Vidhya - 2014-07-16

Hi,

Our team is working on WPA2 testing in openCAPWAP. We have hostapd taking care of creating AP and authentication and got latest opencapwap from github.

Our setup details are, a linux machine with hostapd acts as AC and connected through ethernet with a freescale board acting as WTP. During our testing we found that for WPA2 CCMP, station can connect to WTP successfully but cannot ping.

Our Observations:
1. Sniffer capture revealed that ping packets are ACKed but do not receive response from WTP.
2. From dmesg we found that ath9k driver in WTP is not getting temporal keys set after authentication. (ath9k_set_key is not called from nl80211_new_key function)
3. After authentication, we could see set key messages in AC side but those are not coming in WTP side. Therefore WTP is not forwarding them to ath9k driver.

Our question is, for WPA2 CCMP, with AC being configured for Encryption/Decryption service,
1. Do the set keys function (after PTK KEY exchange is completed) should be sent to WTP-> driver, for proper working?
2. Is the current opencapwap implementation along with hostapd support WPA2 CCMP.

Kindly provide your insightful comments and help us in resolving this issue.

Thanks,
Vidhya