Re: [Madwifi-devel] IP packet are sent unencrypted while roaming

[Brian E. <eat...@gm...>]

On 10/6/06, Jean-Ren=E9 Peulv=E9 <jr....@aa...> wrote:
> There is a constant flow of UDP packet sent to ath0.
> When the contact is lost to the previous AP. Data stopped to be xmited be=
cause
> the device queue is stopped. When the client is associated with the new A=
P, the
> device queue is enable and IP packets start to be sent unencrypted before
> authentication takes place.
> EAP packets are sent by wpa_supplicant through a raw socket using LLC2 et=
hernet
> type 0x888E. They go through the device xmit queue like any IP packets.
> When the EAP/LEAP EAPOL key exchanges are done then the IP packets get
> encrypted again.

OK, something might be wrong here.  Can you open up a ticket in trac
for this?  If you have a simple test case that reproduces the problem
that would help.

Looking at the code, it's not obvious to me why the problem is
specific to roaming.  I'm not seeing any code in madwifi that prevents
the transmission of data packets before pairwise keys are established.
 I'm looking for something similar to accept_data_frame, only for
transmitting packets instead of receiving them.  Anybody know where
that code might be, or is it really missing?

This might be prevented somewhat by the higher-level processes around
establishing a wireless connection.  There's not much data to send
until the DHCP client runs, and the DHCP client doesn't run until an
encrypted connection is established.

Thanks for the problem report.

Regards,
Brian