PM_RA_PROTECTION does not reject blacklisted connection

[lcalvez]

Hi,

I am working on nrf52840 and I am trying to enable the repeated pairing attempt protection. (PM_RA_PROTECTION)
After enabling the module I can see the logs telling me the device trying to pair is blacklisted and removed from blacklist after PM_RA_PROTECTION_MIN_WAIT_INTERVAL.

However, when I try to reconnect with the same device during the time it is blacklisted, the connection is not rejected.
I tried to find in the code where this rejection should be called and it seems the function ast_peer_blacklisted() is not called on connection.

Could someone help me understand how this features works so I can implement it to my project? There seems to be little documentation about it.

Best regards,

[Vidar Berg]

Hi,

What SDK version is this based on? I'm not aware of any known issues with this mechanism so I think I have to try and see if I can reproduce the same behaviour here.

Best regards,

Vidar

[lcalvez]

Hi I am using SDK 16.0.

I am using the library quite differently because I am blacklisting devices manually by calling                 ast_auth_error_notify(m_conn_handle_peripheral);

My question is where should I look or what module should I enable to ensure the peer manager checks if the device is blacklisted on connection ?

[lcalvez]

Hi, I found the issue. In my usage the smartphone was securely bonded to the device but was rejected by an application security check after the connection.

On reconnection of a bonded device the blacklist is not checked so the device could reconnect. By erasing bonding information when adding device to blacklist the feature works as expected.

Thanks !

[Vidar Berg]

Glad to hear that you found the probem. Thanks for updating the thread!