[indicators] [network] No Validation of Wi-Fi Key/Passphrases is performed
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
indicator-network (Ubuntu) |
Triaged
|
Wishlist
|
Unassigned |
Bug Description
The current network indicator does no checking of Wi-Fi key or passphrases, and thus allows a user to enter an invalid key or passphrase and initiate a connection attempt.
For access points using WEP, there are four valid key lengths:
* 5 ASCII characters or 10 hex characters
* 13 ASCII characters or 26 hex characters
<https:/
For APs using WPA Personal/PSK, a valid passphrase can be between 8 and 63 characters in length. A full 256-bit key can be specified by entering 64 hex characters.
<https:/
Note, the chewie server should also probably do some validation as well. It shouldn't be possible for a new network to be created with a single character key ( see attached file ).
Steps to Reproduce:
1. Open the network menu and select an access point known to be using WEP security
2. Enter a 1 character key
3. Click OK
Expected Result:
The user cannot initiate a connection with an invalid key.
Actual Result:
The auth dialog is dismissed and the user appears connected ( note, this is another problem )
Build Details:
Manhattan/Maguro #160
chewie: 0.2.6~quantal1
indicators-
Changed in manhattan: | |
status: | New → Confirmed |
summary: |
- [network-indicator] No Validation of Wi-Fi Key/Passphrases is performed + [indicators] [network] No Validation of Wi-Fi Key/Passphrases is + performed |
Changed in manhattan: | |
assignee: | nobody → Alberto Ruiz (alberto.ruiz) |
milestone: | none → update-1 |
importance: | Undecided → Medium |
Changed in manhattan: | |
milestone: | update-1 → update-2 |
tags: | added: wifi |
Changed in manhattan: | |
assignee: | Alberto Ruiz (alberto.ruiz) → nobody |
Changed in manhattan: | |
milestone: | ubuntu-13.04-month-5 → none |
information type: | Proprietary → Public |
affects: | manhattan → touch-preview-images |
Changed in indicator-network (Ubuntu): | |
assignee: | nobody → Matthew Paul Thomas (mpt) |
Changed in indicator-network (Ubuntu): | |
assignee: | Matthew Paul Thomas (mpt) → Antti Kaijanmäki (kaijanmaki) |
Changed in touch-preview-images: | |
assignee: | Mathieu Trudel-Lapierre (mathieu-tl) → Antti Kaijanmäki (kaijanmaki) |
Changed in indicator-network: | |
assignee: | nobody → Antti Kaijanmäki (kaijanmaki) |
no longer affects: | touch-preview-images |
no longer affects: | indicator-network |
Changed in ubuntu-ux: | |
status: | New → Triaged |
assignee: | nobody → Paty Davila (dizzypaty) |
Changed in indicator-network (Ubuntu): | |
status: | Incomplete → Triaged |
Here's the newly created NetworkManager system-connections file, which has an invalid 1-character WEP key.