<div>I googled "wpa group handshake" and found a long discussion of the same problem (group handshake failing) here:</div>
<div><a href="https://dev.laptop.org/ticket/7825">https://dev.laptop.org/ticket/7825</a> <br>The AP used is a D-Link WBR-2310, which I think is significant. There is a timing issue because the D-Link is fast.</div>
<div>There is mention of an XO, which seems to be in the middle of the AP-STA communication. I don't know what an XO is. If you have time, please read the discussion and see if it is relevant.</div>
<div>I will try running wpa_supplicant in verbose mode as mentioned in the problem description and see if that allows the group handshake to succeed.</div>
<div> thanks, Rob</div>
<div><br> </div>
<div class="gmail_quote">On Thu, Mar 31, 2011 at 11:14 AM, Jouni Malinen <span dir="ltr"><<a href="mailto:j@w1.fi">j@w1.fi</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid">
<div class="im">On Fri, Mar 25, 2011 at 06:00:27PM -0400, Robert Flum wrote:<br>> I have a D-Link WBR1310, and am using WPA-PSK.<br><br></div>
<div class="im">> WPA: Sending EAPOL-Key 4/4<br></div>
<div class="im">> WPA: Installing PTK to the driver.<br></div>
<div class="im">> NDIS: OID_802_11_ADD_KEY - hexdump(len=64): 40 00 00 00 00 00 00 e0 20 00 00 00<br>> 00 1b 11 5f 2a db 00 00 00 00 00 00 00 00 00 00 00 00 00 00 5e 48 d4 21 32 f9 de<br>> 2e 1e f2 8b 53 e1 09 e7 a5 84 4d 68 1f 50 9b 2d f7 32 b9 d3 fd e3 a4 9d e3<br>
> NDIS: Set OID 0d01011d - hexdump(len=64): 40 00 00 00 00 00 00 e0 20 00 00 00 00<br>> 1b 11 5f 2a db 00 00 00 00 00 00 00 00 00 00 00 00 00 00 5e 48 d4 21 32 f9 de 2<br>> e 1e f2 8b 53 e1 09 e7 a5 84 4d 68 1f 50 9b 2d f7 32 b9 d3 fd e3 a4 9d e3<br>
> State: 4WAY_HANDSHAKE -> GROUP_HANDSHAKE<br>> Authentication with 00:1b:11:5f:2a:db timed out.<br><br></div>It looks like the association and 4-way handshake go through without<br>issues, but something happens here when the group key handshake is<br>
supposed to occur immediately after the 4-way handshake. The EAPOL-Key<br>message 1/2 of the group key handshake is the first encrypted frame on<br>the connection and for some reason that does not seem to go through all<br>
the way to wpa_supplicant. Unfortunately, this can be quite difficult to<br>debug.. Either the AP is not sending the frame or is sending an invalid<br>frame (which could be checked with a wireless sniffer) or the station<br>
driver is unable to use the key that was just configured to decrypt the<br>frame.<br><font color="#888888"><br>--<br>Jouni Malinen PGP id EFC895FA<br>_______________________________________________<br>
HostAP mailing list<br><a href="mailto:HostAP@lists.shmoo.com">HostAP@lists.shmoo.com</a><br><a href="http://lists.shmoo.com/mailman/listinfo/hostap" target="_blank">http://lists.shmoo.com/mailman/listinfo/hostap</a><br></font></blockquote>
</div><br>