Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Implement llsec kernel interface and expose it to the wpan-tools commandline #2

Open
Stefan-Schmidt opened this issue Dec 4, 2015 · 2 comments

Comments

@Stefan-Schmidt
Copy link
Contributor

The netlink interface for llsec configuration has landed inside the mainline kernel. We now need to support this in wpan-tools to allow a sane configuration.

Alex has posted some patches for this:
http://www.spinics.net/lists/linux-wpan/msg03126.html
http://www.spinics.net/lists/linux-wpan/msg03127.html

The meat ios already there but the commandline interface is not really intuitive and needs more work.

@Stefan-Schmidt
Copy link
Contributor Author

Compare with bluez key handling and see if we can re-use some of the concepts.

@darkfader
Copy link

darkfader commented Oct 24, 2017

But still experimental. The command and attributes as in the nl802154.h in the llsec branch is outdated. It's missing the net namespace IDs. If you try with wrong header, you'll end up with invalid argument errors or NULL-pointer errors in the modules and holding some mutexes/hanging processes.
I see encrypted data (secmode 5) in Wireshark but it doesn't decrypt yet somehow. I'm able to receive packets on another node, but only after adding the device address. Shouldn't it add it automatically somehow? I see somewhere in the llsec source a variable "default_key_source", but is never used? How am I supposed to know what devices exist without setting a key first? How would the secure-mode of RPL / commissioning be implemented? Two lowpan interfaces? Firewall rules? Did linux-rpl solve any of these? Or am I right and continue working on unstrung?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants