BLE MESH Static OOB Authentification connects with NO OOB Authentification

[CBuch.1]

Situatiion:

BLE Mesh Provisioner Example for stm32wb55 nucleo

configuration in mesh_cfg_usr.h:

#define ENABLE_PB_ADV
// #define ENABLE_PB_GATT
// #define ENABLE_PUB_KEY_TYPE_OOB
// #define ENABLE_AUTH_TYPE_NO_OOB
#define ENABLE_AUTH_TYPE_STATIC_OOB
// #define ENABLE_AUTH_TYPE_OUTPUT_OOB
// #define ENABLE_AUTH_TYPE_INPUT_OOB

one unprovisioned Node that should not connect and be able to join the network does not have static OOB enabled but ENABLE_AUTH_TYPE_NO_OOB.

The Provisioining process succeeds without authentification, it chooses no oob authentification although it is not enabled in the provisioner application.

The same problem was found on an esp32 -> https://github.com/espressif/esp-idf/issues/5281

is this wanted, can i disable this no oob authenfication to provision obly me devices?

[Remy ISSALYS]

Hello,

The authentification can be done by BLE if ENABLE_AUTH_TYPE_NO_OOB is defined or by another way "Out Of Band" if ENABLE_AUTH_TYPE_NO_OOB isn't defined. In examples available in STM32CubeWB package, the authentification is done by BLE. See an extract of BT SIG documentation about the authentification:

Best Regards