From owner-freebsd-wireless@FreeBSD.ORG Tue Jan 20 01:52:45 2015 Return-Path: Delivered-To: freebsd-wireless@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id E3217D96 for ; Tue, 20 Jan 2015 01:52:45 +0000 (UTC) Received: from mail-wg0-x22e.google.com (mail-wg0-x22e.google.com [IPv6:2a00:1450:400c:c00::22e]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 73B68A88 for ; Tue, 20 Jan 2015 01:52:45 +0000 (UTC) Received: by mail-wg0-f46.google.com with SMTP id x13so34604515wgg.5 for ; Mon, 19 Jan 2015 17:52:43 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date:message-id:subject :from:to:cc:content-type:content-transfer-encoding; bh=g0kRKs8ZX7oSPlITCEpJkMisFHFtgu8/+g+cwyxButY=; b=jyl0otME5ohC9bYBenV4/AmEbE+Ag1cDJ1opyT5vOtwBIg4pqMqhBpVyfA2pL+u6FS /9aedrXvwEOvMmjq8EISd1AYUjo/9QkUdwRFjJm15sgZgf7p9fpHKk3DPWyJxpeBsFWV rnzrhEzf86DANiUMRXGfxtbhgqhwNUC1mnULf/Yiu1oVuCosTLEYyfR1w7e+jEGkhkTC 5l1sZGl6u6uX86A9QKkfK51IuAVADw5Wuc/dZ3/qn6FJ5RxrGaZB9IX2wL8OvxhbH382 vEGjT3ctuQ3IFiBGrc904JUQMB7Wdc3dUCDLkRr1Fc5T055sBQ8p1hNT9Dcw1wbHpoba vdnw== MIME-Version: 1.0 X-Received: by 10.194.5.37 with SMTP id p5mr67969730wjp.20.1421718763900; Mon, 19 Jan 2015 17:52:43 -0800 (PST) Sender: adrian.chadd@gmail.com Received: by 10.216.41.136 with HTTP; Mon, 19 Jan 2015 17:52:43 -0800 (PST) In-Reply-To: References: Date: Mon, 19 Jan 2015 17:52:43 -0800 X-Google-Sender-Auth: Q-CdkuDYxpylC7F4g9fXLAEBS14 Message-ID: Subject: Re: Fragmented EAP ACK problem on -current From: Adrian Chadd To: =?UTF-8?Q?Olivier_Cochard=2DLabb=C3=A9?= Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Cc: "freebsd-wireless@freebsd.org" X-BeenThere: freebsd-wireless@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: "Discussions of 802.11 stack, tools device driver development." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 20 Jan 2015 01:52:46 -0000 how are they being fragmented? 802.11 fragments? Or just separate MPDUs, but not 802.11 fragments? -a On 19 January 2015 at 09:18, Olivier Cochard-Labb=C3=A9 wrote: > Hi, > I'm using FreeBSD 11.0-CURRENT r277315 and meet a problem with my FreeBSD > Access Point. > I'm using WPA2-Enterprise (EAP-TLS) authentication with hostapd. > > The problem: > During EAP-TLS authentication, the Authenticator (FreeBSD/hostapd) > correctly send a EAP fragmented "Server Hello, Certificate, Certificate > Request" message to the supplicant. > The supplicant (MS Windows native client) correctly ACK each of theses > fragmented EAP packets with an empty EAP-TLS packet. > > Once the supplicant re-assemble the full EAP Certificate request from the > Authenticator, it send a response (EAP fragmented too). > But FreeBSD/hostapd never ACK the first fragmented packet received from t= he > supplicant > =3D> Then the authentication phase time out. > > I've tried with 3 different wireless card as hostap: > - Atheros 9280 (ath) > - Atheros AR2425 (ath) > - Ralink RT2573 (rum) > And all these have the same problem. > > Does anyone is using an EAP-TLS setup with hostapd successfully on -curre= nt > ? > _______________________________________________ > freebsd-wireless@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-wireless > To unsubscribe, send any mail to "freebsd-wireless-unsubscribe@freebsd.or= g"