed d1 94 e1 f8 48 7c 6f dd 1b 38 6a b7 17 28 67
00000070 ee 75 34 39 ca a0 2b 82 e5 5b 0e 7b 69 e0 72 05
new peer candidate (seq num=1450527173)
recv'd COMMIT from 00:15:6d:64:e7:70 while in NOTHING
computing PWE on 256 bit curve number 19
H(4c:5e:0c:13:bd:ca | 00:15:6d:64:e7:70, 12345678901234567890 | 1)
eff2a608 e336a708 274cbfc3 1f39d7f8 a2675ee3 65217444 68302425 5b318ded
candidate x value:
7c4e32e6 faca25a0 8061c6b4 0f64fb8f 046ead0f 9fa06473 520e2320 1a89b0b3
it took 1 tries to find PWE: 19
H(4c:5e:0c:13:bd:ca | 00:15:6d:64:e7:70, 12345678901234567890 | 2)
d610bc77 bb0077a6 0cf8a985 9f233680 7d5e13b9 0c937bcb 08c05003 75ded396
candidate x value:
4cc8a509 c682808e c1d8361d 63bda9a0 aa3c7c4f bd597d19 1f38206b 34579c87
H(4c:5e:0c:13:bd:ca | 00:15:6d:64:e7:70, 12345678901234567890 | 3)
a1bf2bc9 eff1e44d 99c16562 09b237d8 efe3eb2b f34ed3c0 bcfd578f 7122b8cd
candidate x value:
5ce17a20 242d3983 c72f541e d88eb6b3 96b5b1ca 66d67bbf de7884cf 2644f42b
H(4c:5e:0c:13:bd:ca | 00:15:6d:64:e7:70, 12345678901234567890 | 4)
1cf8ec39 317334bc be2ebb81 77aacec9 9272e2f4 765b0798 5afcf9ba 7d76b3e5
candidate x value:
58435f97 c53dc3d1 fafec25d 7f55b889 e7ff17f5 b22c22fa daaac35d 4bb4a522
H(4c:5e:0c:13:bd:ca | 00:15:6d:64:e7:70, 12345678901234567890 | 5)
0d5e6221 6e17e5a3 ca757e71 ff594a3f e37f2cb7 5c91c5b9 0f883f05 8d98ebe3
candidate x value:
b3f1d56d 331b0e51 bd36a798 5e426942 91c26ee6 5a0015b9 b93c38cb a1c1bd50
H(4c:5e:0c:13:bd:ca | 00:15:6d:64:e7:70, 12345678901234567890 | 6)
b99b96bd 1c89a3ec 810a29b8 1fadeca6 9d520e25 01f35195 bd51c815 2dc35c9e
candidate x value:
610a393e 15b1c1fa 1cf6dc43 8072a759 5eaa5c32 68357a54 f9a994d6 2f9bf44f
H(4c:5e:0c:13:bd:ca | 00:15:6d:64:e7:70, 12345678901234567890 | 7)
844e123e 38c1173f 771b9fdc bd02ffb4 c75da546 30490c8c baf86553 8116d911
candidate x value:
f9f296f9 786d0451 c22fca22 4bf1f65a 7f9cf391 ed62f37b 831a0c0d 6df59a70
H(4c:5e:0c:13:bd:ca | 00:15:6d:64:e7:70, 12345678901234567890 | 8)
06422b43 4cc4ffdb 86178883 ebfcb2f5 fea5622c f892b185 5c2dad44 e1c59a04
candidate x value:
f3c97319 aaa327b5 a3c33c6e 20373208 6d6fb03b 568767d6 4066f568 1244587e
H(4c:5e:0c:13:bd:ca | 00:15:6d:64:e7:70, 12345678901234567890 | 9)
2e633f10 6be6e641 afcc24b9 045e4ad7 c1310e9c 25f8d504 584e1829 f174955b
candidate x value:
f58c1e73 289c3e95 3f690284 5e735a13 0c15c303 ffa32181 4899a97c aa48d02e
H(4c:5e:0c:13:bd:ca | 00:15:6d:64:e7:70, 12345678901234567890 | 10)
6b07d5c5 23b4b7e6 867132ca bbf24f5e 89f94f2f 7bb40dbf b85709e8 49a901d9
candidate x value:
36ecc1be 6ae6b969 1b95be84 f6ab8403 60fb3258 522705f9 a0e75192 c1fc238c
H(4c:5e:0c:13:bd:ca | 00:15:6d:64:e7:70, 12345678901234567890 | 11)
7bf5b27e afb89916 b6c6ac41 6962d61b 8ad9c8c3 87437842 8a2aa576 2bd422ba
candidate x value:
7fc1b4fb ac12ed89 28772cdc 8edbf0f0 f3ca751b 06d0df3c d1c9c844 497e54dd
H(4c:5e:0c:13:bd:ca | 00:15:6d:64:e7:70, 12345678901234567890 | 12)
c52c4724 c3cc9e02 fb7e6656 a3f96db2 afc4091a 7cfaba80 c80012f2 03ae55ce
candidate x value:
7b84830c bc4d6cbd b8ed7463 a9200c4d 7e70717f 48ff93dd 9cf3c9b5 e2f5ffd5
H(4c:5e:0c:13:bd:ca | 00:15:6d:64:e7:70, 12345678901234567890 | 13)
307aedfd ed3286d2 223c8144 8324f9d6 1fc6453c 92bff093 6d98f323 0a381642
candidate x value:
23cc8aed 752374e4 5616a332 a4b9506a 405affa8 38809ce2 fe9c7836 b6c9b962
H(4c:5e:0c:13:bd:ca | 00:15:6d:64:e7:70, 12345678901234567890 | 14)
eb82f6ef 7178a593 413c5008 60b71bad f0e52ab4 39bb4c5d 5c018bf2 925d47d8
candidate x value:
a08b659e 2a2379d0 637e9e43 40b797aa 7f5edd60 62f12be5 a40d2fbf 53cae231
H(4c:5e:0c:13:bd:ca | 00:15:6d:64:e7:70, 12345678901234567890 | 15)
06eedb3d 95ce2787 9c1ec5fb 04a7d887 d4c015a8 5a1080a1 d593d97b 716e7913
candidate x value:
6d459dfb 57d016dc 712bbffc bc438a8d db4f9113 3a93b132 5898ace7 c6942d02
H(4c:5e:0c:13:bd:ca | 00:15:6d:64:e7:70, 12345678901234567890 | 16)
8a178cb0 aa0cf53f 7d094fb7 a1bc3089 1eff9a90 6266a7e7 825f3551 7a16ae4e
candidate x value:
d814970a acb56b08 e95e9f74 4c34f8a7 4669ca7c 439430ee 32e20af0 15de4ad5
H(4c:5e:0c:13:bd:ca | 00:15:6d:64:e7:70, 12345678901234567890 | 17)
8c9fe926 4ae2f915 697f7c75 a08af5f1 6ff6b758 02661b4e 3df170e7 74ff14a6
candidate x value:
1756c516 245749cb fbfb151c c9ec3277 4978a27b a5ef63bd 6932804c 043e5608
H(4c:5e:0c:13:bd:ca | 00:15:6d:64:e7:70, 12345678901234567890 | 18)
98b47fb9 041b8c48 b9209146 2c60c70e 938e6cc4 c75c1ea9 201d9b52 1a7b6ac3
candidate x value:
9a9c95ae da547ad7 92ad0aaf b1e52e27 8472e268 2d1d4f03 0b0488e1 fbb9b54f
H(4c:5e:0c:13:bd:ca | 00:15:6d:64:e7:70, 12345678901234567890 | 19)
528ea442 fb9b98b5 3305ef44 6bc4e030 0a107967 df2ccb05 0c6f5ab4 ed204011
candidate x value:
d6e0b477 eac23fc3 964eaf7f b4bab639 df319749 f61d6430 3e5c6f39 c7a65640
H(4c:5e:0c:13:bd:ca | 00:15:6d:64:e7:70, 12345678901234567890 | 20)
80424f52 962770d2 d61e5ce0 67e81d49 6b5600cb d0b0d1f5 529d6929 e48fff7a
candidate x value:
1b985f53 610cf70a 24b8a9bd a21003c7 3d5cc629 376cb312 ef73c77c d53c94db
H(4c:5e:0c:13:bd:ca | 00:15:6d:64:e7:70, 12345678901234567890 | 21)
eeb13646 b5b6f5b5 b5ce2d05 6b3a9114 4d3b8605 cb6a290f 98c7eb49 f3718465
candidate x value:
9e373a82 3afc7015 11390f55 cce29683 615d4f7b 4ad6ecac 3e4911ce 3307dc42
H(4c:5e:0c:13:bd:ca | 00:15:6d:64:e7:70, 12345678901234567890 | 22)
64bf7cee 60e38497 83a54997 96a1ad07 b84a1d5b 381d8ebe 63b563bb badf22c4
candidate x value:
597d09b9 688f62ff 6cbc6567 a2592929 16a5866f f7825692 2d473c9b f1faed78
H(4c:5e:0c:13:bd:ca | 00:15:6d:64:e7:70, 12345678901234567890 | 23)
cb5af0fe bde62d4e 5b6865e9 4b81a137 b7d8e9bd d26efeb3 240bb35f 7bfef0d3
candidate x value:
28f7de95 b38570d3 180e1bf9 23ff4db2 416e2f41 26689dc3 be468b0f a373518e
H(4c:5e:0c:13:bd:ca | 00:15:6d:64:e7:70, 12345678901234567890 | 24)
105b8030 b06156e6 5f319b45 d931636a ae4dd7c9 8955bd40 871706e6 b3cb5ad9
candidate x value:
a30c0286 5a692d75 42aff9fc 3adbf362 b5e9bae9 4fecc3a6 f397f0ed d09bdfab
H(4c:5e:0c:13:bd:ca | 00:15:6d:64:e7:70, 12345678901234567890 | 25)
aaafeca3 f92c00c0 a3370a79 ee901e28 b97267ff faa456eb 5d86f02e 89dd21bb
candidate x value:
35ff05f2 9bd48aa5 116a63fe 5a35d034 0f87b735 6ff4aa4f 71fd5007 98e431d9
H(4c:5e:0c:13:bd:ca | 00:15:6d:64:e7:70, 12345678901234567890 | 26)
3eafcc15 5dd8e3b7 2696ba78 dccd006e 408fba35 f2f2c7b3 4af6bf59 75455bd4
candidate x value:
4319d43c f2cb7de1 7968ecea 56291154 2071d3dd 6b0fa02b 3ca28e08 be4cbe7a
H(4c:5e:0c:13:bd:ca | 00:15:6d:64:e7:70, 12345678901234567890 | 27)
9030d8a2 45397933 5df22906 d6b77f2e 51fe940f f6fbb688 b1ab08f6 967a5917
candidate x value:
b4bcdf1d b1312cd8 decf0e7f df6520b2 879fa27c 07794721 f266f95a 12a6a6b5
H(4c:5e:0c:13:bd:ca | 00:15:6d:64:e7:70, 12345678901234567890 | 28)
6b377c9a 1747a016 06ec8b34 b62c3607 c320da5c 07e4f0b7 15249152 8fe9ea8b
candidate x value:
b223a260 48d72a4b 17a9fd11 f0c55a42 cb0a3f05 6e813528 455f5033 6562bf20
H(4c:5e:0c:13:bd:ca | 00:15:6d:64:e7:70, 12345678901234567890 | 29)
c4e077d3 7777ae69 4ee97185 eb3b0e26 0209679a c164af48 2859dc41 2287a272
candidate x value:
d14252cb 9ce0cc67 60be6dd8 392c1820 cd14e5f0 a2fba6a8 2f6b222a ba6db704
H(4c:5e:0c:13:bd:ca | 00:15:6d:64:e7:70, 12345678901234567890 | 30)
023e1f2a 54cd0657 fb6d2985 864b590f aeda7b75 e2dd66c0 9a39e6fc 680145ad
candidate x value:
d01ac4ed af28c7ab 0458bf03 ea023763 0d661e24 eb0a204a 1c78a3dd 95e2f4eb
H(4c:5e:0c:13:bd:ca | 00:15:6d:64:e7:70, 12345678901234567890 | 31)
dc6e33a6 25a26d02 c73422ab 1cccc721 746e61d2 31fd3bd5 cd2a09b5 164d87f3
candidate x value:
f0a8bea5 31953a5a c4b07c87 8613c5cf 8cbe0bc8 858c3c33 36c76804 7c32aa5d
H(4c:5e:0c:13:bd:ca | 00:15:6d:64:e7:70, 12345678901234567890 | 32)
c0a85193 421f0a7c deec5372 b73a3b6b 649bb058 22355abb 4e46317b 81d96a03
candidate x value:
78a56130 d43cfc71 683a7454 1fe656b5 40edd383 74501dbd 389584d9 05be2b96
H(4c:5e:0c:13:bd:ca | 00:15:6d:64:e7:70, 12345678901234567890 | 33)
dccbe740 38973d85 097f416a 4a3e7d81 e6187f5a b06d572d b4bbd805 f87c0382
candidate x value:
2b0d32f6 7997714c 2c9d96fa 15fc1110 a4d2f634 9b800f7d 22374b85 b79be4c4
H(4c:5e:0c:13:bd:ca | 00:15:6d:64:e7:70, 12345678901234567890 | 34)
bec88b13 72a759cd ec9ad7d7 c3f3eae8 295a9e61 d5289f4b 0f3c0d78 e5ee3da5
candidate x value:
28723160 19dca0d6 0771e526 711ff817 8f33eb2a edd8011a d141de35 2326c6e2
H(4c:5e:0c:13:bd:ca | 00:15:6d:64:e7:70, 12345678901234567890 | 35)
4f6a2ccd 00aee77e 501b0c30 67a998b7 9bea5b8f 5c6f20a9 6629c1cb 57bb6661
candidate x value:
cfdfd5b2 398bb165 0fb3fffa 6f9740ca 31d756ae 50fd8fb9 0d673844 3f9e2a36
H(4c:5e:0c:13:bd:ca | 00:15:6d:64:e7:70, 12345678901234567890 | 36)
0895dd92 850b3d0e 11c6197f b69fc901 f6d294bc d57c263f 49f3e06b 474f5b73
candidate x value:
62ffa271 a96c8414 a2c7bf07 27a84336 675cbcbf 1a3793cc dd83a3ed bbc5bfc6
H(4c:5e:0c:13:bd:ca | 00:15:6d:64:e7:70, 12345678901234567890 | 37)
547adb86 9ba7c412 2054472f 6533aa6e 4229c47b 3499d762 a652610a 98d0762d
candidate x value:
a4fc9da4 ed7fffb3 7cea2e08 67718b32 aaca8dc1 143ee15d e502743b 9fcd4be4
H(4c:5e:0c:13:bd:ca | 00:15:6d:64:e7:70, 12345678901234567890 | 38)
4b3122ba 2ab731c1 064a4235 b5a78d9f 1815a9df 00b0f7c6 f060849c af56ed23
candidate x value:
167e215c 6f8cd772 d85b8743 7dfbf1ed 07759bd4 448fe466 ef5ee81a 776ea7ce
H(4c:5e:0c:13:bd:ca | 00:15:6d:64:e7:70, 12345678901234567890 | 39)
907cc345 329cb5d9 09f7789e eef200f7 4ac2c0c1 9cb37bd3 52186a1c 90bc8b46
candidate x value:
529497b1 a9c1ff87 94fc524c 025c4d15 259f2c4c b8f97b0e 5cedbcb6 806c7887
H(4c:5e:0c:13:bd:ca | 00:15:6d:64:e7:70, 12345678901234567890 | 40)
c25f3ba9 2ba64dca 4b4efe62 a8a9158d 4ee3b582 0d766081 25e8acc6 216da8ec
candidate x value:
8dacff47 8bf9d2dd 5c627f87 b2e314ac 89cc5e09 feda9046 f730b2c8 5a7fedee
PWE (x,y):
x:
7c4e32e6 faca25a0 8061c6b4 0f64fb8f 046ead0f 9fa06473 520e2320 1a89b0b3
y:
d06a7e3d 343793aa d2cd5a49 661729d3 e7b33511 ec63daf3 3d1e5ca1 e56c6a31
assigning group 19 to peer, the size of the prime is 32
COMMIT received for unknown peer 00:15:6d:64:e7:70, committing and confirming
local private value:
7e99fd92 a5243060 0fa996f1 802b1939 db64ff08 2c2bff2d 2a0ab27c 01c082e1
local mask value:
f528a24b d8462a98 c0eeb659 1f68c51a 65f3ba20 16e4cf52 0b10580f 3856918b
local commit:
my scalar:
73c29fdf 7d6a5af7 d0984d4a 9f93de54 8471be7a 9bf92ffa 41613fc8 3db3ef1b
my element:
x:
338c9d18 c53e88ac f4825732 664f9e3e 6408c142 cf0bc5b4 c728bc98 8865293e
y:
1cc87a6c fcac2d61 707482c3 78bbdc28 f9e6a586 de12e6bd 2fa13d96 1f9170d3
peer 00:15:6d:64:e7:70 in NOTHING, sending COMMIT (no token), len 128, group 19
tx_frame(0x805f400, 0xbfa80640, 128)
tx frame (seq num=1450527174)
tx frame hexdump
00000000 b0 00 00 00 00 15 6d 64 e7 70 4c 5e 0c 13 bd ca
00000010 00 15 6d 64 e7 70 00 00 03 00 01 00 00 00 13 00
00000020 73 c2 9f df 7d 6a 5a f7 d0 98 4d 4a 9f 93 de 54
00000030 84 71 be 7a 9b f9 2f fa 41 61 3f c8 3d b3 ef 1b
00000040 33 8c 9d 18 c5 3e 88 ac f4 82 57 32 66 4f 9e 3e
00000050 64 08 c1 42 cf 0b c5 b4 c7 28 bc 98 88 65 29 3e
00000060 1c c8 7a 6c fc ac 2d 61 70 74 82 c3 78 bb dc 28
00000070 f9 e6 a5 86 de 12 e6 bd 2f a1 3d 96 1f 91 70 d3
peer's commit:
peer's scalar:
9845c15f 50491e71 4fb4d085 dcf35da0 709763f7 bb81ac4b 88990b2a 2d6207b4
peer's element:
x:
1afcb378 33e9be84 eb043fdb ec32ac60 5f83dd0d d4aac11a 5775c12d 28b71689
y:
edd194e1 f8487c6f dd1b386a b7172867 ee753439 caa02b82 e55b0e7b 69e07205
k:
90669ca6 591a8902 c086d0f4 fac019b6 f6921367 4b042d60 4107f575 c1cc5549
keyseed:
90ef0cc0 be67eb27 a67458fc 51b415a2 4635a736 787e4f01 431c8bf1 fd8db32e
KCK:
8ffc6d2e 1af9fc79 6a7f90cb 37e5fcbf a2c1be68 7f250e03 ac4eac2a 07c73e7e
PMK:
e3d94853 e57eb03e 2e298c06 58d298a0 7c54440d ceca39a0 71cd8d3d ab8cc6b2
local confirm:
010013f0 05f19fa3 9c328ae2 ab03e6cc 5c7ad84f da2f9487 91c95edf 03e5e608
d358
00:15:6d:64:e7:70 in NOTHING, sending CONFIRM (sc=1), len 64
tx_frame(0x805f400, 0xbfa8064c, 64)
tx frame (seq num=1450527175)
tx frame hexdump
00000000 b0 00 00 00 00 15 6d 64 e7 70 4c 5e 0c 13 bd ca
00000010 00 15 6d 64 e7 70 00 00 03 00 02 00 00 00 01 00
00000020 13 f0 05 f1 9f a3 9c 32 8a e2 ab 03 e6 cc 5c 7a
00000030 d8 4f da 2f 94 87 91 c9 5e df 03 e5 e6 08 d3 58
state of 00:15:6d:64:e7:70 is now (2) CONFIRMED
NL80211_CMD_NEW_STATION (1450527168.846933)
NL80211_CMD_TX_STATUS (1450527168.846990)
NL80211_CMD_TX_STATUS (1450527168.847040)
NL80211_CMD_FRAME (1450527169.42999)
rx frame hexdump
00000000 b0 00 3a 01 4c 5e 0c 13 bd ca 00 15 6d 64 e7 70
00000010 4c 5e 0c 13 bd ca 00 07 03 00 02 00 00 00 01 00
00000020 ff 91 47 37 56 23 0a 19 f7 bb 0a 9f d4 50 66 5a
00000030 0b d4 77 d3 cb 4f b6 e1 37 90 f6 76 be e5 d2 4a
recv'd CONFIRM from 00:15:6d:64:e7:70 while in CONFIRMED
peer 00:15:6d:64:e7:70 processing confirm (1)
peer's confirm:
0100ff91 47375623 0a19f7bb 0a9fd450 665a0bd4 77d3cb4f b6e13790 f676bee5
d24a
own hash for peer ... :
bd857cc3 e24805c7 65895688 e2a2c853 b196cf9c d10ef9ac 01d493c1 67edc253
peer 00:15:6d:64:e7:70 confirm did not verify!
Delete event received from protocol instance for 00:15:6d:64:e7:70
fin: 1, key len:0 peer:00:15:6d:64:e7:70 me:4c:5e:0c:13:bd:ca
removing peer candidate 00:15:6d:64:e7:70
deleting peer at 00:15:6d:64:e7:70 in state CONFIRMED
from authsae.
tecoboot
commented on July 18, 2024
Oeps, tested with wrong binary.
Now I have the same good results as just after I reverted c2ab484.
Error "confirm did not verify!" is gone, links are established.
What to do?
I still have the memory leak. Could have to do with issue #22.
from authsae.
bcopeland
commented on July 18, 2024
I guess we should just revert c2ab484 - @alexgrin ?
from authsae.
alexgrin
commented on July 18, 2024
Sure, let's back it out, I'll ping a person on my end about this issue.
On Dec 21, 2015 5:40 AM, "Bob Copeland" [email protected] wrote:
I guess we should just revert c2ab484
c2ab484—
Reply to this email directly or view it on GitHub
#23 (comment).
from authsae.
bcopeland
commented on July 18, 2024
Ok, did so.
from authsae.
tecoboot
commented on July 18, 2024
Thanks for your help!
from authsae.
tecoboot
commented on July 18, 2024
Just FYI, with a somewhat larger setup, with far away nodes, I have the errors again.
peer 00:0c:42:18:ee:61 confirm did not verify!
It is likely that the key exchange failed. Such an error is normal.
from authsae.
Related Issues (20)
- VHT Not working properly need assistance. HOT 4
- Is authsae still actively developed?
- Error linking: In `peer_lists.h`: "multiple definition of `peers'" and "multiple definition of `blacklists'". HOT 6
- nlerror 19 & 18 on peer nodes when new node joins network or refresh key HOT 27
- meshd-nl80211 memory leak on refresh key HOT 22
- Update FreeBSD code to support 10.2 (or 11-HEAD) HOT 3
- "correct token received" logged as errors, should be a debug level HOT 1
- Unexpected error -22 (expected -17), nlerror, cmd 0, seq 1461249716: Invalid argument HOT 5
- Again, confirm did not verify! HOT 1
- VHT80 HOT 9
- Rekeying failure on a busy link HOT 50
- no rssi_threshold config with authsae HOT 2
- MGTK/IGTK changes do not work HOT 19
- Licence file HOT 1
- encrypted mgmt frames don't seem to work on ath5k HOT 3
- meshd-nl80211 5GHz not working HOT 6
- Krack attack HOT 4
- Little helps in building?? HOT 10
- Seems README is obsolete.
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from authsae.