Re: [Bluez-users] devices always connect with out asking for PIN even with pairing enabled!

Marcel Holtmann
2007-09-10T20:56:59Z

Hi Shane,

> I was not trying to do wild guessing with the hci.conf, I have read
> the readme's and MAN files on the hcid.conf. What I'm trying to
> better understand is performing secure bluetooth however can't find
> documentation on what type of security is available during the initial
> paring process. It seem to me that at the hci level is the correct
> place to provide security.
>
> At a minimum I want to provide a unique PIN so that only devices with
> that PIN can pair to my unit but I also don't want someone using
> hcidump to sit by two of my units that are pairing and get the PIN.
>
> Ideally it would be great to have something similar to ssh were I
> could only allow a certain encrypted key to pair to my device. Then I
> could distribute that private encrypted key to all devices that I want
> to give connection privilege. That is what I originally thought the
> Auth/Encryption option was for in the hcid.conf but after reading the
> MAN page I don't believe that is the case.

they have been removed from upstream anyway, because they lead to the
wrong assumptions.

And again, check the manual page for pand or check pand --help for
further information. It will give you all needed information.

Regards

Marcel