Comment 0 for bug 1091391

Revision history for this message
Tony Espy (awe) wrote : [network-indicator] No Validation of Wi-Fi Key/Passphrases is performed

The current network indicator does no checking of Wi-Fi key or passphrases, and thus allows a user to enter an invalid key or passphrase and initiate a connection attempt.

For access points using WEP, there are four valid key lengths:

 * 5 ASCII characters or 10 hex characters
 * 13 ASCII characters or 26 hex characters

For APs using WPA Personal/PSK, a valid passphrase can be between 8 and 63 characters in length. A full 256-bit key can be specified by entering 64 hex characters.

Note, the chewie server should also probably do some validation as well. It shouldn't be possible for a new network to be created with a single character key ( see attached file ).

Steps to Reproduce:

1. Open the network menu and select an access point known to be using WEP security
2. Enter a 1 character key
3. Click OK

Expected Result:

The user cannot initiate a connection with an invalid key.

Actual Result:

The auth dialog is dismissed and the user appears connected ( note, this is another problem )

Build Details:

Manhattan/Maguro #160

chewie: 0.2.6~quantal1
indicators-client-plugin-network: 0.20~quantal1