Update ChangeLog files to match the current implementation
This commit adds description of the main changes from the forking of hostap-1.git for 1.x releases to the current master branch snapshot. Signed-hostap: Jouni Malinen <j@w1.fi>
This commit is contained in:
Jouni Malinen
parent
c772d054c2
commit
1ae1570b5f
2 changed files with 314 additions and 0 deletions
|
|
@ -1,5 +1,95 @@
|
|||
ChangeLog for hostapd
|
||||
|
||||
????-??-?? - v2.0
|
||||
* added AP-STA-DISCONNECTED ctrl_iface event
|
||||
* improved debug logging (human readable event names, interface name
|
||||
included in more entries)
|
||||
* added number of small changes to make it easier for static analyzers
|
||||
to understand the implementation
|
||||
* added a workaround for Windows 7 Michael MIC failure reporting and
|
||||
use of the Secure bit in EAPOL-Key msg 3/4
|
||||
* fixed number of small bugs (see git logs for more details)
|
||||
* changed OpenSSL to read full certificate chain from server_cert file
|
||||
* nl80211: number of updates to use new cfg80211/nl80211 functionality
|
||||
- replace monitor interface with nl80211 commands
|
||||
- additional information for driver-based AP SME
|
||||
* EAP-pwd:
|
||||
- fix KDF for group 21 and zero-padding
|
||||
- added support for fragmentation
|
||||
- increased maximum number of hunting-and-pecking iterations
|
||||
* avoid excessive Probe Response retries for broadcast Probe Request
|
||||
frames (only with drivers using hostapd SME/MLME)
|
||||
* added preliminary support for using TLS v1.2 (CONFIG_TLSV12=y)
|
||||
* fixed WPS operation stopping on dual concurrent AP
|
||||
* added wps_rf_bands configuration parameter for overriding RF Bands
|
||||
value for WPS
|
||||
* added support for getting per-device PSK from RADIUS Tunnel-Password
|
||||
* added support for libnl 3.2 and newer
|
||||
* increased initial group key handshake retransmit timeout to 500 ms
|
||||
* added a workaround for 4-way handshake to update SNonce even after
|
||||
having sent EAPOL-Key 3/4 to avoid issues with some supplicant
|
||||
implementations that can change SNonce for each EAP-Key 2/4
|
||||
* added a workaround for EAPOL-Key 4/4 using incorrect type value in
|
||||
WPA2 mode (some deployed stations use WPA type in that message)
|
||||
* added a WPS workaround for mixed mode AP Settings with Windows 7
|
||||
* changed WPS AP PIN disabling mechanism to disable the PIN after 10
|
||||
consecutive failures in addition to using the exponential lockout
|
||||
period
|
||||
* added support for WFA Hotspot 2.0
|
||||
- GAS/ANQP advertisement of network information
|
||||
- disable_dgaf parameter to disable downstream group-addressed
|
||||
forwarding
|
||||
* simplified licensing terms by selecting the BSD license as the only
|
||||
alternative
|
||||
* EAP-SIM: fixed re-authentication not to update pseudonym
|
||||
* EAP-SIM: use Notification round before EAP-Failure
|
||||
* EAP-AKA: added support for AT_COUNTER_TOO_SMALL
|
||||
* EAP-AKA: skip AKA/Identity exchange if EAP identity is recognized
|
||||
* EAP-AKA': fixed identity for MK derivation
|
||||
* EAP-AKA': updated to RFC 5448 (username prefixes changed); note: this
|
||||
breaks interoperability with older versions
|
||||
* EAP-SIM/AKA: allow pseudonym to be used after unknown reauth id
|
||||
* changed ANonce to be a random number instead of Counter-based
|
||||
* added support for canceling WPS operations with hostapd_cli wps_cancel
|
||||
* fixed EAP/WPS to PSK transition on reassociation in cases where
|
||||
deauthentication is missed
|
||||
* hlr_auc_gw enhancements:
|
||||
- a new command line parameter -u can be used to enable updating of
|
||||
SQN in Milenage file
|
||||
- use 5 bit IND for SQN updates
|
||||
- SQLite database can now be used to store Milenage information
|
||||
* EAP-SIM/AKA DB: added optional use of SQLite database for pseudonyms
|
||||
and reauth data
|
||||
* added support for Chargeable-User-Identity (RFC 4372)
|
||||
* added radius_auth_req_attr and radius_acct_req_attr configuration
|
||||
parameters to allow adding/overriding of RADIUS attributes in
|
||||
Access-Request and Accounting-Request packets
|
||||
* added support for RADIUS dynamic authorization server (RFC 5176)
|
||||
* added initial support for WNM operations
|
||||
- BSS max idle period
|
||||
- WNM-Sleep Mode
|
||||
* added new WPS NFC ctrl_iface mechanism
|
||||
- removed obsoleted WPS_OOB command (including support for deprecated
|
||||
UFD config_method)
|
||||
* added FT support for drivers that implement MLME internally
|
||||
* added SA Query support for drivers that implement MLME internally
|
||||
* removed default ACM=1 from AC_VO and AC_VI
|
||||
* changed VENDOR-TEST EAP method to use proper private enterprise number
|
||||
(this will not interoperate with older versions)
|
||||
* added hostapd.conf parameter vendor_elements to allow arbitrary vendor
|
||||
specific elements to be added to the Beacon and Probe Response frames
|
||||
* added support for configuring GCMP cipher for IEEE 802.11ad
|
||||
* added support for 256-bit AES with internal TLS implementation
|
||||
* changed EAPOL transmission to use AC_VO if WMM is active
|
||||
* fixed EAP-TLS/PEAP/TTLS/FAST server to validate TLS Message Length
|
||||
correctly; invalid messages could have caused the hostapd process to
|
||||
terminate before this fix [CVE-2012-4445]
|
||||
* limit number of active wildcard PINs for WPS Registrar to one to avoid
|
||||
confusing behavior with multiple wildcard PINs
|
||||
* added a workaround for WPS PBC session overlap detection to avoid
|
||||
interop issues with deployed station implementations that do not
|
||||
remove active PBC indication from Probe Request frames properly
|
||||
|
||||
2012-05-10 - v1.0
|
||||
* Add channel selection support in hostapd. See hostapd.conf.
|
||||
* Add support for IEEE 802.11v Time Advertisement mechanism with UTC
|
||||
|
|
|
|||
|
|
@ -1,5 +1,229 @@
|
|||
ChangeLog for wpa_supplicant
|
||||
|
||||
????-??-?? - v2.0
|
||||
* removed Qt3-based wpa_gui (obsoleted by wpa_qui-qt4)
|
||||
* removed unmaintained driver wrappers broadcom, iphone, osx, ralink,
|
||||
hostap, madwifi (hostap and madwifi remain available for hostapd;
|
||||
their wpa_supplicant functionality is obsoleted by wext)
|
||||
* improved debug logging (human readable event names, interface name
|
||||
included in more entries)
|
||||
* changed AP mode behavior to enable WPS only for open and
|
||||
WPA/WPA2-Personal configuration
|
||||
* improved P2P concurrency operations
|
||||
- better coordination of concurrent scan and P2P search operations
|
||||
- avoid concurrent remain-on-channel operation requests by canceling
|
||||
previous operations prior to starting a new one
|
||||
- reject operations that would require multi-channel concurrency if
|
||||
the driver does not support it
|
||||
- add parameter to select whether STA or P2P connection is preferred
|
||||
if the driver cannot support both at the same time
|
||||
- allow driver to indicate channel changes
|
||||
- added optional delay=<search delay in milliseconds> parameter for
|
||||
p2p_find to avoid taking all radio resources
|
||||
- use 500 ms p2p_find search delay by default during concurrent
|
||||
operations
|
||||
- allow all channels in GO Negotiation if the driver supports
|
||||
multi-channel concurrency
|
||||
* added number of small changes to make it easier for static analyzers
|
||||
to understand the implementation
|
||||
* fixed number of small bugs (see git logs for more details)
|
||||
* nl80211: number of updates to use new cfg80211/nl80211 functionality
|
||||
- replace monitor interface with nl80211 commands for AP mode
|
||||
- additional information for driver-based AP SME
|
||||
- STA entry authorization in RSN IBSS
|
||||
* EAP-pwd:
|
||||
- fixed KDF for group 21 and zero-padding
|
||||
- added support for fragmentation
|
||||
- increased maximum number of hunting-and-pecking iterations
|
||||
* avoid excessive Probe Response retries for broadcast Probe Request
|
||||
frames (only with drivers using wpa_supplicant AP mode SME/MLME)
|
||||
* added "GET country" ctrl_iface command
|
||||
* do not save an invalid network block in wpa_supplicant.conf to avoid
|
||||
problems reading the file on next start
|
||||
* send STA connected/disconnected ctrl_iface events to both the P2P
|
||||
group and parent interfaces
|
||||
* added preliminary support for using TLS v1.2 (CONFIG_TLSV12=y)
|
||||
* added "SET pno <1/0>" ctrl_iface command to start/stop preferred
|
||||
network offload with sched_scan driver command
|
||||
* merged in number of changes from Android repository for P2P, nl80211,
|
||||
and build parameters
|
||||
* changed P2P GO mode configuration to use driver capabilities to
|
||||
automatically enable HT operations when supported
|
||||
* added "wpa_cli status wps" command to fetch WPA2-Personal passhrase
|
||||
for WPS use cases in AP mode
|
||||
* EAP-AKA: keep pseudonym identity across EAP exchanges to match EAP-SIM
|
||||
behavior
|
||||
* improved reassociation behavior in cases where association is rejected
|
||||
or when an AP disconnects us to handle common load balancing
|
||||
mechanisms
|
||||
- try to avoid extra scans when the needed information is available
|
||||
* added optional "join" argument for p2p_prov_disc ctrl_iface command
|
||||
* added group ifname to P2P-PROV-DISC-* events
|
||||
* added P2P Device Address to AP-STA-DISCONNECTED event and use
|
||||
p2p_dev_addr parameter name with AP-STA-CONNECTED
|
||||
* added workarounds for WPS PBC overlap detection for some P2P use cases
|
||||
where deployed stations work incorrectly
|
||||
* optimize WPS connection speed by disconnecting prior to WPS scan and
|
||||
by using single channel scans when AP channel is known
|
||||
* PCSC and SIM/USIM improvements:
|
||||
- accept 0x67 (Wrong length) as a response to READ RECORD to fix
|
||||
issues with some USIM cards
|
||||
- try to read MNC length from SIM/USIM
|
||||
- build realm according to 3GPP TS 23.003 with identity from the SIM
|
||||
- allow T1 protocol to be enabled
|
||||
* added more WPS and P2P information available through D-Bus
|
||||
* improve P2P negotiation robustness
|
||||
- extra waits to get ACK frames through
|
||||
- longer timeouts for cases where deployed devices have been
|
||||
identified have issues meeting the specification requirements
|
||||
- more retries for some P2P frames
|
||||
- handle race conditions in GO Negotiation start by both devices
|
||||
- ignore unexpected GO Negotiation Response frame
|
||||
* added support for libnl 3.2 and newer
|
||||
* added P2P persistent group info to P2P_PEER data
|
||||
* maintain a list of P2P Clients for persistent group on GO
|
||||
* AP: increased initial group key handshake retransmit timeout to 500 ms
|
||||
* added optional dev_id parameter for p2p_find
|
||||
* added P2P-FIND-STOPPED ctrl_iface event
|
||||
* fixed issues in WPA/RSN element validation when roaming with ap_scan=1
|
||||
and driver-based BSS selection
|
||||
* do not expire P2P peer entries while connected with the peer in a
|
||||
group
|
||||
* fixed WSC element inclusion in cases where P2P is disabled
|
||||
* AP: added a WPS workaround for mixed mode AP Settings with Windows 7
|
||||
* EAP-SIM: fixed AT_COUNTER_TOO_SMALL use
|
||||
* EAP-SIM/AKA: append realm to pseudonym identity
|
||||
* EAP-SIM/AKA: store pseudonym identity in network configuration to
|
||||
allow it to persist over multiple EAP sessions and wpa_supplicant
|
||||
restarts
|
||||
* EAP-AKA': updated to RFC 5448 (username prefixes changed); note: this
|
||||
breaks interoperability with older versions
|
||||
* added support for WFA Hotspot 2.0
|
||||
- GAS/ANQP to fetch network information
|
||||
- credential configuration and automatic network selections based on
|
||||
credential match with ANQP information
|
||||
* limited PMKSA cache entries to be used only with the network context
|
||||
that was used to create them
|
||||
* adjusted bgscan_simple fast-scan backoff to avoid too frequent
|
||||
background scans
|
||||
* removed ctrl_iface event on P2P PD Response in join-group case
|
||||
* added option to fetch BSS table entry based on P2P Device Address
|
||||
("BSS p2p_dev_addr=<P2P Device Address>")
|
||||
* added BSS entry age to ctrl_iface BSS command output
|
||||
* added optional MASK=0xH option for ctrl_iface BSS command to select
|
||||
which fields are included in the response
|
||||
* added optional RANGE=ALL|N1-N2 option for ctrl_iface BSS command to
|
||||
fetch information about several BSSes in one call
|
||||
* simplified licensing terms by selecting the BSD license as the only
|
||||
alternative
|
||||
* added "P2P_SET disallow_freq <freq list>" ctrl_iface command to
|
||||
disable channels from P2P use
|
||||
* added p2p_pref_chan configuration parameter to allow preferred P2P
|
||||
channels to be specified
|
||||
* added support for advertising immediate availability of a WPS
|
||||
credential for P2P use cases
|
||||
* optimized scan operations for P2P use cases (use single channel scan
|
||||
for a specific SSID when possible)
|
||||
* EAP-TTLS: fixed peer challenge generation for MSCHAPv2
|
||||
* SME: do not use reassociation after explicit disconnection request
|
||||
(local or a notification from an AP)
|
||||
* added support for sending debug info to Linux tracing (-T on command
|
||||
line)
|
||||
* added support for using Deauthentication reason code 3 as an
|
||||
indication of P2P group termination
|
||||
* added wps_vendor_ext_m1 configuration parameter to allow vendor
|
||||
specific attributes to be added to WPS M1
|
||||
* started using separate TLS library context for tunneled TLS
|
||||
(EAP-PEAP/TLS, EAP-TTLS/TLS, EAP-FAST/TLS) to support different CA
|
||||
certificate configuration between Phase 1 and Phase 2
|
||||
* added optional "auto" parameter for p2p_connect to request automatic
|
||||
GO Negotiation vs. join-a-group selection
|
||||
* added disabled_scan_offload parameter to disable automatic scan
|
||||
offloading (sched_scan)
|
||||
* added optional persistent=<network id> parameter for p2p_connect to
|
||||
allow forcing of a specific SSID/passphrase for GO Negotiation
|
||||
* added support for OBSS scan requests and 20/40 BSS coexistence reports
|
||||
* reject PD Request for unknown group
|
||||
* removed scripts and notes related to Windows binary releases (which
|
||||
have not been used starting from 1.x)
|
||||
* added initial support for WNM operations
|
||||
- Keep-alive based on BSS max idle period
|
||||
- WNM-Sleep Mode
|
||||
* added autoscan module to control scanning behavior while not connected
|
||||
- autoscan_periodic and autoscan_exponential modules
|
||||
* added new WPS NFC ctrl_iface mechanism
|
||||
- added initial support NFC connection handover
|
||||
- removed obsoleted WPS_OOB command (including support for deprecated
|
||||
UFD config_method)
|
||||
* added optional framework for external password storage ("ext:<name>")
|
||||
* wpa_cli: added optional support for controlling wpa_supplicant
|
||||
remotely over UDP (CONFIG_CTRL_IFACE=udp-remote) for testing purposes
|
||||
* wpa_cli: extended tab completion to more commands
|
||||
* changed SSID output to use printf-escaped strings instead of masking
|
||||
of non-ASCII characters
|
||||
- SSID can now be configured in the same format: ssid=P"abc\x00test"
|
||||
* removed default ACM=1 from AC_VO and AC_VI
|
||||
* added optional "ht40" argument for P2P ctrl_iface commands to allow
|
||||
40 MHz channels to be requested on the 5 GHz band
|
||||
* added optional parameters for p2p_invite command to specify channel
|
||||
when reinvoking a persistent group as the GO
|
||||
* improved FIPS mode builds with OpenSSL
|
||||
- "make fips" with CONFIG_FIPS=y to build wpa_supplicant with the
|
||||
OpenSSL FIPS object module
|
||||
- replace low level OpenSSL AES API calls to use EVP
|
||||
- use OpenSSL keying material exporter when possible
|
||||
- do not export TLS keys in FIPS mode
|
||||
- remove MD5 from CONFIG_FIPS=y builds
|
||||
- use OpenSSL function for PKBDF2 passphrase-to-PSK
|
||||
- use OpenSSL HMAC implementation
|
||||
- mix RAND_bytes() output into random_get_bytes() to force OpenSSL
|
||||
DRBG to be used in FIPS mode
|
||||
- use OpenSSL CMAC implementation
|
||||
* added mechanism to disable TLS Session Ticket extension
|
||||
- a workaround for servers that do not support TLS extensions that
|
||||
was enabled by default in recent OpenSSL versions
|
||||
- tls_disable_session_ticket=1
|
||||
- automatically disable TLS Session Ticket extension by default when
|
||||
using EAP-TLS/PEAP/TTLS (i.e., only use it with EAP-FAST)
|
||||
* changed VENDOR-TEST EAP method to use proper private enterprise number
|
||||
(this will not interoperate with older versions)
|
||||
* disable network block temporarily on authentication failures
|
||||
* improved WPS AP selection during WPS PIN iteration
|
||||
* added support for configuring GCMP cipher for IEEE 802.11ad
|
||||
* added support for Wi-Fi Display extensions
|
||||
- WFD_SUBELEMENT_SET ctrl_iface command to configure WFD subelements
|
||||
- SET wifi_display <0/1> to disable/enable WFD support
|
||||
- WFD service discovery
|
||||
- an external program is needed to manage the audio/video streaming
|
||||
and codecs
|
||||
* optimized scan result use for network selection
|
||||
- use the internal BSS table instead of raw scan results
|
||||
- allow unnecessary scans to be skipped if fresh information is
|
||||
available (e.g., after GAS/ANQP round for Interworking)
|
||||
* added support for 256-bit AES with internal TLS implementation
|
||||
* allow peer to propose channel in P2P invitation process for a
|
||||
persistent group
|
||||
* added disallow_aps parameter to allow BSSIDs/SSIDs to be disallowed
|
||||
from network selection
|
||||
* re-enable the networks disabled during WPS operations
|
||||
* allow P2P functionality to be disabled per interface (p2p_disabled=1)
|
||||
* added secondary device types into P2P_PEER output
|
||||
* added an option to disable use of a separate P2P group interface
|
||||
(p2p_no_group_iface=1)
|
||||
* fixed P2P Bonjour SD to match entries with both compressed and not
|
||||
compressed domain name format and support multiple Bonjour PTR matches
|
||||
for the same key
|
||||
* use deauthentication instead of disassociation for all disconnection
|
||||
operations; this removes the now unused disassociate() wpa_driver_ops
|
||||
callback
|
||||
* optimized PSK generation on P2P GO by caching results to avoid
|
||||
multiple PBKDF2 operations
|
||||
* added okc=1 global configuration parameter to allow OKC to be enabled
|
||||
by default for all network blocks
|
||||
* added a workaround for WPS PBC session overlap detection to avoid
|
||||
interop issues with deployed station implementations that do not
|
||||
remove active PBC indication from Probe Request frames properly
|
||||
|
||||
2012-05-10 - v1.0
|
||||
* bsd: Add support for setting HT values in IFM_MMASK.
|
||||
* Delay STA entry removal until Deauth/Disassoc TX status in AP mode.
|
||||
|
|
|
|||
Loading…
Reference in a new issue