aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Changed the example device_type value to be Computer/PCJouni Malinen2008-12-221-1/+1
|
* Reject association if HT STA tries to use TKIP as pairwise cipherJouni Malinen2008-12-223-0/+17
|
* Allow HT to be enabled for a STA even without WMMJouni Malinen2008-12-221-3/+2
| | | | | The STA won't be able to use block ACK/aggregation, but at least it should be allowed to use MCS rates and HT40.
* Add Start menu shortcuts to wpa_gui and uninstallJouni Malinen2008-12-211-0/+14
| | | | | In addition, make uninstall use confirm dialog to avoid accidental uninstalls.
* Use wildcard UUID when setting AP PIN for Registrar in wpa_supplicantJouni Malinen2008-12-211-11/+3
|
* Fixed PBC overlap detection to handle case of missing UUID-EJouni Malinen2008-12-211-14/+2
| | | | | | UUID-E is not required to be present in Beacon frame, so we need to accept scan results that do not have UUID-E as a valid PBC situation as long as not more than one AP is in active PBC mode.
* Fixed NDIS AuthMode configuration for WPS connectionJouni Malinen2008-12-211-0/+5
|
* wpa_gui-qt4: Added wpasvc start/stop functionality for WindowsJouni Malinen2008-12-212-1/+176
| | | | | | wpa_gui will now ask user whether the wpasvc service should be started if it is not running. In addition, File menu has items for starting and stopping the service.
* Silence a compiler warningJouni Malinen2008-12-211-1/+1
|
* Added more notes about WPS GUI scan operations and wpa_guiJouni Malinen2008-12-201-1/+15
|
* WPS: Added support for wildcard SSID matching in ap_scan=2 modeJouni Malinen2008-12-204-1/+47
| | | | | | | Change association behavior to match with ap_scan=1 when WPS is used in ap_scan=2 mode with wildcard SSID matching. In addition, allow hardcoded BSSID to be used to select AP even if selected registrar attribute is not present.
* Fixed a typo in a commentJouni Malinen2008-12-201-1/+1
|
* Include WPS support in the Windows binaryJouni Malinen2008-12-201-0/+1
|
* Register wpasvc service on install and unregister on uninstallJouni Malinen2008-12-201-0/+4
|
* Use parallel compilation to speed up release buildJouni Malinen2008-12-201-3/+3
|
* Added Windows NSIS installer for wpa_supplicantJouni Malinen2008-12-203-0/+94
|
* Create PNG version of the wpa_gui tray icon file for cross compilationJouni Malinen2008-12-201-0/+1
|
* Changed win_gui cross compilation to use cleaner Qt setupJouni Malinen2008-12-203-26/+16
| | | | | | | A separate cross compiler mkspecs file (win32-x-g++) is now used to configure all build options so the setup-mingw-cross-compiling hack is not needed anymore. Furthermore, the MinGW setup is now on path, so no need to specify extra PATH changes for it.
* Added a note about mac80211-based drivers and nl80211Jouni Malinen2008-12-203-3/+7
|
* IANA allocated EAP method type 51 to EAP-GPSKJouni Malinen2008-12-203-3/+4
|
* WPS: Added event callback for successfully completed registrationJouni Malinen2008-12-198-2/+34
|
* WPS: Added callback for failure-after-M2/M2DJouni Malinen2008-12-198-2/+91
| | | | | | This callback is now used to stop wpa_supplicant from trying to continue using parameters (most likely, device password) that do not work in a loop. In addition, wpa_gui can now notify user of failed registration.
* WPS: Added event callback and M2D notificationJouni Malinen2008-12-185-4/+77
| | | | | | The event callback will be used for various event messages and the M2D notification is the first such message. It is used to notify wpa_gui about Registrar not yet knowing the device password (PIN).
* Fixed global conf write to skip default values for uuid and os_versionJouni Malinen2008-12-182-3/+3
|
* Fix CONFIG_WPS=y, CONFIG_TLS=internal buildAndriy Tkachuk2008-12-181-2/+2
| | | | crypto_mod_exp() is needed for both EAP-FAST and WPS.
* Fixed PSK editing in wpa_gui (copy-paste bug in field names)Jouni Malinen2008-12-183-2/+3
|
* Cleaned up EAPOL-Key timeout processingJouni Malinen2008-12-182-12/+35
| | | | | | | | | | | | | | | | | dot11RSNAConfigGroupUpdateTimeOut and dot11RSNAConfigPairwiseUpdateTimeOut MIB variables were only used in draft versions of IEEE 802.11i, so rename these in order not to use confusing name here. Replaced EAPOL-Key timeout to use following timeouts (in milliseconds): 100,1000,1000,1000 (this was 1000,1000,1000,0). There is no point in sending out the final EAPOL-Key frame which would be immediately followed by disconnection. After the change to allow response to any pending EAPOL-Key frame, it is fine to send the first retransmission quickly to avoid long wait in cases where Supplicant did not receive the first frame for any reason. The new sequence will still provide 3.1 seconds of time to get any response frame, so this does not reduce the previous time.
* WPS: Fixed deinit code for freeing config and registrar dataJouni Malinen2008-12-182-2/+5
| | | | | | | | We need to be a bit more careful when removing the WPS configuration block since wpa_s->current_ssid may still be pointing at it. In addition, registrar pointer in wps_context will need to be cleared since the context data is now maintained over multiple EAP-WSC runs. Without this, certain WPS operations could have used freed memory.
* Do not allow HT with WPA/WPA2 to be enabled without CCMPJouni Malinen2008-12-171-0/+10
| | | | | | IEEE 802.11n does not allow HT STAs to use TKIP between themselves, so do do allow a configuration that would force this to happen if HT is used.
* WPS: Added wpa_gui-qt4 support for BSS selection and AP PIN useJouni Malinen2008-12-166-120/+171
| | | | | | | The specific AP (BSSID) can now be selected through scan results for WPS (WPS pushbutton on the network configuration dialog). When a BSSID is selected, AP device PIN (e.g., from a label) can be used to configure the AP by acting as a Registrar.
* WPS: Improved error processing to use NACK correctlyJouni Malinen2008-12-163-39/+108
| | | | | | Instead of sending out EAP-Failure on errors (on AP) or stopping (on Supplicant), send a NACK message based on the allowed EAP state machine transitions for EAP-WSC.
* Use less frequent polling when wpa_gui is hiddenJouni Malinen2008-12-161-0/+8
|
* Fixed EAP-AKA build in case EAP-AKA' is disabledJouni Malinen2008-12-161-0/+4
|
* Improve EAPOL-Key handshake stability with retransmitted framesJouni Malinen2008-12-162-13/+48
| | | | | | | | | | | | | | | | | | | Accept response to any pending request, not just the last one. This gives the Supplicant more time to reply since hostapd will now allow up to three seconds for the reply to the first EAPOL-Key frame transmission (and two seconds for the first retry and one second for the last) while the previous version invalidated any old request immediately when sending a retransmitted frame. If the Supplicant replies to more than one request, only the first reply to arrive at the Authenticator will be processed. As far as the Supplicant is concerned, this behavior does not differ from the previous one except for being less likely to cause unneeded retransmissions of EAPOL-Key frames. This can help in cases where power saving is used when the group key is rekeyed or when there is excessive traffic on the channel that can delay (or drop) EAPOL-Key frames.
* WPS: Added WPS support into wpa_gui-qt4Jouni Malinen2008-12-153-0/+248
| | | | Currently, only Enrollee operations (both PBC and PIN) are supported.
* Use a fixed wps_msg prefix with WPS creds notificationJouni Malinen2008-12-152-1/+3
|
* WPS: Added control interface notification for available WPS APsJouni Malinen2008-12-154-0/+40
| | | | | | | Whenever new scan results include WPS AP(s) and the client is not associated, send a notification message to control interface monitors. This makes it easier for GUIs to notify the user about possible WPS availability without having to go through the scan results.
* Fixed memory leak in WPS PBC overlap detectionJouni Malinen2008-12-151-0/+2
|
* Fixed interoperability issue with PEAPv0 cryptobinding and NPSJouni Malinen2008-12-153-1/+14
| | | | | | | | | | | | | | Windows Server 2008 NPS gets very confused if the TLS Message Length is not included in the Phase 1 messages even if fragmentation is not used. If the TLS Message Length field is not included in ClientHello message, NPS seems to decide to use the ClientHello data (excluding first six octets, i.e., EAP header, type, Flags) as the OuterTLVs data in Cryptobinding Compound_MAC calculation (per PEAPv2; not MS-PEAP).. Lets add the TLS Message Length to PEAPv0 Phase 1 messages to get rid of this issue. This seems to fix Cryptobinding issues with NPS and PEAPv0 is now using optional Cryptobinding by default (again) since there are no known interop issues with it anymore.
* Cleaned up EAP-MSCHAPv2 key derivationJouni Malinen2008-12-149-61/+43
| | | | | | | | | | | | | Changed peer to derive the full key (both MS-MPPE-Recv-Key and MS-MPPE-Send-Key for total of 32 octets) to match with server implementation. Swapped the order of MPPE keys in MSK derivation since server MS-MPPE-Recv-Key | MS-MPPE-Send-Key matches with the order specified for EAP-TLS MSK derivation. This means that PEAPv0 cryptobinding is now using EAP-MSCHAPv2 MSK as-is for ISK while EAP-FAST will need to swap the order of the MPPE keys to get ISK in a way that interoperates with Cisco EAP-FAST implementation.
* Added INT_RANGE parser for global configuration variablesJouni Malinen2008-12-131-17/+23
|
* Use shared string parser for global configuration fieldsJouni Malinen2008-12-131-168/+57
|
* Share the same global config parser function for integer valuesJouni Malinen2008-12-131-73/+32
|
* First step in cleaning up global config parser: use parse_data arrayJouni Malinen2008-12-131-105/+131
|
* Added configuration of WPS device parameters for wpa_supplicantJouni Malinen2008-12-137-13/+294
|
* driver_test: Handle WPS IE in non-MLME testJouni Malinen2008-12-121-0/+7
|
* Ported driver_test to Windows (only UDP socket available)Jouni Malinen2008-12-122-41/+105
|
* driver_test: Optional support for using UDP socketJouni Malinen2008-12-124-20/+123
| | | | | | | | | driver_test can now be used either over UNIX domain socket or UDP socket. This makes it possible to run the test over network and makes it easier to port driver_test to Windows. hostapd configuration: test_socket=UDP:<listen port> wpa_supplicant configuration: driver_param=test_udp=<dst IP addr>:<port>
* Comment out dynamic CertEnumCertificatesInStore loading by defaultJouni Malinen2008-12-111-0/+4
| | | | | This is now available in MinGW header files, so the loading code is triggering conflicts.
* Workaround number of compiler warnings with newer MinGW versionJouni Malinen2008-12-114-6/+7
|