pool/wpa_supplicant
SHA256
3
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
700e23ec90
wpa_supplicant/wpa_supplicant.changes

830 lines
38 KiB
Plaintext
Raw Blame History

-------------------------------------------------------------------
Wed Mar 16 21:22:58 UTC 2011 - dimstar@opensuse.org
- Add wpa_supplicant-dbus-events.patch: Emit property changed
events when adding/removing BSSes. Required by NetworkManager
0.9 beta1 and later.
- Also install fi.w1.wpa_supplicant1.service, which was added as
source5, sourced from the wpa_supplicant source code, with
modified exec line pointing to /usr/sbin instead of /sbin.
-------------------------------------------------------------------
Tue Sep 7 23:08:14 CEST 2010 - vbotka@suse.de
- update to 0.7.3
* fixed fallback from failed PMKSA caching into full EAP authentication
[Bug 355]
* fixed issue with early D-Bus signals during initialization
* fixed X.509 name handling in internal TLS
* fixed WPS ER to use corrent Enrollee MAC Address in Credential
* fixed scanning routines ot improve AP selection for WPS
* added WPS workaround for open networks
* fixed WPS Diffie-Hellman derivation to use correct public key length
* fixed wpa_supplicant AP mode operations to ignore Supplicant and
scan result events
* improved SME operations with nl80211
* fixed WPS ER event_id handling in some cases
* fixed some issues with bgscan simple to avoid unnecessary scans
* fixed issue with l2_packet_ndis overlapped writes corrupting stack
[Bug 328]
* updated WinPcap to the latest stable version 4.1.2 in Windows
installer
update to 0.7.2
* nl80211: fixed number of issues with roaming
* avoid unnecessary roaming if multiple APs with similar signal
strength are present in scan results
* add TLS client events and server probing to ease design of
automatic detection of EAP parameters
* add option for server certificate matching (SHA256 hash of the
certificate) instead of trusted CA certificate configuration
* bsd: Cleaned up driver wrapper and added various low-level
configuration options
* wpa_gui-qt4: do not show too frequent WPS AP available events as
tray messages
* TNC: fixed issues with fragmentation
* EAP-TNC: add Flags field into fragment acknowledgement (needed to
interoperate with other implementations; may potentially breaks
compatibility with older wpa_supplicant/hostapd versions)
* wpa_cli: added option for using a separate process to receive event
messages to reduce latency in showing these
(CFLAGS += -DCONFIG_WPA_CLI_FORK=y in .config to enable this)
* maximum BSS table size can now be configured (bss_max_count)
* BSSes to be included in the BSS table can be filtered based on
configured SSIDs to save memory (filter_ssids)
* fix number of issues with IEEE 802.11r/FT; this version is not
backwards compatible with old versions
* nl80211: add support for IEEE 802.11r/FT protocol (both over-the-air
and over-the-DS)
* add freq_list network configuration parameter to allow the AP
selection to filter out entries based on the operating channel
* add signal strength change events for bgscan; this allows more
dynamic changes to background scanning interval based on changes in
the signal strength with the current AP; this improves roaming within
ESS quite a bit, e.g., with bgscan="simple:30:-45:300" in the network
configuration block to request background scans less frequently when
signal strength remains good and to automatically trigger background
scans whenever signal strength drops noticeably
(this is currently only available with nl80211)
* add BSSID and reason code (if available) to disconnect event messages
* wpa_gui-qt4: more complete support for translating the GUI with
linguist and add German translation
* fix DH padding with internal crypto code (mainly, for WPS)
* do not trigger initial scan automatically anymore if there are no
enabled networks
-------------------------------------------------------------------
Fri May 28 12:49:53 CEST 2010 - vbotka@suse.de
- Fix fallback from failed PMKSA caching into full EAP authentication
(bnc 601501)
-------------------------------------------------------------------
Sun Jan 31 13:13:46 UTC 2010 - aj@suse.de
- Update to 0.7.1 (full changelog in wpa_supplicant/ChangeLog):
* Cleanup of interfaces
* dbus: added new DBus interface (fi.w1.wpa_supplicant1)
* driver_nl80211: multiple updates to provide support for new Linux
nl80211/mac80211 functionality
- Remove wpa_supplicant-dbus-iface-segfault-fix.patch, does not apply
at all.
- Remove wpa_supplicant-dbus-reset-eapol.patch (merged upstream).
- Disable patches that do not apply anymore but are not merged.
-------------------------------------------------------------------
Mon Sep 28 08:44:02 UTC 2009 - lnussel@suse.de
- simplify dbus config, allow introspection
-------------------------------------------------------------------
Mon Sep 7 19:41:35 UTC 2009 - claes.backstrom@fsfe.org
- Added rotation of log file with logrotate (bnc#508041)
-------------------------------------------------------------------
Tue May 12 12:28:55 CEST 2009 - dmueller@suse.de
- reenable logfile writing support to make d-bus activation work
again (bnc#502957)
-------------------------------------------------------------------
Tue Apr 7 13:02:49 CEST 2009 - hschaa@suse.de
- Enable ralink driver (bnc#481380)
- Enable nl80211 driver (bnc#485453)
- Rebase all SUSE patches to 0.6.9
- Remove upstreamed patches
- Update to 0.6.9
* driver_ndis: add PAE group address to the multicast address list to
fix wired IEEE 802.1X authentication
* fixed IEEE 802.11r key derivation function to match with the standard
(note: this breaks interoperability with previous version) [Bug 303]
* increased wpa_cli ping interval to 5 seconds and made this
configurable with a new command line options (-G<seconds>)
* fixed scan buffer processing with WEXT to handle up to 65535
byte result buffer (previously, limited to 32768 bytes)
* added support for Wi-Fi Protected Setup (WPS)
(wpa_supplicant can now be configured to act as a WPS Enrollee to
enroll credentials for a network using PIN and PBC methods; in
addition, wpa_supplicant can act as a wireless WPS Registrar to
configure an AP); WPS support can be enabled by adding CONFIG_WPS=y
into .config and setting the runtime configuration variables in
wpa_supplicant.conf (see WPS section in the example configuration
file); new wpa_cli commands wps_pin, wps_pbc, and wps_reg are used to
manage WPS negotiation; see README-WPS for more details
* added support for EAP-AKA' (draft-arkko-eap-aka-kdf)
* added support for using driver_test over UDP socket
* fixed PEAPv0 Cryptobinding interoperability issue with Windows Server
2008 NPS; optional cryptobinding is now enabled (again) by default
* fixed PSK editing in wpa_gui
* changed EAP-GPSK to use the IANA assigned EAP method type 51
* added a Windows installer that includes WinPcap and all the needed
DLLs; in addition, it set up the registry automatically so that user
will only need start wpa_gui to get prompted to start the wpasvc
servide and add a new interface if needed through wpa_gui dialog
* updated management frame protection to use IEEE 802.11w/D7.0
* added Milenage SIM/USIM emulator for EAP-SIM/EAP-AKA
(can be used to simulate test SIM/USIM card with a known private key;
enable with CONFIG_SIM_SIMULATOR=y/CONFIG_USIM_SIMULATOR=y in .config
and password="Ki:OPc"/password="Ki:OPc:SQN" in network configuration)
* added a new network configuration option, wpa_ptk_rekey, that can be
used to enforce frequent PTK rekeying, e.g., to mitigate some attacks
against TKIP deficiencies
* added an optional mitigation mechanism for certain attacks against
TKIP by delaying Michael MIC error reports by a random amount of time
between 0 and 60 seconds; this can be enabled with a build option
CONFIG_DELAYED_MIC_ERROR_REPORT=y in .config
* fixed EAP-AKA to use RES Length field in AT_RES as length in bits,
not bytes
* updated OpenSSL code for EAP-FAST to use an updated version of the
session ticket overriding API that was included into the upstream
OpenSSL 0.9.9 tree on 2008-11-15 (no additional OpenSSL patch is
needed with that version anymore)
* updated userspace MLME instructions to match with the current Linux
mac80211 implementation; please also note that this can only be used
with driver_nl80211.c (the old code from driver_wext.c was removed)
* added support (Linux only) for RoboSwitch chipsets (often found in
consumer grade routers); driver interface 'roboswitch'
* fixed canceling of PMKSA caching when using drivers that generate
RSN IE and refuse to drop PMKIDs that wpa_supplicant does not know
about
* added support for SHA-256 as X.509 certificate digest when using the
internal X.509/TLSv1 implementation
* updated management frame protection to use IEEE 802.11w/D6.0
* added support for using SHA256-based stronger key derivation for WPA2
(IEEE 802.11w)
* fixed FT (IEEE 802.11r) authentication after a failed association to
use correct FTIE
* added support for configuring Phase 2 (inner/tunneled) authentication
method with wpa_gui-qt4
* added support for EAP Sequences in EAP-FAST Phase 2
* added support for using TNC with EAP-FAST
* added driver_ps3 for the PS3 Linux wireless driver
* added support for optional cryptobinding with PEAPv0
* fixed the OpenSSL patches (0.9.8g and 0.9.9) for EAP-FAST to
allow fallback to full handshake if server rejects PAC-Opaque
* added fragmentation support for EAP-TNC
* added support for parsing PKCS #8 formatted private keys into the
internal TLS implementation (both PKCS #1 RSA key and PKCS #8
encapsulated RSA key can now be used)
* added option of using faster, but larger, routines in the internal
LibTomMath (for internal TLS implementation) to speed up DH and RSA
calculations (CONFIG_INTERNAL_LIBTOMMATH_FAST=y)
* fixed race condition between disassociation event and group key
handshake to avoid getting stuck in incorrect state [Bug 261]
* fixed opportunistic key caching (proactive_key_caching)
-------------------------------------------------------------------
Sun Mar 1 17:03:04 CET 2009 - coolo@suse.de
- fix compilation with gcc 4.4
-------------------------------------------------------------------
Mon Feb 9 16:06:44 CET 2009 - hschaa@suse.de
- Add wpa_supplicant-respect_no_reply.patch which avoids
D-Bus errors if no reply was requested by the caller
-------------------------------------------------------------------
Wed Jan 28 14:03:42 CET 2009 - hschaa@suse.de
- Avoid unnecessary roaming if the driver (like ipw2100) does not
report signal level. This fixes association problems with ipw2100
(bnc#469779).
-------------------------------------------------------------------
Wed Jan 28 10:45:19 CET 2009 - hschaa@suse.de
- Fix dbus configuration again (bnc#470013, bnc#469530)
-------------------------------------------------------------------
Thu Jan 22 17:24:34 CET 2009 - hschaa@suse.de
- Add fix_dbus_config.patch (bnc#468392)
-------------------------------------------------------------------
Mon Dec 8 15:45:55 CET 2008 - hschaa@suse.de
- Add patch wpa_supplicant-hide_secrets-2.patch to _not_ print
passwords in clear text when started by NM with enabled debug
output
-------------------------------------------------------------------
Mon Nov 10 17:35:43 EET 2008 - tambet@novell.com
- Fix a bug where authentication would always fail using PKCS#11
interface from DBus control interface.
- Add support for PKCS#11 module initialization arguments.
-------------------------------------------------------------------
Mon Oct 13 15:11:54 CEST 2008 - hschaa@gmail.com
- update wpa_supplicant-roaming.patch which enables roaming by
default for some cards
-------------------------------------------------------------------
Thu Oct 9 14:42:36 CEST 2008 - hschaa@suse.de
- add patches wpa_supplicant-dont_report_empty_initial_scan.patch
and wpa_supplicant-restore_scan_request_setting.patch which
speed up the initial association with a network when NM is used
- Add patch wpa_supplicant-fix_set_mode.patch which fixes an
association bug that was triggered when changing the interface
mode
-------------------------------------------------------------------
Mon Sep 29 13:40:18 CEST 2008 - hschaa@suse.de
- add roaming capability (FATE 303806)
-------------------------------------------------------------------
Wed Sep 24 00:59:56 CEST 2008 - ro@suse.de
- drop buildreq for madwifi (dropped package)
-------------------------------------------------------------------
Tue Sep 2 03:05:49 CEST 2008 - ro@suse.de
- update to 0.6.4
* added support for EAP Sequences in EAP-FAST Phase 2
* added support for using TNC with EAP-FAST
* added driver_ps3 for the PS3 Linux wireless driver
* added support for optional cryptobinding with PEAPv0
* fixed the OpenSSL patches (0.9.8g and 0.9.9) for EAP-FAST to
allow fallback to full handshake if server rejects PAC-Opaque
* added fragmentation support for EAP-TNC
* added support for parsing PKCS #8 formatted private keys into the
internal TLS implementation (both PKCS #1 RSA key and PKCS #8
encapsulated RSA key can now be used)
* added option of using faster, but larger, routines in the internal
LibTomMath (for internal TLS implementation) to speed up DH and RSA
calculations (CONFIG_INTERNAL_LIBTOMMATH_FAST=y)
* fixed race condition between disassociation event and group key
handshake to avoid getting stuck in incorrect state [Bug 261]
* fixed opportunistic key caching (proactive_key_caching)
-------------------------------------------------------------------
Mon Aug 4 12:33:10 CEST 2008 - hschaa@suse.de
- Remove patches that are already upstream
- Rebase patches to new version
- Update to 0.6.3
-------------------------------------------------------------------
Mon May 5 09:52:45 CEST 2008 - schwab@suse.de
- Fix mangled error message.
-------------------------------------------------------------------
Mon Mar 17 15:06:14 CET 2008 - hschaa@suse.de
- Fix system bus activation (bnc#371500)
-------------------------------------------------------------------
Tue Mar 11 15:09:29 CET 2008 - hschaa@suse.de
- Remove patches that are upstream already
- Update to version 0.5.10, changes:
* added support for Makefile builds to include debug-log-to-a-file
functionality (CONFIG_DEBUG_FILE=y and -f<path> on command line)
* added network configuration parameter 'frequency' for setting
initial channel for IBSS (adhoc) networks
* fixed EAP-SIM and EAP-AKA message parser to validate attribute
lengths properly to avoid potential crash caused by invalid messages
* added driver_wext workaround for race condition between scanning and
association with drivers that take very long time to scan all
channels (e.g., madwifi with dual-band cards); wpa_supplicant is now
using a longer hardcoded timeout for the scan if the driver supports
notifications for scan completion (SIOCGIWSCAN event); this helps,
e.g., in cases where wpa_supplicant and madwifi driver ended up in
loop where the driver did not even try to associate
* fixed EAP-SIM not to include AT_NONCE_MT and AT_SELECTED_VERSION
attributes in EAP-SIM Start/Response when using fast reauthentication
* fixed problems in getting NDIS events from WMI on Windows 2000
- Changes in 0.5.9:
* fixed an integer overflow issue in the ASN.1 parser used by the
(experimental) internal TLS implementation to avoid a potential
buffer read overflow
* fixed a race condition with -W option (wait for a control interface
monitor before starting) that could have caused the first messages to
be lost
* updated EAP Generalized Pre-Shared Key (EAP-GPSK) to use the latest
draft (draft-ietf-emu-eap-gpsk-07.txt)
* added ctrl_iface RECONNECT (wpa_cli reconnect) command
(like reassociate, but only takes effect if already associated)
* fixed a possible race condition between wpa_cli reassociate and
wpa_cli disconnect
* return a non-zero exit code from non-interactive wpa_cli if the
command is not recognized or fails
* fixed 0.5.8 regressions in BSS selection that prevented wildcard SSID
from being used with non-WPA networks and disabled workaround for
ignoring bogus WPA/RSN IE in non-WPA configuration
* fixed OpenSSL TLS wrapper to clear trusted CA list to allow
network blocks to use different trusted CA configurations
* fixed a potential EAP state machine loop when mloving from PSK to EAP
configuration without restarting wpa_supplicant
-------------------------------------------------------------------
Thu Jan 31 13:10:43 CET 2008 - hschaa@suse.de
- Fix madwifi support (b.n.c #342670)
-------------------------------------------------------------------
Tue Dec 18 18:26:27 CET 2007 - jg@suse.de
- Fix two leaks when signalling state and scan results (rh #408141)
-------------------------------------------------------------------
Wed Nov 14 13:36:33 CET 2007 - jg@suse.de
- enable dbus interface
- apply fixes from Dan Williams
- build Qt4 version of wpa_gui
- dropped gcc 4.3 patch for Qt3 wpa_gui
-------------------------------------------------------------------
Mon Nov 12 14:24:33 CET 2007 - ssommer@suse.de
- fix build with gcc 4.3
-------------------------------------------------------------------
Tue Jul 24 16:58:12 CEST 2007 - jg@suse.de
- update to version 0.5.8, changes:
* updated driver_wext.c to build with the current wireless-dev.git
tree and net/d80211 changes
* updated EAP Generalized Pre-Shared Key (EAP-GPSK) to use the latest
draft (draft-ietf-emu-eap-gpsk-03.txt)
* fixed 'make install'
* fixed EAP-TTLS implementation not to crash on use of freed memory
if TLS library initialization fails
* fixed EAP-AKA Notification processing to allow Notification to be
processed after AKA Challenge response has been sent
-------------------------------------------------------------------
Mon Mar 19 19:33:34 CET 2007 - jg@suse.de
- adjusted include path for madwifi
-------------------------------------------------------------------
Sat Mar 10 17:44:46 CET 2007 - dmueller@suse.de
- update to 0.5.7 (#253396):
* ChangeLog is under /usr/share/doc/packages/wpa_supplicant/ChangeLog
-------------------------------------------------------------------
Mon Nov 6 16:29:14 CET 2006 - jg@suse.de
- set IW_ENCODE_TEMP flag (needed to use dynamic WEP with airo
driver, bug 185528)
-------------------------------------------------------------------
Fri Oct 6 11:52:37 CEST 2006 - jg@suse.de
- update to 0.4.9:
* fixed EAPOL re-authentication for sessions that used PMKSA
caching
* reject WPA/WPA2 message 3/4 if it does not include any valid
WPA/RSN IE
* driver_wext: added support for WE-21 change to SSID configuration
* driver_wext: fixed privacy configuration for static WEP keys mode
[Bug 140]
* driver_wext: added fallback to use SIOCSIWENCODE for setting
auth_alg if the driver does not support SIOCSIWAUTH
-------------------------------------------------------------------
Fri Mar 24 19:08:20 CET 2006 - jg@suse.de
- fixed static WEP key usage (bug 144268)
-------------------------------------------------------------------
Thu Feb 16 10:04:31 CET 2006 - jg@suse.de
- update to 0.4.8 (bug 151151)
* added support for EAP-FAST key derivation using other ciphers than
RC4-128-SHA for authentication and AES128-SHA for provisioning
* fixed EAP-SIM and EAP-AKA pseudonym and fast re-authentication to
decrypt AT_ENCR_DATA attributes correctly
* added support for configuring CA certificate as DER file and as a
configuration blob
* fixed private key configuration as configuration blob and added
support for using PKCS#12 as a blob
* added support for loading trusted CA certificates from Windows
certificate store: ca_cert="cert_store://<name>", where <name> is
likely CA (Intermediate CA certificates) or ROOT (root certificates)
* fixed TLS library deinitialization after RSN pre-authentication not
to disable TLS library for normal authentication
* fixed PMKSA cache processing not to trigger deauthentication if the
current PMKSA cache entry is replaced with a valid new entry
* fixed PC/SC initialization for ap_scan != 1 modes (this fixes
EAP-SIM and EAP-AKA with real SIM/USIM card when using ap_scan=0 or
ap_scan=2)
* do not try to use USIM APDUs when initializing PC/SC for SIM card
access for a network that has not enabled EAP-AKA
-------------------------------------------------------------------
Sun Feb 5 18:34:21 CET 2006 - ro@suse.de
- removed km_wlan from BuildRequires
-------------------------------------------------------------------
Wed Jan 25 21:42:51 CET 2006 - mls@suse.de
- converted neededforbuild to BuildRequires
-------------------------------------------------------------------
Tue Jan 17 19:32:07 CET 2006 - rml@suse.de
- Add patch (from upstream) fixing bad drivers that NULL out
the SSID and send the wrong length.
-------------------------------------------------------------------
Tue Jan 10 12:27:27 CET 2006 - jg@suse.de
- added AP scan mode selection via control interface (patch
from rml@novell.com)
-------------------------------------------------------------------
Mon Nov 21 12:41:52 CET 2005 - jg@suse.de
- update to 0.4.7, changes (shortened):
* l2_packet_pcap: fixed wired IEEE 802.1X authentication with
libpcap and WinPcap to receive frames sent to PAE group address
* disable EAP state machine when IEEE 802.1X authentication is
not used in order to get rid of bogus "EAP failed" messages
* fixed OpenSSL error reporting to go through all pending errors
to avoid confusing reports of old errors being reported at
later point during handshake
* fixed configuration file updating to not write empty variables
(e.g., proto or key_mgmt) that the file parser would not accept
* fixed ADD_NETWORK ctrl_iface command to use the same default
values for variables as empty network definitions read from
config file would get
* fixed EAP state machine to not discard EAP-Failure messages in
many cases (e.g., during TLS handshake)
* fixed a infinite loop in private key reading if the configured
file cannot be parsed successfully
* driver_madwifi: added support for madwifi-ng
* wpa_gui: do not display password/PSK field contents
* wpa_gui: added CA certificate configuration
* use longer timeout for IEEE 802.11 association to avoid problems
with drivers that may take more than five second to associate
- dropped obsolete madwifi patch
- dropped obsolete copy of wireless.h
- updated config file
- use $RPM_OPT_FLAGS and %jobs
- created subpackage wpa_supplicant-gui containing wpa_gui
-------------------------------------------------------------------
Tue Nov 8 15:22:13 CET 2005 - jg@suse.de
- do not build as root
-------------------------------------------------------------------
Fri Nov 4 18:16:50 CET 2005 - jg@suse.de
- added support for madwifi-ng
- compiling against Wireless Extensions v19
- removed obsolete config option CONFIG_XSUPPLICANT_IFACE
-------------------------------------------------------------------
Fri Oct 28 12:25:59 CEST 2005 - jg@suse.de
- update to 0.4.6, changes (shortened):
* allow fallback to WPA, if mixed WPA+WPA2 networks have mismatch
in RSN IE, but WPA IE would match with wpa_supplicant
configuration
* added support for named configuration blobs in order to avoid
having to use file system for external files (e.g., certificates)
* fixed RSN pre-authentication
* driver_madwifi: set IEEE80211_KEY_GROUP flag for group keys to
make sure the driver configures broadcast decryption correctly
* added ca_path (and ca_path2) configuration variables that can be
used to configure OpenSSL CA path, e.g., /etc/ssl/certs, for
using the system-wide trusted CA list
* added support for starting wpa_supplicant without a configuration
file
* added global control interface that can be optionally used for
adding and removing network interfaces dynamically
* wpa_gui:
- try to save configuration whenever something is modified
- added WEP key configuration
- added possibility to edit the current network configuration
* driver_ndis: fixed driver polling not to increase frequency on
each received EAPOL frame due to incorrectly cancelled timeout
* fixed driver_wext.c to filter wireless events based on ifindex
to avoid interfaces receiving events from other interfaces
* delay sending initial EAPOL-Start couple of seconds to speed
up authentication for the most common case of Authenticator
starting EAP authentication immediately after association
-------------------------------------------------------------------
Thu Oct 13 16:40:44 CEST 2005 - jg@suse.de
- update to 0.4.5, changes (shortened):
* added a workaround for clearing keys with ndiswrapper to allow
roaming from WPA enabled AP to plaintext one
* l2_packet_linux: use socket type SOCK_DGRAM instead of SOCK_RAW
for PF_PACKET in order to prepare for network devices that do
not use Ethernet headers (e.g., network stack with native IEEE
802.11 frames)
* use receipt of EAPOL-Key frame as a lower layer success indication
for EAP state machine to allow recovery from dropped EAP-Success
frame
* driver_wext: add support for WE-19
* added support for multiple configuration backends (CONFIG_BACKEND
option); currently, only 'file' is supported (i.e., the format used
in wpa_supplicant.conf)
* added support for updating configuration ('wpa_cli save_config')
* added GET_NETWORK ctrl_iface command
-------------------------------------------------------------------
Mon Aug 29 15:26:27 CEST 2005 - jg@suse.de
- update to 0.4.4 (bug 112977), changes (shortened):
* replaced OpenSSL patch for EAP-FAST support
(openssl-tls-extensions.patch) with a more generic and correct
patch
* allow non-WPA modes (e.g., IEEE 802.1X with dynamic WEP) to be
used with drivers that do not support WPA
* added support for enabling/disabling networks from the list of
all configured networks
* added support for adding and removing network from the current
configuration
* added support for setting network configuration parameters
through the control interface
* fixed parsing of strings that include both " and # within double
quoted area (e.g., "start"#end")
* removed interface for external EAPOL/EAP supplicant
* fixed build with CONFIG_DNET_PCAP=y on Linux
* l2_packet: moved different implementations into separate files
* added support for using ap_scan=2 mode with multiple network
blocks
* fixed a potential issue in RSN pre-authentication ending up using
freed memory if pre-authentication times out
* added support for querying private key password (EAP-TLS) through
the control interface (wpa_cli/wpa_gui) if one is not included in
the configuration file
* driver_broadcom: fixed couple of memory leaks in scan result
processing
* EAP-PAX is now registered as EAP type 46
* fixed EAP-PAX MAC calculation
* fixed EAP-PAX CK and ICK key derivation
* added support for using password with EAP-PAX
* added support for arbitrary driver interface parameters through the
configuration file with a new driver_param field
* added possibility to override l2_packet module with driver
interface API (new send_eapol handler)
* fixed ctrl_interface_group processing for the case where gid is
entered as a number, not group name
* driver_test: added support for testing hostapd with wpa_supplicant
by using test driver interface without any kernel drivers or
network cards
* added support for EAP-MSCHAPv2 password retries within the same
EAP authentication session
* added support for password changes with EAP-MSCHAPv2
* added support for reading additional certificates from PKCS#12
files and adding them to the certificate chain
* fixed association with IEEE 802.1X (no WPA) when dynamic WEP keys
were used
* display EAP Notification messages to user through control
interface with "CTRL-EVENT-EAP-NOTIFICATION" prefix
* added 'disconnect' command to control interface for setting
wpa_supplicant in state where it will not associate before
'reassociate' command has been used
* added support for getting scan results through control interface
* added support for wired authentication (IEEE 802.1X on wired
Ethernet); driver interface 'wired'
* added support for sending TLS alerts
* added support for 'any' SSID wildcard; if ssid is not configured or
is set to an empty string, any SSID will be accepted for non-WPA AP
* added support for asking PIN (for SIM) from frontends (e.g.,
wpa_cli);
* added support for using external devices (e.g., a smartcard) for
private key operations in EAP-TLS (CONFIG_SMARTCARD=y in .config);
* added experimental support for EAP-PAX
* added monitor mode for wpa_cli
-------------------------------------------------------------------
Mon Jul 11 15:46:53 CEST 2005 - jg@suse.de
- update to 0.3.9, changes:
* modified the EAP workaround that accepts EAP-Success with
incorrect Identifier to be even less strict about verification
in order to interoperate with some authentication servers
* fixed RSN IE in 4-Way Handshake message 2/4 for the case where
Authenticator rejects PMKSA caching attempt and the driver is
not using assoc_info events
* fixed a possible double free in EAP-TTLS fast-reauthentication
when identity or password is entered through control interface
* added -P<pid file> argument for wpa_supplicant to write the
current process id into a file
* driver_madwifi: fixed association in plaintext mode
* driver_madwifi: added preliminary support for compiling against
'BSD' branch of madwifi CVS tree
* added EAP workaround for PEAPv1 session resumption: allow outer,
i.e., not tunneled, EAP-Success to terminate session since; this
can be disabled with eap_workaround=0
* driver_ipw: updated driver structures to match with ipw2200-1.0.4
(note: ipw2100-1.1.0 is likely to require an update to work with
this)
* driver_broadcom: fixed couple of memory leaks in scan result
processing
- removed pidfile patch in favour of the new upstream
implementation
-------------------------------------------------------------------
Mon Mar 21 11:36:26 CET 2005 - jg@suse.de
- creating directory /var/run/wpa_supplicant when needed (bug 74023)
-------------------------------------------------------------------
Mon Feb 14 09:58:59 CET 2005 - jg@suse.de
- update to 0.3.8, changes:
* fixed EAPOL-Key validation to drop packets with invalid Key
Data Length; such frames could have crashed wpa_supplicant due
to buffer overflow
-------------------------------------------------------------------
Mon Feb 7 17:00:37 CET 2005 - jg@suse.de
- update to 0.3.7-pre, changes:
* fixed WPA/RSN IE verification in message 3 of 4-Way Handshake
when using drivers that take care of AP selection (e.g., when
using ap_scan=2)
* fixed reprocessing of pending request after ctrl_iface requests
for identity/password/otp
* fixed ctrl_iface requests for identity/password/otp in Phase 2
of EAP-PEAP and EAP-TTLS
* all drivers using driver_wext: set interface up and select
Managed mode when starting wpa_supplicant; set interface down
when exiting
* renamed driver_ipw2100.c to driver_ipw.c since it now supports
both ipw2100 and ipw2200
* fixed a busy loop introduced in v0.3.5 for scan result
processing when no matching AP is found
* added a workaround for an interoperability issue with a Cisco AP
when using WPA2-PSK
* fixed non-WPA IEEE 802.1X to use the same authentication timeout
as WPA with IEEE 802.1X
* fixed issues with 64-bit CPUs and SHA1 cleanup in previous
version (e.g., segfault when processing EAPOL-Key frames)
* fixed EAP workaround and fast reauthentication configuration for
RSN pre-authentication
* added support for blacklisting APs that fail or timeout
authentication in ap_scan=1 mode so that all APs are tried in
cases where the ones with strongest signal level are failing
authentication
* fixed CA certificate loading after a failed EAP-TLS/PEAP/TTLS
authentication attempt
* added preliminary support for IBSS (ad-hoc) mode configuration
* added optional support for GNU Readline and History Libraries
for wpa_cli (CONFIG_READLINE)
* added couple of workarounds for interoperability issues with a
Cisco AP when using WPA2
* fixed private key loading for cases where passphrase is not set
* improved recovery from PMKID mismatches by requesting full EAP
authentication in case of failed PMKSA caching attempt
* driver_ndis: added support for NDIS NdisMIncidateStatus() events
* driver_ndis: use ADD_WEP/REMOVE_WEP when configuring WEP keys
* added support for driver interfaces to replace the interface
name based on driver/OS specific mapping, e.g., in case of
driver_ndis, this allows the beginning of the adapter
description to be used as the interface name
* driver_ndis: enable radio before starting scanning, disable
radio when exiting
* added KEY_MGMT_802_1X_NO_WPA as a new key_mgmt type so that
driver interface can distinguish plaintext and IEEE 802.1X
(no WPA) authentication
* fixed static WEP key configuration to use broadcast/default type
for all keys
* driver_ndis: added legacy WPA capability detection for non-WPA2
drivers
* added support for setting static WEP keys for IEEE 802.1X
without dynamic WEP keying (eapol_flags=0)
* added support for reading PKCS#12 (PFX) files (as a replacement
for PEM/DER) to get certificate and private key (CONFIG_PKCS12)
* added new ap_scan mode, ap_scan=2, for drivers that take care of
association, but need to be configured with security policy and
SSID, e.g., ndiswrapper and NDIS driver
-------------------------------------------------------------------
Thu Jan 13 12:32:51 CET 2005 - jg@suse.de
- update to 0.2.6, changes:
* added driver interface for Intel ipw2100 driver
* fixed a bug in PMKSA cache processing: skip sending of
EAPOL-Start only if there is a PMKSA cache entry for the
current AP
* fixed error handling for case where reading of scan results
fails: must schedule a new scan or wpa_supplicant will remain
waiting forever
* set pairwise/group cipher suite for non-WPA IEEE 802.1X to
WEP-104 if keys are not configured to be used; this fixes
IEEE 802.1X mode with drivers that use this information to
configure whether Privacy bit can be in Beacon frames
(e.g., ndiswrapper)
* improved downgrade attack detection in IE verification of
msg 3/4: verify both WPA and RSN IEs, if present, not only the
selected one; reject the AP if an RSN IE is found in msg 3/4,
but not in Beacon or Probe Response frame, and RSN is enabled in
wpa_supplicant configuration
* fixed WPA msg 3/4 processing to allow Key Data field contain
other IEs than just one WPA IE
* modified association event handler to set portEnabled = FALSE
before clearing port Valid in order to reset EAP state machine
and avoid problems with new authentication getting ignored because
of state machines ending up in AUTHENTICATED/SUCCESS state based
on old information
- removed obsolete ipw2100 patch
- added wpa_supplicant.fig to filelist
-------------------------------------------------------------------
Fri Oct 22 12:47:44 CEST 2004 - jg@suse.de
- update to 0.2.5, changes:
* wpa_cli: fixed parsing of -p <path> command line argument
* fixed parsing of wep_tx_keyidx
* fixed couple of errors in PCSC handling that could have caused
random-looking errors for EAP-SIM
* PEAPv1: fixed tunneled EAP-Success reply handling to reply with
TLS ACK, not tunneled EAP-Success
* PEAPv1: added support for terminating PEAP authentication on
tunneled EAP-Success message
* PEAPv1: changed phase1 option peaplabel to use default to 0, i.e.,
to the old label for key derivation; previously, the default was 1,
but it looks like most existing PEAPv1 implementations use the old
label which is thus more suitable default option
* changed SSID configuration in driver_wext.c (used by many driver
interfaces) to use ssid_len+1 as the length for SSID since some
Linux drivers expect this
* fixed couple of unaligned reads in scan result parsing to fix WPA
connection on some platforms (e.g., ARM)
- disabled madwifi support on ppc
-------------------------------------------------------------------
Wed Sep 29 00:36:22 CEST 2004 - jg@suse.de
- added support for ipw2100 driver
-------------------------------------------------------------------
Tue Aug 31 16:57:27 CEST 2004 - jg@suse.de
- added support for writing pid-file
-------------------------------------------------------------------
Mon Aug 2 18:52:39 CEST 2004 - jg@suse.de
- fixed build on non-x86 platforms
-------------------------------------------------------------------
Mon Aug 2 17:35:57 CEST 2004 - jg@suse.de
- update to version 0.2.4, important changes:
- support for new EAP authentication methods:
EAP-TTLS/EAP-MD5-Challenge
EAP-TTLS/EAP-GTC
EAP-TTLS/EAP-MSCHAPv2
EAP-TTLS/EAP-TLS
EAP-TTLS/MSCHAPv2
EAP-TTLS/MSCHAP
EAP-TTLS/PAP
EAP-TTLS/CHAP
EAP-PEAP/TLS
EAP-PEAP/GTC
EAP-PEAP/MD5-Challenge
EAP-GTC
EAP-TTLS/EAP-OTP, EAP-PEAPv0/OTP, EAP-PEAPv1/OTP, EAP-OTP
- support for ATMEL AT76C5XXX driver
- support for madwifi driver
- lots of minor changes, see ChangeLog
- added km_wlan to needforbuild (driver source of madwifi is
needed)
-------------------------------------------------------------------
Thu Jun 17 14:40:13 CEST 2004 - jg@suse.de
- Initial package
Reference in New Issue View Git Blame Copy Permalink