aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* ralink: add support for the mt7530 eval boardJohn Crispin2013-10-085-40/+177
| | | | | | Signed-off-by: John Crispin <blogic@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38345 3c298f89-4303-0410-b956-a3cf2f4a3e73
* ralink: add missing header file to mt7530 driverJohn Crispin2013-10-081-30/+49
| | | | | | Signed-off-by: John Crispin <blogic@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38344 3c298f89-4303-0410-b956-a3cf2f4a3e73
* lantiq: fix up diag.shJohn Crispin2013-10-081-2/+0
| | | | | | | | init no longer exists as a parameter Signed-off-by: John Crispin <blogic@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38342 3c298f89-4303-0410-b956-a3cf2f4a3e73
* kernel: dont rely on library modules to be depended onJohn Crispin2013-10-081-0/+11
| | | | | | | | fixes https://dev.openwrt.org/ticket/14257 Signed-off-by: John Crispin <blogic@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38341 3c298f89-4303-0410-b956-a3cf2f4a3e73
* kernel: remove debug code from module insert scriptJohn Crispin2013-10-081-1/+0
| | | | | | Signed-off-by: John Crispin <blogic@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38340 3c298f89-4303-0410-b956-a3cf2f4a3e73
* hostapd: recognize 8021x as an authentication modeFelix Fietkau2013-10-081-1/+1
| | | | | | | | | | | | | | Currently, in order to configure the authentication daemon in 8021x mode, we need to set wireless.@wifi-iface[0].encryption="wpa" Though it works it confuses folks as 8021x is using WEP encryption and not WPA. Therefore the terminology itself is confusing. This change adds 8021x as a recognized string for 8021x authentication. Signed-off-by: Mathieu Olivari <mathieu@qca.qualcomm.com> Signed-off-by: Luis R. Rodriguez <mcgrof@qca.qualcomm.com> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38339 3c298f89-4303-0410-b956-a3cf2f4a3e73
* hostapd: add external registrar supportFelix Fietkau2013-10-081-0/+3
| | | | | | | | | | | | | Setting wireless.@wifi-iface[N].ext_registrar=1 will enable UPNP advertising and add an external registrar to the interface this vif belongs to (br-lan if the vif is included in the LAN bridge). By enabling this we append upnp_iface=xxx to the hostapd config file. Signed-off-by: Sujith Manoharan <c_manoha@qca.qualcomm.com> Signed-off-by: Mathieu Olivari <mathieu@qca.qualcomm.com> Signed-off-by: Luis R. Rodriguez <mcgrof@qca.qualcomm.com> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38338 3c298f89-4303-0410-b956-a3cf2f4a3e73
* hostapd: enable WPS2 support on hostapd-full.configFelix Fietkau2013-10-081-1/+2
| | | | | | | | | | Enable CONFIG_WPS2 for hostapd. This is required to support options like Virtual Push Button in WPS. Signed-off-by: Sujith Manoharan <c_manoha@qca.qualcomm.com> Signed-off-by: Luis R. Rodriguez <mcgrof@qca.qualcomm.com> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38337 3c298f89-4303-0410-b956-a3cf2f4a3e73
* hostapd: fix hostapd RSN preauthentication PMKSA cachingFelix Fietkau2013-10-081-4/+21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In 2009 OpenWrt's hostapd config added an "auth_cache" boolean to be used to address a reported issue #12129 [0] on a forum [1]. The reported issue on the ticket is different that the one described on the forum. The commit was r33359. This change broke proper RSN preauthentication [2] [3] [4] expectations on hostapd's configuration for WPA2 and this in turn disabled PMKSA caching and Opportunistic Key Caching. This change: * Leaves the "auth_cache" to be used only for WPA networks for those looking to use this as a workaround to a reported issue but annotates a warning over its usage. * Separate "auth_cache" from WPA2 RSN preauthentication, leaving WPA2 RSN preauthentication to enabled only with "rsn_preauth" with the expected and recommended settings. * Adds a new WPA2 RSN preauthentication "rsn_preauth_testing" to be used when evaluating funcionality for WPA2 RSN preauthentication with the expected and recommended settings with the only difference so far with what should be enabled by default to disable Opportunistic Key Caching. Disabling the PMKSA cache should mean the STA could not roam off and back onto the AP that had PMKSA caching disabled and would require a full authentication cycle. This fixes this for WPA2 networks with RSN preauthentication enabled. This change should be applied to AA as well as trunk. TL DR; The issue described on the forum has to do with failure of a STA being able to try to authenticate again with the AP if it failed its first try. This may have been an issue with hostapd in 2009 but as per some tests I cannot reproduce this today on a WPA2 network. The issue described on the ticket alludes to a security issue with the design of using a Radius server to authenticate to an AP. The issue vaguely alludes to the circumstances of zapping a user, deleting their authentication credentials to log in to the network, and that if RSN preauthentication is enabled with PMKSA caching that the user that was zapped would still be able to authenticate. Lets treat these as separate issues. I cannot reproduce the first issue reported on the forums of not being able to authenticate anymore on a WPA2 network. The issue reported on the ticket modified WPA2 RSN preauthentication by adding two fields to the hostapd configuration if auth_cache was enabled: * disable_pmksa_caching=1 * okc=0 The first one disables PMKSA authentication cache. The second one disables Opportunistic Key Caching. The issue reported on the ticket was fixed by implementing a workaround in hostapd's configuration. Disabling PMKSA caching breaks proper use of WPA2 RSN pre authentication. The usage of disable_pmksa_caching=1 prevents hostapd from adding PMKSA entries into its cache when a successful 802.1x authentication occurs. In practice RSN preauthentication would trigger a STA to perform authentication with other APs on the same SSID, it would then have its own supplicant PMKSA cache held. If a STA roams between one AP to another no new authenitcation would need to be performed as the new AP would already have authenticated the STA. The purpose of the PMKSA cache on the AP side would be for the AP to use the same PMKID for a STA when the STA roams off onto another BSSID and later comes back to it. Disabling Opportunistic Key Caching could help the reported issue as well but its not the correct place to address this. Opportunistic Key Caching enables an AP with different interfaces to share the PMKSA cache. Its a technical enhancement and disabling it would be useful to let a testing suite properly test for RSN preauthentication given that otherwise Opportunistic Key Caching would enable an interface being tested to derive its own derive the PMKSA entry. In production though okc=1 should be enabled to help with RSN preauthentication. The real fix for this particular issue outside of the scope of hostapd's configuration and it should not be dealt with as a workaround to its configuration and breaking expected RSN preauthentication and technical optimizations. Revert this change and enable users to pick and choose to enable or disable disable_pmksa_caching and okc expecting them to instead have read clearly more what these do. As for the core issure ported, the correct place to fix this is to enable a sort of messaging between the RADIUS server and its peers so that if caching for authentication is enabled that cache can be cleared upon user credential updates. Updating a user password (not just zapping a user) is another possible issue that would need to be resolved here. Another part of the solution might be to reduce the cache timing to account for any systematic limitations (RADIUS server not able to ask peers to clear cache might be one). [0] https://dev.openwrt.org/changeset/33359 [1] https://forum.openwrt.org/viewtopic.php?id=19596 [2] http://wireless.kernel.org/en/users/Documentation/hostapd#IEEE_802.11i.2FRSN.2FWPA2_pre-authentication [3] http://wireless.kernel.org/en/users/Documentation/wpa_supplicant#RSN_preauthentication [4] http://wiki.openwrt.org/doc/recipes/rsn_preauthentication Signed-off-by: Luis R. Rodriguez <mcgrof@do-not-panic.com> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38336 3c298f89-4303-0410-b956-a3cf2f4a3e73
* hostapd: Add WPS unconfigured & WPS pin method supportFelix Fietkau2013-10-081-3/+13
| | | | | | | Signed-off-by: Mathieu Olivari <mathieu@qca.qualcomm.com> Signed-off-by: Luis R. Rodriguez <mcgrof@qca.qualcomm.com> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38335 3c298f89-4303-0410-b956-a3cf2f4a3e73
* hostapd: Add eap_reauth_period config optionFelix Fietkau2013-10-081-0/+2
| | | | | | | | | | | | This adds the eap_reauth_period to be used for modifying the RADIUS server reauthentication authentication period, a parameter that gets passed directly to the hostapd configuration file. Signed-off-by: Mathieu Olivari <mathieu@qca.qualcomm.com> Signed-off-by: Luis R. Rodriguez <mcgrof@qca.qualcomm.com> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38334 3c298f89-4303-0410-b956-a3cf2f4a3e73
* mac80211: wl12xx: build them againHauke Mehrtens2013-10-071-1/+2
| | | | | | | | | | | | | WL_TI is bool but was set to =m, which deactivated it. Now it is set to =y and should be activated in the config so the wl12xx driver gets build. This closes #14212. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38333 3c298f89-4303-0410-b956-a3cf2f4a3e73
* mac80211: brcmfmac: BRCMFMAC_USB was not set in configHauke Mehrtens2013-10-071-1/+2
| | | | | | | | | Somehow BRCMFMAC_USB was not set in the build and brcmfmac.ko did not had usb support. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38332 3c298f89-4303-0410-b956-a3cf2f4a3e73
* [package] openvpn: switch to new procd init script styleLuka Perkov2013-10-072-65/+14
| | | | | | Signed-off-by: Luka Perkov <luka@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38331 3c298f89-4303-0410-b956-a3cf2f4a3e73
* [package] polarssl: update to 1.2.9Luka Perkov2013-10-072-5/+5
| | | | | | Signed-off-by: Luka Perkov <luka@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38330 3c298f89-4303-0410-b956-a3cf2f4a3e73
* lantiq: fix ltq_ptm compileJohn Crispin2013-10-072-2/+2
| | | | | | Signed-off-by: John Crispin <blogic@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38329 3c298f89-4303-0410-b956-a3cf2f4a3e73
* lantiq: experia v8 fixesJohn Crispin2013-10-073-4/+4
| | | | | | Signed-off-by: John Crispin <blogic@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38328 3c298f89-4303-0410-b956-a3cf2f4a3e73
* lantiq: fix fritz3370 dts fileJohn Crispin2013-10-071-55/+50
| | | | | | Signed-off-by: John Crispin <blogic@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38327 3c298f89-4303-0410-b956-a3cf2f4a3e73
* lantiq: fix fritz image generationJohn Crispin2013-10-072-8/+10
| | | | | | Signed-off-by: John Crispin <blogic@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38326 3c298f89-4303-0410-b956-a3cf2f4a3e73
* lantiq: fix eva partition split for squashfsJohn Crispin2013-10-071-49/+35
| | | | | | Signed-off-by: John Crispin <blogic@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38325 3c298f89-4303-0410-b956-a3cf2f4a3e73
* ralink: fix asiarf image generationJohn Crispin2013-10-073-6/+6
| | | | | | Signed-off-by: John Crispin <blogic@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38324 3c298f89-4303-0410-b956-a3cf2f4a3e73
* ralink: split mt7530 driver out of the gsw driverJohn Crispin2013-10-071-551/+602
| | | | | | Signed-off-by: John Crispin <blogic@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38323 3c298f89-4303-0410-b956-a3cf2f4a3e73
* ralink: build recovery images for dcs930 ip camJohn Crispin2013-10-072-1/+27
| | | | | | Signed-off-by: John Crispin <blogic@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38322 3c298f89-4303-0410-b956-a3cf2f4a3e73
* ralink: DIR610A1 Fix remaining issuesJohn Crispin2013-10-073-11/+16
| | | | | | | | | | | | This patch fixes: - Ethernet and Wireless LEDs - Wireless MAC Address - Remove whitespaces from dts file Signed-off-by: Flavio Silveira <fggs@terra.com.br> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38321 3c298f89-4303-0410-b956-a3cf2f4a3e73
* ralink: MT7620 eval board pinmux fixesJohn Crispin2013-10-071-1/+1
| | | | | | Signed-off-by: John Crispin <blogic@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38320 3c298f89-4303-0410-b956-a3cf2f4a3e73
* ralink: make cevt systick selectable via kconfigJohn Crispin2013-10-073-9/+15
| | | | | | Signed-off-by: John Crispin <blogic@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38319 3c298f89-4303-0410-b956-a3cf2f4a3e73
* ralink: fix mt7620a pinmuxJohn Crispin2013-10-071-44/+68
| | | | | | Signed-off-by: John Crispin <blogic@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38318 3c298f89-4303-0410-b956-a3cf2f4a3e73
* tools: add tool to generate dcs93xl imagesJohn Crispin2013-10-072-0/+40
| | | | | | Signed-off-by: John Crispin <blogic@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38317 3c298f89-4303-0410-b956-a3cf2f4a3e73
* odhcp6c: improve server selection, introduce "forceprefix" optionSteven Barth2013-10-072-4/+7
| | | | git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38314 3c298f89-4303-0410-b956-a3cf2f4a3e73
* [package] iproute2: update to 3.11Luka Perkov2013-10-075-18/+6
| | | | | | Signed-off-by: Luka Perkov <luka@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38313 3c298f89-4303-0410-b956-a3cf2f4a3e73
* brcm47xx: Cocci spatch "noderef"Hauke Mehrtens2013-10-071-0/+23
| | | | | | | | | | | sizeof when applied to a pointer typed expression gives the size of the pointer. Found by coccinelle spatch "misc/noderef.cocci" Signed-off-by: Thomas Meyer <thomas@m3y3r.de> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38312 3c298f89-4303-0410-b956-a3cf2f4a3e73
* brcm47xx: move clock detection patchesHauke Mehrtens2013-10-072-0/+31
| | | | | | | Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38311 3c298f89-4303-0410-b956-a3cf2f4a3e73
* brcm47xx: move and rename nvram gpio patchHauke Mehrtens2013-10-061-0/+19
| | | | | | | Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38310 3c298f89-4303-0410-b956-a3cf2f4a3e73
* brcm47xx: update early printk patchesHauke Mehrtens2013-10-067-116/+234
| | | | | | | | | | | Early printk was disabled because it caused hangs on some devices, the old patches were using the CFE console now we use the normal serial console, it is at a constant address. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38309 3c298f89-4303-0410-b956-a3cf2f4a3e73
* brcm47xx: update board detection patchesHauke Mehrtens2013-10-069-241/+227
| | | | | | | | | | | | Add patches like they are currently in the mainline mips tree and add some more pending patches for board detection. * Now the board name is shown under machine in /proc/cpuinfo. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38308 3c298f89-4303-0410-b956-a3cf2f4a3e73
* kernel: b53: add switch name into printk when it fails.Hauke Mehrtens2013-10-061-1/+1
| | | | | | | Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38307 3c298f89-4303-0410-b956-a3cf2f4a3e73
* brcm47xx: b44: fix some problems with the phyHauke Mehrtens2013-10-069-354/+526
| | | | | | | | | | | * do not try initialize a unused phy * some improvements to the phylib patch * do not turn the phy off when mac is off Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38306 3c298f89-4303-0410-b956-a3cf2f4a3e73
* ath9k: fix tx queueing issues after background scansFelix Fietkau2013-10-055-19/+60
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38304 3c298f89-4303-0410-b956-a3cf2f4a3e73
* build: extend menu with few ubifs optionsLuka Perkov2013-10-042-2/+44
| | | | | | Signed-off-by: Luka Perkov <luka@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38303 3c298f89-4303-0410-b956-a3cf2f4a3e73
* opkg: add support for SHA256 verificationSteven Barth2013-10-042-2/+4
| | | | | | | based on a patch by Evan Hunt <each@isc.org> Signed-off-by: Steven Barth <steven@midlink.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38302 3c298f89-4303-0410-b956-a3cf2f4a3e73
* kirkwood: add support for UBI (3.10.x)Luka Perkov2013-10-044-8/+54
| | | | | | Signed-off-by: Luka Perkov <luka@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38301 3c298f89-4303-0410-b956-a3cf2f4a3e73
* netifd: update to latest version, adds macvlan supportFelix Fietkau2013-10-031-2/+2
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38299 3c298f89-4303-0410-b956-a3cf2f4a3e73
* imx6: update upstream pcie patchesLuka Perkov2013-10-0316-118/+130
| | | | | | Signed-off-by: Luka Perkov <luka@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38298 3c298f89-4303-0410-b956-a3cf2f4a3e73
* kirkwood: enable dts compilationLuka Perkov2013-10-031-0/+6
| | | | | | | | In 3.10 we might build those, so for now just add this functionality. Signed-off-by: Luka Perkov <luka@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38297 3c298f89-4303-0410-b956-a3cf2f4a3e73
* kirkwood: fix initramfs imagesLuka Perkov2013-10-031-2/+4
| | | | | | Signed-off-by: Luka Perkov <luka@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38296 3c298f89-4303-0410-b956-a3cf2f4a3e73
* kirkwood: update patches and configuration (3.10)Luka Perkov2013-10-0334-869/+1638
| | | | | | Signed-off-by: Luka Perkov <luka@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38295 3c298f89-4303-0410-b956-a3cf2f4a3e73
* brcm47xx: add support for ipv6 in default network configHauke Mehrtens2013-10-021-58/+40
| | | | | | | | | | Modify /etc/init.d/netconfig to use UCI defaults for building the default network config, which includes appropriate defaults for IPV6. Signed-off-by: Nathan Hintz <nlhintz@hotmail.com> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38294 3c298f89-4303-0410-b956-a3cf2f4a3e73
* broadcom-diag: fix 'autoload' number of diag.koHauke Mehrtens2013-10-021-1/+1
| | | | | | | | | Change the autoload number from '5' to '05' so the module loads earlier (as intended). Signed-off-by: Nathan Hintz <nlhintz@hotmail.com> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38293 3c298f89-4303-0410-b956-a3cf2f4a3e73
* kernel: bgmac: fix BCM4707 patchHauke Mehrtens2013-10-021-2/+2
| | | | | | | | | The bool logic was the wrong way around. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38292 3c298f89-4303-0410-b956-a3cf2f4a3e73
* kernel: refresh patchesHauke Mehrtens2013-10-0211-65/+25
| | | | | | | Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38291 3c298f89-4303-0410-b956-a3cf2f4a3e73
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-03 03:02:56 +0000