Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
openSUSE:11.4:Update
wpa_supplicant
wpa_supplicant.changes
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File wpa_supplicant.changes of Package wpa_supplicant
------------------------------------------------------------------- Fri Oct 21 04:13:58 UTC 2011 - glin@suse.com - Add wpa_supplicant-add-ca-dbus-signal.patch to emit D-Bus signal when receiving a RADIUS server certificate. (bnc#574266) ------------------------------------------------------------------- Tue Sep 7 23:08:14 CEST 2010 - vbotka@suse.de - update to 0.7.3 * fixed fallback from failed PMKSA caching into full EAP authentication [Bug 355] * fixed issue with early D-Bus signals during initialization * fixed X.509 name handling in internal TLS * fixed WPS ER to use corrent Enrollee MAC Address in Credential * fixed scanning routines ot improve AP selection for WPS * added WPS workaround for open networks * fixed WPS Diffie-Hellman derivation to use correct public key length * fixed wpa_supplicant AP mode operations to ignore Supplicant and scan result events * improved SME operations with nl80211 * fixed WPS ER event_id handling in some cases * fixed some issues with bgscan simple to avoid unnecessary scans * fixed issue with l2_packet_ndis overlapped writes corrupting stack [Bug 328] * updated WinPcap to the latest stable version 4.1.2 in Windows installer update to 0.7.2 * nl80211: fixed number of issues with roaming * avoid unnecessary roaming if multiple APs with similar signal strength are present in scan results * add TLS client events and server probing to ease design of automatic detection of EAP parameters * add option for server certificate matching (SHA256 hash of the certificate) instead of trusted CA certificate configuration * bsd: Cleaned up driver wrapper and added various low-level configuration options * wpa_gui-qt4: do not show too frequent WPS AP available events as tray messages * TNC: fixed issues with fragmentation * EAP-TNC: add Flags field into fragment acknowledgement (needed to interoperate with other implementations; may potentially breaks compatibility with older wpa_supplicant/hostapd versions) * wpa_cli: added option for using a separate process to receive event messages to reduce latency in showing these (CFLAGS += -DCONFIG_WPA_CLI_FORK=y in .config to enable this) * maximum BSS table size can now be configured (bss_max_count) * BSSes to be included in the BSS table can be filtered based on configured SSIDs to save memory (filter_ssids) * fix number of issues with IEEE 802.11r/FT; this version is not backwards compatible with old versions * nl80211: add support for IEEE 802.11r/FT protocol (both over-the-air and over-the-DS) * add freq_list network configuration parameter to allow the AP selection to filter out entries based on the operating channel * add signal strength change events for bgscan; this allows more dynamic changes to background scanning interval based on changes in the signal strength with the current AP; this improves roaming within ESS quite a bit, e.g., with bgscan="simple:30:-45:300" in the network configuration block to request background scans less frequently when signal strength remains good and to automatically trigger background scans whenever signal strength drops noticeably (this is currently only available with nl80211) * add BSSID and reason code (if available) to disconnect event messages * wpa_gui-qt4: more complete support for translating the GUI with linguist and add German translation * fix DH padding with internal crypto code (mainly, for WPS) * do not trigger initial scan automatically anymore if there are no enabled networks ------------------------------------------------------------------- Fri May 28 12:49:53 CEST 2010 - vbotka@suse.de - Fix fallback from failed PMKSA caching into full EAP authentication (bnc 601501) ------------------------------------------------------------------- Sun Jan 31 13:13:46 UTC 2010 - aj@suse.de - Update to 0.7.1 (full changelog in wpa_supplicant/ChangeLog): * Cleanup of interfaces * dbus: added new DBus interface (fi.w1.wpa_supplicant1) * driver_nl80211: multiple updates to provide support for new Linux nl80211/mac80211 functionality - Remove wpa_supplicant-dbus-iface-segfault-fix.patch, does not apply at all. - Remove wpa_supplicant-dbus-reset-eapol.patch (merged upstream). - Disable patches that do not apply anymore but are not merged. ------------------------------------------------------------------- Mon Sep 28 08:44:02 UTC 2009 - lnussel@suse.de - simplify dbus config, allow introspection ------------------------------------------------------------------- Mon Sep 7 19:41:35 UTC 2009 - claes.backstrom@fsfe.org - Added rotation of log file with logrotate (bnc#508041) ------------------------------------------------------------------- Tue May 12 12:28:55 CEST 2009 - dmueller@suse.de - reenable logfile writing support to make d-bus activation work again (bnc#502957) ------------------------------------------------------------------- Tue Apr 7 13:02:49 CEST 2009 - hschaa@suse.de - Enable ralink driver (bnc#481380) - Enable nl80211 driver (bnc#485453) - Rebase all SUSE patches to 0.6.9 - Remove upstreamed patches - Update to 0.6.9 * driver_ndis: add PAE group address to the multicast address list to fix wired IEEE 802.1X authentication * fixed IEEE 802.11r key derivation function to match with the standard (note: this breaks interoperability with previous version) [Bug 303] * increased wpa_cli ping interval to 5 seconds and made this configurable with a new command line options (-G<seconds>) * fixed scan buffer processing with WEXT to handle up to 65535 byte result buffer (previously, limited to 32768 bytes) * added support for Wi-Fi Protected Setup (WPS) (wpa_supplicant can now be configured to act as a WPS Enrollee to enroll credentials for a network using PIN and PBC methods; in addition, wpa_supplicant can act as a wireless WPS Registrar to configure an AP); WPS support can be enabled by adding CONFIG_WPS=y into .config and setting the runtime configuration variables in wpa_supplicant.conf (see WPS section in the example configuration file); new wpa_cli commands wps_pin, wps_pbc, and wps_reg are used to manage WPS negotiation; see README-WPS for more details * added support for EAP-AKA' (draft-arkko-eap-aka-kdf) * added support for using driver_test over UDP socket * fixed PEAPv0 Cryptobinding interoperability issue with Windows Server 2008 NPS; optional cryptobinding is now enabled (again) by default * fixed PSK editing in wpa_gui * changed EAP-GPSK to use the IANA assigned EAP method type 51 * added a Windows installer that includes WinPcap and all the needed DLLs; in addition, it set up the registry automatically so that user will only need start wpa_gui to get prompted to start the wpasvc servide and add a new interface if needed through wpa_gui dialog * updated management frame protection to use IEEE 802.11w/D7.0 * added Milenage SIM/USIM emulator for EAP-SIM/EAP-AKA (can be used to simulate test SIM/USIM card with a known private key; enable with CONFIG_SIM_SIMULATOR=y/CONFIG_USIM_SIMULATOR=y in .config and password="Ki:OPc"/password="Ki:OPc:SQN" in network configuration) * added a new network configuration option, wpa_ptk_rekey, that can be used to enforce frequent PTK rekeying, e.g., to mitigate some attacks against TKIP deficiencies * added an optional mitigation mechanism for certain attacks against TKIP by delaying Michael MIC error reports by a random amount of time between 0 and 60 seconds; this can be enabled with a build option CONFIG_DELAYED_MIC_ERROR_REPORT=y in .config * fixed EAP-AKA to use RES Length field in AT_RES as length in bits, not bytes * updated OpenSSL code for EAP-FAST to use an updated version of the session ticket overriding API that was included into the upstream OpenSSL 0.9.9 tree on 2008-11-15 (no additional OpenSSL patch is needed with that version anymore) * updated userspace MLME instructions to match with the current Linux mac80211 implementation; please also note that this can only be used with driver_nl80211.c (the old code from driver_wext.c was removed) * added support (Linux only) for RoboSwitch chipsets (often found in consumer grade routers); driver interface 'roboswitch' * fixed canceling of PMKSA caching when using drivers that generate RSN IE and refuse to drop PMKIDs that wpa_supplicant does not know about * added support for SHA-256 as X.509 certificate digest when using the internal X.509/TLSv1 implementation * updated management frame protection to use IEEE 802.11w/D6.0 * added support for using SHA256-based stronger key derivation for WPA2 (IEEE 802.11w) * fixed FT (IEEE 802.11r) authentication after a failed association to use correct FTIE * added support for configuring Phase 2 (inner/tunneled) authentication method with wpa_gui-qt4 * added support for EAP Sequences in EAP-FAST Phase 2 * added support for using TNC with EAP-FAST * added driver_ps3 for the PS3 Linux wireless driver * added support for optional cryptobinding with PEAPv0 * fixed the OpenSSL patches (0.9.8g and 0.9.9) for EAP-FAST to allow fallback to full handshake if server rejects PAC-Opaque * added fragmentation support for EAP-TNC * added support for parsing PKCS #8 formatted private keys into the internal TLS implementation (both PKCS #1 RSA key and PKCS #8 encapsulated RSA key can now be used) * added option of using faster, but larger, routines in the internal LibTomMath (for internal TLS implementation) to speed up DH and RSA calculations (CONFIG_INTERNAL_LIBTOMMATH_FAST=y) * fixed race condition between disassociation event and group key handshake to avoid getting stuck in incorrect state [Bug 261] * fixed opportunistic key caching (proactive_key_caching) ------------------------------------------------------------------- Sun Mar 1 17:03:04 CET 2009 - coolo@suse.de - fix compilation with gcc 4.4 ------------------------------------------------------------------- Mon Feb 9 16:06:44 CET 2009 - hschaa@suse.de - Add wpa_supplicant-respect_no_reply.patch which avoids D-Bus errors if no reply was requested by the caller ------------------------------------------------------------------- Wed Jan 28 14:03:42 CET 2009 - hschaa@suse.de - Avoid unnecessary roaming if the driver (like ipw2100) does not report signal level. This fixes association problems with ipw2100 (bnc#469779). ------------------------------------------------------------------- Wed Jan 28 10:45:19 CET 2009 - hschaa@suse.de - Fix dbus configuration again (bnc#470013, bnc#469530) ------------------------------------------------------------------- Thu Jan 22 17:24:34 CET 2009 - hschaa@suse.de - Add fix_dbus_config.patch (bnc#468392) ------------------------------------------------------------------- Mon Dec 8 15:45:55 CET 2008 - hschaa@suse.de - Add patch wpa_supplicant-hide_secrets-2.patch to _not_ print passwords in clear text when started by NM with enabled debug output ------------------------------------------------------------------- Mon Nov 10 17:35:43 EET 2008 - tambet@novell.com - Fix a bug where authentication would always fail using PKCS#11 interface from DBus control interface. - Add support for PKCS#11 module initialization arguments. ------------------------------------------------------------------- Mon Oct 13 15:11:54 CEST 2008 - hschaa@gmail.com - update wpa_supplicant-roaming.patch which enables roaming by default for some cards ------------------------------------------------------------------- Thu Oct 9 14:42:36 CEST 2008 - hschaa@suse.de - add patches wpa_supplicant-dont_report_empty_initial_scan.patch and wpa_supplicant-restore_scan_request_setting.patch which speed up the initial association with a network when NM is used - Add patch wpa_supplicant-fix_set_mode.patch which fixes an association bug that was triggered when changing the interface mode ------------------------------------------------------------------- Mon Sep 29 13:40:18 CEST 2008 - hschaa@suse.de - add roaming capability (FATE 303806) ------------------------------------------------------------------- Wed Sep 24 00:59:56 CEST 2008 - ro@suse.de - drop buildreq for madwifi (dropped package) ------------------------------------------------------------------- Tue Sep 2 03:05:49 CEST 2008 - ro@suse.de - update to 0.6.4 * added support for EAP Sequences in EAP-FAST Phase 2 * added support for using TNC with EAP-FAST * added driver_ps3 for the PS3 Linux wireless driver * added support for optional cryptobinding with PEAPv0 * fixed the OpenSSL patches (0.9.8g and 0.9.9) for EAP-FAST to allow fallback to full handshake if server rejects PAC-Opaque * added fragmentation support for EAP-TNC * added support for parsing PKCS #8 formatted private keys into the internal TLS implementation (both PKCS #1 RSA key and PKCS #8 encapsulated RSA key can now be used) * added option of using faster, but larger, routines in the internal LibTomMath (for internal TLS implementation) to speed up DH and RSA calculations (CONFIG_INTERNAL_LIBTOMMATH_FAST=y) * fixed race condition between disassociation event and group key handshake to avoid getting stuck in incorrect state [Bug 261] * fixed opportunistic key caching (proactive_key_caching) ------------------------------------------------------------------- Mon Aug 4 12:33:10 CEST 2008 - hschaa@suse.de - Remove patches that are already upstream - Rebase patches to new version - Update to 0.6.3 ------------------------------------------------------------------- Mon May 5 09:52:45 CEST 2008 - schwab@suse.de - Fix mangled error message. ------------------------------------------------------------------- Mon Mar 17 15:06:14 CET 2008 - hschaa@suse.de - Fix system bus activation (bnc#371500) ------------------------------------------------------------------- Tue Mar 11 15:09:29 CET 2008 - hschaa@suse.de - Remove patches that are upstream already - Update to version 0.5.10, changes: * added support for Makefile builds to include debug-log-to-a-file functionality (CONFIG_DEBUG_FILE=y and -f<path> on command line) * added network configuration parameter 'frequency' for setting initial channel for IBSS (adhoc) networks * fixed EAP-SIM and EAP-AKA message parser to validate attribute lengths properly to avoid potential crash caused by invalid messages * added driver_wext workaround for race condition between scanning and association with drivers that take very long time to scan all channels (e.g., madwifi with dual-band cards); wpa_supplicant is now using a longer hardcoded timeout for the scan if the driver supports notifications for scan completion (SIOCGIWSCAN event); this helps, e.g., in cases where wpa_supplicant and madwifi driver ended up in loop where the driver did not even try to associate * fixed EAP-SIM not to include AT_NONCE_MT and AT_SELECTED_VERSION attributes in EAP-SIM Start/Response when using fast reauthentication * fixed problems in getting NDIS events from WMI on Windows 2000 - Changes in 0.5.9: * fixed an integer overflow issue in the ASN.1 parser used by the (experimental) internal TLS implementation to avoid a potential buffer read overflow * fixed a race condition with -W option (wait for a control interface monitor before starting) that could have caused the first messages to be lost * updated EAP Generalized Pre-Shared Key (EAP-GPSK) to use the latest draft (draft-ietf-emu-eap-gpsk-07.txt) * added ctrl_iface RECONNECT (wpa_cli reconnect) command (like reassociate, but only takes effect if already associated) * fixed a possible race condition between wpa_cli reassociate and wpa_cli disconnect * return a non-zero exit code from non-interactive wpa_cli if the command is not recognized or fails * fixed 0.5.8 regressions in BSS selection that prevented wildcard SSID from being used with non-WPA networks and disabled workaround for ignoring bogus WPA/RSN IE in non-WPA configuration * fixed OpenSSL TLS wrapper to clear trusted CA list to allow network blocks to use different trusted CA configurations * fixed a potential EAP state machine loop when mloving from PSK to EAP configuration without restarting wpa_supplicant ------------------------------------------------------------------- Thu Jan 31 13:10:43 CET 2008 - hschaa@suse.de - Fix madwifi support (b.n.c #342670) ------------------------------------------------------------------- Tue Dec 18 18:26:27 CET 2007 - jg@suse.de - Fix two leaks when signalling state and scan results (rh #408141) ------------------------------------------------------------------- Wed Nov 14 13:36:33 CET 2007 - jg@suse.de - enable dbus interface - apply fixes from Dan Williams - build Qt4 version of wpa_gui - dropped gcc 4.3 patch for Qt3 wpa_gui ------------------------------------------------------------------- Mon Nov 12 14:24:33 CET 2007 - ssommer@suse.de - fix build with gcc 4.3 ------------------------------------------------------------------- Tue Jul 24 16:58:12 CEST 2007 - jg@suse.de - update to version 0.5.8, changes: * updated driver_wext.c to build with the current wireless-dev.git tree and net/d80211 changes * updated EAP Generalized Pre-Shared Key (EAP-GPSK) to use the latest draft (draft-ietf-emu-eap-gpsk-03.txt) * fixed 'make install' * fixed EAP-TTLS implementation not to crash on use of freed memory if TLS library initialization fails * fixed EAP-AKA Notification processing to allow Notification to be processed after AKA Challenge response has been sent ------------------------------------------------------------------- Mon Mar 19 19:33:34 CET 2007 - jg@suse.de - adjusted include path for madwifi ------------------------------------------------------------------- Sat Mar 10 17:44:46 CET 2007 - dmueller@suse.de - update to 0.5.7 (#253396): * ChangeLog is under /usr/share/doc/packages/wpa_supplicant/ChangeLog ------------------------------------------------------------------- Mon Nov 6 16:29:14 CET 2006 - jg@suse.de - set IW_ENCODE_TEMP flag (needed to use dynamic WEP with airo driver, bug 185528) ------------------------------------------------------------------- Fri Oct 6 11:52:37 CEST 2006 - jg@suse.de - update to 0.4.9: * fixed EAPOL re-authentication for sessions that used PMKSA caching * reject WPA/WPA2 message 3/4 if it does not include any valid WPA/RSN IE * driver_wext: added support for WE-21 change to SSID configuration * driver_wext: fixed privacy configuration for static WEP keys mode [Bug 140] * driver_wext: added fallback to use SIOCSIWENCODE for setting auth_alg if the driver does not support SIOCSIWAUTH ------------------------------------------------------------------- Fri Mar 24 19:08:20 CET 2006 - jg@suse.de - fixed static WEP key usage (bug 144268) ------------------------------------------------------------------- Thu Feb 16 10:04:31 CET 2006 - jg@suse.de - update to 0.4.8 (bug 151151) * added support for EAP-FAST key derivation using other ciphers than RC4-128-SHA for authentication and AES128-SHA for provisioning * fixed EAP-SIM and EAP-AKA pseudonym and fast re-authentication to decrypt AT_ENCR_DATA attributes correctly * added support for configuring CA certificate as DER file and as a configuration blob * fixed private key configuration as configuration blob and added support for using PKCS#12 as a blob * added support for loading trusted CA certificates from Windows certificate store: ca_cert="cert_store://<name>", where <name> is likely CA (Intermediate CA certificates) or ROOT (root certificates) * fixed TLS library deinitialization after RSN pre-authentication not to disable TLS library for normal authentication * fixed PMKSA cache processing not to trigger deauthentication if the current PMKSA cache entry is replaced with a valid new entry * fixed PC/SC initialization for ap_scan != 1 modes (this fixes EAP-SIM and EAP-AKA with real SIM/USIM card when using ap_scan=0 or ap_scan=2) * do not try to use USIM APDUs when initializing PC/SC for SIM card access for a network that has not enabled EAP-AKA ------------------------------------------------------------------- Sun Feb 5 18:34:21 CET 2006 - ro@suse.de - removed km_wlan from BuildRequires ------------------------------------------------------------------- Wed Jan 25 21:42:51 CET 2006 - mls@suse.de - converted neededforbuild to BuildRequires ------------------------------------------------------------------- Tue Jan 17 19:32:07 CET 2006 - rml@suse.de - Add patch (from upstream) fixing bad drivers that NULL out the SSID and send the wrong length. ------------------------------------------------------------------- Tue Jan 10 12:27:27 CET 2006 - jg@suse.de - added AP scan mode selection via control interface (patch from rml@novell.com) ------------------------------------------------------------------- Mon Nov 21 12:41:52 CET 2005 - jg@suse.de - update to 0.4.7, changes (shortened): * l2_packet_pcap: fixed wired IEEE 802.1X authentication with libpcap and WinPcap to receive frames sent to PAE group address * disable EAP state machine when IEEE 802.1X authentication is not used in order to get rid of bogus "EAP failed" messages * fixed OpenSSL error reporting to go through all pending errors to avoid confusing reports of old errors being reported at later point during handshake * fixed configuration file updating to not write empty variables (e.g., proto or key_mgmt) that the file parser would not accept * fixed ADD_NETWORK ctrl_iface command to use the same default values for variables as empty network definitions read from config file would get * fixed EAP state machine to not discard EAP-Failure messages in many cases (e.g., during TLS handshake) * fixed a infinite loop in private key reading if the configured file cannot be parsed successfully * driver_madwifi: added support for madwifi-ng * wpa_gui: do not display password/PSK field contents * wpa_gui: added CA certificate configuration * use longer timeout for IEEE 802.11 association to avoid problems with drivers that may take more than five second to associate - dropped obsolete madwifi patch - dropped obsolete copy of wireless.h - updated config file - use $RPM_OPT_FLAGS and %jobs - created subpackage wpa_supplicant-gui containing wpa_gui ------------------------------------------------------------------- Tue Nov 8 15:22:13 CET 2005 - jg@suse.de - do not build as root ------------------------------------------------------------------- Fri Nov 4 18:16:50 CET 2005 - jg@suse.de - added support for madwifi-ng - compiling against Wireless Extensions v19 - removed obsolete config option CONFIG_XSUPPLICANT_IFACE ------------------------------------------------------------------- Fri Oct 28 12:25:59 CEST 2005 - jg@suse.de - update to 0.4.6, changes (shortened): * allow fallback to WPA, if mixed WPA+WPA2 networks have mismatch in RSN IE, but WPA IE would match with wpa_supplicant configuration * added support for named configuration blobs in order to avoid having to use file system for external files (e.g., certificates) * fixed RSN pre-authentication * driver_madwifi: set IEEE80211_KEY_GROUP flag for group keys to make sure the driver configures broadcast decryption correctly * added ca_path (and ca_path2) configuration variables that can be used to configure OpenSSL CA path, e.g., /etc/ssl/certs, for using the system-wide trusted CA list * added support for starting wpa_supplicant without a configuration file * added global control interface that can be optionally used for adding and removing network interfaces dynamically * wpa_gui: - try to save configuration whenever something is modified - added WEP key configuration - added possibility to edit the current network configuration * driver_ndis: fixed driver polling not to increase frequency on each received EAPOL frame due to incorrectly cancelled timeout * fixed driver_wext.c to filter wireless events based on ifindex to avoid interfaces receiving events from other interfaces * delay sending initial EAPOL-Start couple of seconds to speed up authentication for the most common case of Authenticator starting EAP authentication immediately after association ------------------------------------------------------------------- Thu Oct 13 16:40:44 CEST 2005 - jg@suse.de - update to 0.4.5, changes (shortened): * added a workaround for clearing keys with ndiswrapper to allow roaming from WPA enabled AP to plaintext one * l2_packet_linux: use socket type SOCK_DGRAM instead of SOCK_RAW for PF_PACKET in order to prepare for network devices that do not use Ethernet headers (e.g., network stack with native IEEE 802.11 frames) * use receipt of EAPOL-Key frame as a lower layer success indication for EAP state machine to allow recovery from dropped EAP-Success frame * driver_wext: add support for WE-19 * added support for multiple configuration backends (CONFIG_BACKEND option); currently, only 'file' is supported (i.e., the format used in wpa_supplicant.conf) * added support for updating configuration ('wpa_cli save_config') * added GET_NETWORK ctrl_iface command ------------------------------------------------------------------- Mon Aug 29 15:26:27 CEST 2005 - jg@suse.de - update to 0.4.4 (bug 112977), changes (shortened): * replaced OpenSSL patch for EAP-FAST support (openssl-tls-extensions.patch) with a more generic and correct patch * allow non-WPA modes (e.g., IEEE 802.1X with dynamic WEP) to be used with drivers that do not support WPA * added support for enabling/disabling networks from the list of all configured networks * added support for adding and removing network from the current configuration * added support for setting network configuration parameters through the control interface * fixed parsing of strings that include both " and # within double quoted area (e.g., "start"#end") * removed interface for external EAPOL/EAP supplicant * fixed build with CONFIG_DNET_PCAP=y on Linux * l2_packet: moved different implementations into separate files * added support for using ap_scan=2 mode with multiple network blocks * fixed a potential issue in RSN pre-authentication ending up using freed memory if pre-authentication times out * added support for querying private key password (EAP-TLS) through the control interface (wpa_cli/wpa_gui) if one is not included in the configuration file * driver_broadcom: fixed couple of memory leaks in scan result processing * EAP-PAX is now registered as EAP type 46 * fixed EAP-PAX MAC calculation * fixed EAP-PAX CK and ICK key derivation * added support for using password with EAP-PAX * added support for arbitrary driver interface parameters through the configuration file with a new driver_param field * added possibility to override l2_packet module with driver interface API (new send_eapol handler) * fixed ctrl_interface_group processing for the case where gid is entered as a number, not group name * driver_test: added support for testing hostapd with wpa_supplicant by using test driver interface without any kernel drivers or network cards * added support for EAP-MSCHAPv2 password retries within the same EAP authentication session * added support for password changes with EAP-MSCHAPv2 * added support for reading additional certificates from PKCS#12 files and adding them to the certificate chain * fixed association with IEEE 802.1X (no WPA) when dynamic WEP keys were used * display EAP Notification messages to user through control interface with "CTRL-EVENT-EAP-NOTIFICATION" prefix * added 'disconnect' command to control interface for setting wpa_supplicant in state where it will not associate before 'reassociate' command has been used * added support for getting scan results through control interface * added support for wired authentication (IEEE 802.1X on wired Ethernet); driver interface 'wired' * added support for sending TLS alerts * added support for 'any' SSID wildcard; if ssid is not configured or is set to an empty string, any SSID will be accepted for non-WPA AP * added support for asking PIN (for SIM) from frontends (e.g., wpa_cli); * added support for using external devices (e.g., a smartcard) for private key operations in EAP-TLS (CONFIG_SMARTCARD=y in .config); * added experimental support for EAP-PAX * added monitor mode for wpa_cli ------------------------------------------------------------------- Mon Jul 11 15:46:53 CEST 2005 - jg@suse.de - update to 0.3.9, changes: * modified the EAP workaround that accepts EAP-Success with incorrect Identifier to be even less strict about verification in order to interoperate with some authentication servers * fixed RSN IE in 4-Way Handshake message 2/4 for the case where Authenticator rejects PMKSA caching attempt and the driver is not using assoc_info events * fixed a possible double free in EAP-TTLS fast-reauthentication when identity or password is entered through control interface * added -P<pid file> argument for wpa_supplicant to write the current process id into a file * driver_madwifi: fixed association in plaintext mode * driver_madwifi: added preliminary support for compiling against 'BSD' branch of madwifi CVS tree * added EAP workaround for PEAPv1 session resumption: allow outer, i.e., not tunneled, EAP-Success to terminate session since; this can be disabled with eap_workaround=0 * driver_ipw: updated driver structures to match with ipw2200-1.0.4 (note: ipw2100-1.1.0 is likely to require an update to work with this) * driver_broadcom: fixed couple of memory leaks in scan result processing - removed pidfile patch in favour of the new upstream implementation ------------------------------------------------------------------- Mon Mar 21 11:36:26 CET 2005 - jg@suse.de - creating directory /var/run/wpa_supplicant when needed (bug 74023) ------------------------------------------------------------------- Mon Feb 14 09:58:59 CET 2005 - jg@suse.de - update to 0.3.8, changes: * fixed EAPOL-Key validation to drop packets with invalid Key Data Length; such frames could have crashed wpa_supplicant due to buffer overflow ------------------------------------------------------------------- Mon Feb 7 17:00:37 CET 2005 - jg@suse.de - update to 0.3.7-pre, changes: * fixed WPA/RSN IE verification in message 3 of 4-Way Handshake when using drivers that take care of AP selection (e.g., when using ap_scan=2) * fixed reprocessing of pending request after ctrl_iface requests for identity/password/otp * fixed ctrl_iface requests for identity/password/otp in Phase 2 of EAP-PEAP and EAP-TTLS * all drivers using driver_wext: set interface up and select Managed mode when starting wpa_supplicant; set interface down when exiting * renamed driver_ipw2100.c to driver_ipw.c since it now supports both ipw2100 and ipw2200 * fixed a busy loop introduced in v0.3.5 for scan result processing when no matching AP is found * added a workaround for an interoperability issue with a Cisco AP when using WPA2-PSK * fixed non-WPA IEEE 802.1X to use the same authentication timeout as WPA with IEEE 802.1X * fixed issues with 64-bit CPUs and SHA1 cleanup in previous version (e.g., segfault when processing EAPOL-Key frames) * fixed EAP workaround and fast reauthentication configuration for RSN pre-authentication * added support for blacklisting APs that fail or timeout authentication in ap_scan=1 mode so that all APs are tried in cases where the ones with strongest signal level are failing authentication * fixed CA certificate loading after a failed EAP-TLS/PEAP/TTLS authentication attempt * added preliminary support for IBSS (ad-hoc) mode configuration * added optional support for GNU Readline and History Libraries for wpa_cli (CONFIG_READLINE) * added couple of workarounds for interoperability issues with a Cisco AP when using WPA2 * fixed private key loading for cases where passphrase is not set * improved recovery from PMKID mismatches by requesting full EAP authentication in case of failed PMKSA caching attempt * driver_ndis: added support for NDIS NdisMIncidateStatus() events * driver_ndis: use ADD_WEP/REMOVE_WEP when configuring WEP keys * added support for driver interfaces to replace the interface name based on driver/OS specific mapping, e.g., in case of driver_ndis, this allows the beginning of the adapter description to be used as the interface name * driver_ndis: enable radio before starting scanning, disable radio when exiting * added KEY_MGMT_802_1X_NO_WPA as a new key_mgmt type so that driver interface can distinguish plaintext and IEEE 802.1X (no WPA) authentication * fixed static WEP key configuration to use broadcast/default type for all keys * driver_ndis: added legacy WPA capability detection for non-WPA2 drivers * added support for setting static WEP keys for IEEE 802.1X without dynamic WEP keying (eapol_flags=0) * added support for reading PKCS#12 (PFX) files (as a replacement for PEM/DER) to get certificate and private key (CONFIG_PKCS12) * added new ap_scan mode, ap_scan=2, for drivers that take care of association, but need to be configured with security policy and SSID, e.g., ndiswrapper and NDIS driver ------------------------------------------------------------------- Thu Jan 13 12:32:51 CET 2005 - jg@suse.de - update to 0.2.6, changes: * added driver interface for Intel ipw2100 driver * fixed a bug in PMKSA cache processing: skip sending of EAPOL-Start only if there is a PMKSA cache entry for the current AP * fixed error handling for case where reading of scan results fails: must schedule a new scan or wpa_supplicant will remain waiting forever * set pairwise/group cipher suite for non-WPA IEEE 802.1X to WEP-104 if keys are not configured to be used; this fixes IEEE 802.1X mode with drivers that use this information to configure whether Privacy bit can be in Beacon frames (e.g., ndiswrapper) * improved downgrade attack detection in IE verification of msg 3/4: verify both WPA and RSN IEs, if present, not only the selected one; reject the AP if an RSN IE is found in msg 3/4, but not in Beacon or Probe Response frame, and RSN is enabled in wpa_supplicant configuration * fixed WPA msg 3/4 processing to allow Key Data field contain other IEs than just one WPA IE * modified association event handler to set portEnabled = FALSE before clearing port Valid in order to reset EAP state machine and avoid problems with new authentication getting ignored because of state machines ending up in AUTHENTICATED/SUCCESS state based on old information - removed obsolete ipw2100 patch - added wpa_supplicant.fig to filelist ------------------------------------------------------------------- Fri Oct 22 12:47:44 CEST 2004 - jg@suse.de - update to 0.2.5, changes: * wpa_cli: fixed parsing of -p <path> command line argument * fixed parsing of wep_tx_keyidx * fixed couple of errors in PCSC handling that could have caused random-looking errors for EAP-SIM * PEAPv1: fixed tunneled EAP-Success reply handling to reply with TLS ACK, not tunneled EAP-Success * PEAPv1: added support for terminating PEAP authentication on tunneled EAP-Success message * PEAPv1: changed phase1 option peaplabel to use default to 0, i.e., to the old label for key derivation; previously, the default was 1, but it looks like most existing PEAPv1 implementations use the old label which is thus more suitable default option * changed SSID configuration in driver_wext.c (used by many driver interfaces) to use ssid_len+1 as the length for SSID since some Linux drivers expect this * fixed couple of unaligned reads in scan result parsing to fix WPA connection on some platforms (e.g., ARM) - disabled madwifi support on ppc ------------------------------------------------------------------- Wed Sep 29 00:36:22 CEST 2004 - jg@suse.de - added support for ipw2100 driver ------------------------------------------------------------------- Tue Aug 31 16:57:27 CEST 2004 - jg@suse.de - added support for writing pid-file ------------------------------------------------------------------- Mon Aug 2 18:52:39 CEST 2004 - jg@suse.de - fixed build on non-x86 platforms ------------------------------------------------------------------- Mon Aug 2 17:35:57 CEST 2004 - jg@suse.de - update to version 0.2.4, important changes: - support for new EAP authentication methods: EAP-TTLS/EAP-MD5-Challenge EAP-TTLS/EAP-GTC EAP-TTLS/EAP-MSCHAPv2 EAP-TTLS/EAP-TLS EAP-TTLS/MSCHAPv2 EAP-TTLS/MSCHAP EAP-TTLS/PAP EAP-TTLS/CHAP EAP-PEAP/TLS EAP-PEAP/GTC EAP-PEAP/MD5-Challenge EAP-GTC EAP-TTLS/EAP-OTP, EAP-PEAPv0/OTP, EAP-PEAPv1/OTP, EAP-OTP - support for ATMEL AT76C5XXX driver - support for madwifi driver - lots of minor changes, see ChangeLog - added km_wlan to needforbuild (driver source of madwifi is needed) ------------------------------------------------------------------- Thu Jun 17 14:40:13 CEST 2004 - jg@suse.de - Initial package
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor
