aboutsummaryrefslogtreecommitdiffstats
path: root/package/network/services/hostapd
Commit message (Collapse)AuthorAgeFilesLines
* wpa_supplicant: fix beacon_int configuration optionJo-Philipp Wich2013-10-181-3/+3
| | | | | | | | | wpa_supplicant expects beacon_int instead of beacon_interval in its config file. Signed-off-by: Bruno Randolf <br1@einfach.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38451 3c298f89-4303-0410-b956-a3cf2f4a3e73
* hostapd: recognize 8021x as an authentication modeFelix Fietkau2013-10-081-1/+1
| | | | | | | | | | | | | | Currently, in order to configure the authentication daemon in 8021x mode, we need to set wireless.@wifi-iface[0].encryption="wpa" Though it works it confuses folks as 8021x is using WEP encryption and not WPA. Therefore the terminology itself is confusing. This change adds 8021x as a recognized string for 8021x authentication. Signed-off-by: Mathieu Olivari <mathieu@qca.qualcomm.com> Signed-off-by: Luis R. Rodriguez <mcgrof@qca.qualcomm.com> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38339 3c298f89-4303-0410-b956-a3cf2f4a3e73
* hostapd: add external registrar supportFelix Fietkau2013-10-081-0/+3
| | | | | | | | | | | | | Setting wireless.@wifi-iface[N].ext_registrar=1 will enable UPNP advertising and add an external registrar to the interface this vif belongs to (br-lan if the vif is included in the LAN bridge). By enabling this we append upnp_iface=xxx to the hostapd config file. Signed-off-by: Sujith Manoharan <c_manoha@qca.qualcomm.com> Signed-off-by: Mathieu Olivari <mathieu@qca.qualcomm.com> Signed-off-by: Luis R. Rodriguez <mcgrof@qca.qualcomm.com> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38338 3c298f89-4303-0410-b956-a3cf2f4a3e73
* hostapd: enable WPS2 support on hostapd-full.configFelix Fietkau2013-10-081-1/+2
| | | | | | | | | | Enable CONFIG_WPS2 for hostapd. This is required to support options like Virtual Push Button in WPS. Signed-off-by: Sujith Manoharan <c_manoha@qca.qualcomm.com> Signed-off-by: Luis R. Rodriguez <mcgrof@qca.qualcomm.com> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38337 3c298f89-4303-0410-b956-a3cf2f4a3e73
* hostapd: fix hostapd RSN preauthentication PMKSA cachingFelix Fietkau2013-10-081-4/+21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In 2009 OpenWrt's hostapd config added an "auth_cache" boolean to be used to address a reported issue #12129 [0] on a forum [1]. The reported issue on the ticket is different that the one described on the forum. The commit was r33359. This change broke proper RSN preauthentication [2] [3] [4] expectations on hostapd's configuration for WPA2 and this in turn disabled PMKSA caching and Opportunistic Key Caching. This change: * Leaves the "auth_cache" to be used only for WPA networks for those looking to use this as a workaround to a reported issue but annotates a warning over its usage. * Separate "auth_cache" from WPA2 RSN preauthentication, leaving WPA2 RSN preauthentication to enabled only with "rsn_preauth" with the expected and recommended settings. * Adds a new WPA2 RSN preauthentication "rsn_preauth_testing" to be used when evaluating funcionality for WPA2 RSN preauthentication with the expected and recommended settings with the only difference so far with what should be enabled by default to disable Opportunistic Key Caching. Disabling the PMKSA cache should mean the STA could not roam off and back onto the AP that had PMKSA caching disabled and would require a full authentication cycle. This fixes this for WPA2 networks with RSN preauthentication enabled. This change should be applied to AA as well as trunk. TL DR; The issue described on the forum has to do with failure of a STA being able to try to authenticate again with the AP if it failed its first try. This may have been an issue with hostapd in 2009 but as per some tests I cannot reproduce this today on a WPA2 network. The issue described on the ticket alludes to a security issue with the design of using a Radius server to authenticate to an AP. The issue vaguely alludes to the circumstances of zapping a user, deleting their authentication credentials to log in to the network, and that if RSN preauthentication is enabled with PMKSA caching that the user that was zapped would still be able to authenticate. Lets treat these as separate issues. I cannot reproduce the first issue reported on the forums of not being able to authenticate anymore on a WPA2 network. The issue reported on the ticket modified WPA2 RSN preauthentication by adding two fields to the hostapd configuration if auth_cache was enabled: * disable_pmksa_caching=1 * okc=0 The first one disables PMKSA authentication cache. The second one disables Opportunistic Key Caching. The issue reported on the ticket was fixed by implementing a workaround in hostapd's configuration. Disabling PMKSA caching breaks proper use of WPA2 RSN pre authentication. The usage of disable_pmksa_caching=1 prevents hostapd from adding PMKSA entries into its cache when a successful 802.1x authentication occurs. In practice RSN preauthentication would trigger a STA to perform authentication with other APs on the same SSID, it would then have its own supplicant PMKSA cache held. If a STA roams between one AP to another no new authenitcation would need to be performed as the new AP would already have authenticated the STA. The purpose of the PMKSA cache on the AP side would be for the AP to use the same PMKID for a STA when the STA roams off onto another BSSID and later comes back to it. Disabling Opportunistic Key Caching could help the reported issue as well but its not the correct place to address this. Opportunistic Key Caching enables an AP with different interfaces to share the PMKSA cache. Its a technical enhancement and disabling it would be useful to let a testing suite properly test for RSN preauthentication given that otherwise Opportunistic Key Caching would enable an interface being tested to derive its own derive the PMKSA entry. In production though okc=1 should be enabled to help with RSN preauthentication. The real fix for this particular issue outside of the scope of hostapd's configuration and it should not be dealt with as a workaround to its configuration and breaking expected RSN preauthentication and technical optimizations. Revert this change and enable users to pick and choose to enable or disable disable_pmksa_caching and okc expecting them to instead have read clearly more what these do. As for the core issure ported, the correct place to fix this is to enable a sort of messaging between the RADIUS server and its peers so that if caching for authentication is enabled that cache can be cleared upon user credential updates. Updating a user password (not just zapping a user) is another possible issue that would need to be resolved here. Another part of the solution might be to reduce the cache timing to account for any systematic limitations (RADIUS server not able to ask peers to clear cache might be one). [0] https://dev.openwrt.org/changeset/33359 [1] https://forum.openwrt.org/viewtopic.php?id=19596 [2] http://wireless.kernel.org/en/users/Documentation/hostapd#IEEE_802.11i.2FRSN.2FWPA2_pre-authentication [3] http://wireless.kernel.org/en/users/Documentation/wpa_supplicant#RSN_preauthentication [4] http://wiki.openwrt.org/doc/recipes/rsn_preauthentication Signed-off-by: Luis R. Rodriguez <mcgrof@do-not-panic.com> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38336 3c298f89-4303-0410-b956-a3cf2f4a3e73
* hostapd: Add WPS unconfigured & WPS pin method supportFelix Fietkau2013-10-081-3/+13
| | | | | | | Signed-off-by: Mathieu Olivari <mathieu@qca.qualcomm.com> Signed-off-by: Luis R. Rodriguez <mcgrof@qca.qualcomm.com> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38335 3c298f89-4303-0410-b956-a3cf2f4a3e73
* hostapd: Add eap_reauth_period config optionFelix Fietkau2013-10-081-0/+2
| | | | | | | | | | | | This adds the eap_reauth_period to be used for modifying the RADIUS server reauthentication authentication period, a parameter that gets passed directly to the hostapd configuration file. Signed-off-by: Mathieu Olivari <mathieu@qca.qualcomm.com> Signed-off-by: Luis R. Rodriguez <mcgrof@qca.qualcomm.com> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38334 3c298f89-4303-0410-b956-a3cf2f4a3e73
* hostapd: adjust the md5sum for the uploaded source tarball (fixes #14155)Felix Fietkau2013-09-141-1/+1
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37990 3c298f89-4303-0410-b956-a3cf2f4a3e73
* hostapd: fix typo in version numberFelix Fietkau2013-08-081-1/+1
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37742 3c298f89-4303-0410-b956-a3cf2f4a3e73
* hostapd: fix ubus reconnect handlingFelix Fietkau2013-08-081-1/+18
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37741 3c298f89-4303-0410-b956-a3cf2f4a3e73
* hostapd: add a build variant for wpa_supplicant with p2p (aka Wi-Fi Direct) ↵Felix Fietkau2013-08-082-2/+428
| | | | | | | | support Signed-off-by: Felix Fietkau <nbd@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37739 3c298f89-4303-0410-b956-a3cf2f4a3e73
* hostapd: update to latest version (20130707)Felix Fietkau2013-08-0824-284/+83
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37738 3c298f89-4303-0410-b956-a3cf2f4a3e73
* hostapd: Settings for DAE/CoA serverFelix Fietkau2013-08-061-0/+7
| | | | | | | | | | | | | | | | | | | | | | hostapd supports "Dynamic Authorization Extensions", making it possible to forcibly disconnect a user by sending it a RADIUS "Disconnect-Request" packet. I've added three new variables to enable setting of the "radius_das_client" and "radius_das_port" variables in the hostapd configuration, which enable these extensions. * dae_client - IP of the client that can send disconnect requests * dae_secret - shared secret for DAE packets These are combined into the "radius_das_client" option in hostapd.conf To enable the server, both dae_client and dae_secret must be set. * dae_port - optional, default value is 3799 as specified in RFC 5176 Signed-off-by: Martijn van de Streek <martijn@vandestreek.net> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37734 3c298f89-4303-0410-b956-a3cf2f4a3e73
* hostapd: Fix WDS/WEP usageFelix Fietkau2013-08-061-0/+156
| | | | | | | | | WEP in WDS is currently broken in hostapd. Add a patch to fix the issue. Signed-off-by: Sujith Manoharan <c_manoha@qca.qualcomm.com> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37733 3c298f89-4303-0410-b956-a3cf2f4a3e73
* hostapd: Refresh patchesFelix Fietkau2013-08-067-18/+18
| | | | | | Signed-off-by: Sujith Manoharan <c_manoha@qca.qualcomm.com> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37731 3c298f89-4303-0410-b956-a3cf2f4a3e73
* hostapd: Add an option to disable beaconingFelix Fietkau2013-08-061-0/+45
| | | | | | | | | | | | Add a patch for hostapd that introduces a config option "start_disabled" which can be used to bring up an AP interface with beaconing disabled. This is useful in a Repeater-AP setup where the Repeater AP has to start beaconing only after the WDS link has been established. Signed-off-by: Sujith Manoharan <c_manoha@qca.qualcomm.com> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37730 3c298f89-4303-0410-b956-a3cf2f4a3e73
* hostapd: truncate default mac file before adding entries to it (#13797)Jo-Philipp Wich2013-07-012-1/+3
| | | | git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37114 3c298f89-4303-0410-b956-a3cf2f4a3e73
* hostapd: fix multi-ssid and AP+STA, clean up codeFelix Fietkau2013-06-307-47/+98
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37111 3c298f89-4303-0410-b956-a3cf2f4a3e73
* hostapd: update to latest git versionFelix Fietkau2013-06-3027-197/+231
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37110 3c298f89-4303-0410-b956-a3cf2f4a3e73
* hostapd: fix superflous comaJohn Crispin2013-06-241-1/+1
| | | | | | | | | | this cause the wps trigegr to be copied to the wrong place https://dev.openwrt.org/ticket/13753 Signed-off-by: John Crispin <blogic@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37031 3c298f89-4303-0410-b956-a3cf2f4a3e73
* hostapd: remove old button hotplug scriptJohn Crispin2013-06-211-7/+2
| | | | | | Signed-off-by: John Crispin <blogic@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36991 3c298f89-4303-0410-b956-a3cf2f4a3e73
* hostapd: correctly handle macfile uci optionJo-Philipp Wich2013-06-171-9/+24
| | | | | | | | | | | | | Make hostapd.sh correctly handle the macfile uci option. Such option specifies the macfile name to pass into the hostapd configuration file. Moreover, if a maclist option has been specified, copy the macfile before appending new entries. Signed-off-by: Antonio Quartulli <antonio@open-mesh.com> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36944 3c298f89-4303-0410-b956-a3cf2f4a3e73
* hostapd: enable 802.11r for the -full variant (#13250)Felix Fietkau2013-05-031-1/+1
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36533 3c298f89-4303-0410-b956-a3cf2f4a3e73
* hostapd: return the frequency to some ubus calls to make integration easierFelix Fietkau2013-04-231-1/+3
| | | | git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36410 3c298f89-4303-0410-b956-a3cf2f4a3e73
* hostapd: update to 2013-04-05Felix Fietkau2013-04-2223-114/+105
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36376 3c298f89-4303-0410-b956-a3cf2f4a3e73
* build: consistently use 'depends on' instead of 'depends'Felix Fietkau2013-04-171-3/+3
| | | | | | | | make the syntax more compatible with kernel menuconfig Signed-off-by: Felix Fietkau <nbd@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36351 3c298f89-4303-0410-b956-a3cf2f4a3e73
* hostapd: fix build errors on supplicant-only buildsFelix Fietkau2013-03-182-4/+6
| | | | git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36085 3c298f89-4303-0410-b956-a3cf2f4a3e73
* hostapd: initial prototype of an ubus bindingFelix Fietkau2013-03-175-3/+694
| | | | | | | Supports listing, removing and banning clients, and hooking into probe/assoc/auth requests via object subscribe. git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36081 3c298f89-4303-0410-b956-a3cf2f4a3e73
* [hostapd] use new button schemeJohn Crispin2013-03-132-0/+7
| | | | | | Signed-off-by: John Crispin <blogic@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36004 3c298f89-4303-0410-b956-a3cf2f4a3e73
* hostapd: fix client reassociation after too many ACK failuresFelix Fietkau2013-03-121-0/+11
| | | | git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35973 3c298f89-4303-0410-b956-a3cf2f4a3e73
* hostapd: include the madwifi headers in the package directory to avoid ↵Felix Fietkau2013-03-056-1/+2454
| | | | | | compile breakage if the madwifi build fails git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35893 3c298f89-4303-0410-b956-a3cf2f4a3e73
* hostapd: update to git version 2013-03-02Felix Fietkau2013-03-0428-340/+154
| | | | git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35887 3c298f89-4303-0410-b956-a3cf2f4a3e73
* hostapd: fix the scan wait patch for multiple interfacesFelix Fietkau2013-02-161-21/+13
| | | | git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35630 3c298f89-4303-0410-b956-a3cf2f4a3e73
* hostapd: add back the patch that waits for interface bringup in ht40, it got ↵Felix Fietkau2013-02-161-0/+73
| | | | | | lost with the update git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35619 3c298f89-4303-0410-b956-a3cf2f4a3e73
* mac80211/hostapd: short_preamble is a per-vif option and should be enabled ↵Felix Fietkau2013-02-111-0/+4
| | | | | | by default git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35565 3c298f89-4303-0410-b956-a3cf2f4a3e73
* hostapd: don't configure wpa_supplicant with empty password="" if no ↵Jo-Philipp Wich2013-01-281-1/+1
| | | | | | password is specified (#12912) git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35358 3c298f89-4303-0410-b956-a3cf2f4a3e73
* Remove remaining etrax referencesJohn Crispin2013-01-021-1/+1
| | | | git-svn-id: svn://svn.openwrt.org/openwrt/trunk@34968 3c298f89-4303-0410-b956-a3cf2f4a3e73
* wpa_supplicant.sh: always use parameters from the current sectionFelix Fietkau2012-12-161-7/+2
| | | | | | | | | | | | | | Using variables from the outer scope unnecessarily complicates the code and leads to issues. This patch fixes the bug when having an "adhoc" wifi-iface section before a "sta" section prevents wpa_supplicant from using the key specified in the corresponding section as it tries to use the "adhoc" key instead (1 by default). Signed-off-by: Paul Fertser <fercerpav@gmail.com> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@34716 3c298f89-4303-0410-b956-a3cf2f4a3e73
* mac80211, hostapd: Fix macfilter for multi bssid setupsFelix Fietkau2012-12-041-0/+21
| | | | | | | | | | | Previously only the first macfilter configuration would have been used on all interfaces. However, the configuration was always done per vif already. Hence, move the macfilter setup into hostapd.sh where and create one mac list file per vif. Signed-off-by: Helmut Schaa <helmut.schaa@googlemail.com> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@34470 3c298f89-4303-0410-b956-a3cf2f4a3e73
* [package] hostapd: include sys/stat.h for a struct stat definitionFlorian Fainelli2012-11-214-11/+19
| | | | | | | | Some libcs need this header to be explicitely included (e.g: musl) Signed-off-by: Florian Fainelli <florian@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@34295 3c298f89-4303-0410-b956-a3cf2f4a3e73
* hostapd: merge some pending fixes (fixes assoc errors when moving between ↵Felix Fietkau2012-10-252-1/+43
| | | | | | vaps of the same wifi device) git-svn-id: svn://svn.openwrt.org/openwrt/trunk@33919 3c298f89-4303-0410-b956-a3cf2f4a3e73
* hostapd: merge a security fix for a TLS message buffer overflow (CVE-2012-4445)Felix Fietkau2012-10-171-0/+17
| | | | git-svn-id: svn://svn.openwrt.org/openwrt/trunk@33815 3c298f89-4303-0410-b956-a3cf2f4a3e73
* hostapd: remove redundant MAINTAINER linesFelix Fietkau2012-10-101-4/+0
| | | | git-svn-id: svn://svn.openwrt.org/openwrt/trunk@33692 3c298f89-4303-0410-b956-a3cf2f4a3e73
* packages: sort network related packages into package/network/Felix Fietkau2012-10-1040-0/+4799
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@33688 3c298f89-4303-0410-b956-a3cf2f4a3e73
generated by cgit v1.2.3 (git 2.25.1) at 2024-07-08 16:30:58 +0000