jeltz/hostap
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity
hostap/src/ap
History
Alexander Wetzel 1a7963e36f AP: Allow PTK rekeying without Ext KeyID to be disabled as a workaround 
Rekeying a pairwise key using only keyid 0 (PTK0 rekey) has many broken
implementations and should be avoided when using or interacting with
one. The effects can be triggered by either end of the connection and
range from hardly noticeable disconnects over long connection freezes up
to leaking clear text MPDUs.

To allow affected users to mitigate the issues, add a new hostapd
configuration option "wpa_deny_ptk0_rekey" to replace all PTK0 rekeys
with disconnection. This requires the station to reassociate to get
connected again and as such, can result in connectivity issues as well.

Signed-off-by: Alexander Wetzel <alexander@wetzel-home.de>
2020-02-23 12:22:49 +02:00
..
accounting.c Extra RADIUS request attributes from SQLite 2019-07-30 19:58:09 +03:00
accounting.h
acs.c AP: Populate iface->freq before starting AP 2019-12-20 12:42:47 +02:00
acs.h
airtime_policy.c hostapd: Add airtime policy configuration support 2019-05-02 14:57:43 +03:00
airtime_policy.h hostapd: Add airtime policy configuration support 2019-05-02 14:57:43 +03:00
ap_config.c AP: Allow PTK rekeying without Ext KeyID to be disabled as a workaround 2020-02-23 12:22:49 +02:00
ap_config.h AP: Allow PTK rekeying without Ext KeyID to be disabled as a workaround 2020-02-23 12:22:49 +02:00
ap_drv_ops.c Introduce and add key_flag 2020-01-09 12:38:36 +02:00
ap_drv_ops.h Introduce and add key_flag 2020-01-09 12:38:36 +02:00
ap_list.c Remove CONFIG_IEEE80211N build option 2020-02-22 19:20:44 +02:00
ap_list.h
ap_mlme.c
ap_mlme.h
authsrv.c EAP server: Configurable maximum number of authentication message rounds 2019-09-01 17:19:35 +03:00
authsrv.h
beacon.c Remove Secondary Channel Offset element from Beacon/Probe Response frames 2020-02-22 19:20:44 +02:00
beacon.h
bss_load.c hostapd: Add average channel utilization in STATUS 2017-12-12 00:48:27 +02:00
bss_load.h AP: Add support for BSS load element (STA Count, Channel Utilization) 2014-10-21 23:25:48 +03:00
ctrl_iface_ap.c Remove CONFIG_IEEE80211N build option 2020-02-22 19:20:44 +02:00
ctrl_iface_ap.h
dfs.c DFS: Don't handle DFS ops for 6 GHz channels 2019-12-05 17:12:27 +02:00
dfs.h
dhcp_snoop.c BSD: Use struct ip rather than struct iphdr 2020-01-02 19:17:10 +02:00
dhcp_snoop.h
dpp_hostapd.c DPP: Received Configurator backup processing 2020-01-31 23:16:05 +02:00
dpp_hostapd.h DPP: NFC negotiated connection handover 2020-01-27 20:36:09 +02:00
drv_callbacks.c Do not skip MBO PMF check with the WPS special case WPA check exception 2020-02-22 19:20:44 +02:00
eap_user_db.c Check snprintf result to avoid compiler warnings 2018-12-24 11:09:22 +02:00
eth_p_oui.c
eth_p_oui.h
fils_hlp.c BSD: Use struct ip rather than struct iphdr 2020-01-02 19:17:10 +02:00
fils_hlp.h
gas_query_ap.c
gas_query_ap.h
gas_serv.c DPP2: hostapd as TCP Relay 2019-04-22 21:08:59 +03:00
gas_serv.h DPP2: hostapd as TCP Relay 2019-04-22 21:08:59 +03:00
hostapd.c Remove CONFIG_IEEE80211N build option 2020-02-22 19:20:44 +02:00
hostapd.h HT: Remove SMPS in AP mode 2020-02-16 13:58:54 +02:00
hs20.c Remove CONFIG_IEEE80211W build parameter 2019-09-08 17:33:40 +03:00
hs20.h HS 2.0: Move Terms and Conditions Server URL generation from AP to AS 2018-06-21 20:50:54 +03:00
hw_features.c Remove CONFIG_IEEE80211N build option 2020-02-22 19:20:44 +02:00
hw_features.h Silence compiler warning in no-NEED_AP_MLME builds 2020-01-09 12:44:08 +02:00
ieee802_1x.c Introduce and add key_flag 2020-01-09 12:38:36 +02:00
ieee802_1x.h Extra RADIUS request attributes from SQLite 2019-07-30 19:58:09 +03:00
ieee802_11.c Remove CONFIG_IEEE80211N build option 2020-02-22 19:20:44 +02:00
ieee802_11.h Remove Secondary Channel Offset element from Beacon/Probe Response frames 2020-02-22 19:20:44 +02:00
ieee802_11_auth.c Fix possible memory leak of RADIUS data in handle_auth() 2019-12-29 23:43:55 +02:00
ieee802_11_auth.h Make hostapd_copy_psk_list() non-static 2019-12-29 23:34:01 +02:00
ieee802_11_he.c HE: Dynamically turn on TWT responder support 2020-02-16 12:37:47 +02:00
ieee802_11_ht.c Fix a typo in a comment 2020-02-22 19:20:44 +02:00
ieee802_11_shared.c AP mode indication of Beacon protection being enabled 2020-02-17 23:48:24 +02:00
ieee802_11_vht.c AP: Publish only HE capabilities and operation IEs on 6 GHz band 2019-10-15 15:39:22 +03:00
Makefile Remove IAPP functionality from hostapd 2019-09-11 13:11:03 +03:00
mbo_ap.c
mbo_ap.h
ndisc_snoop.c
ndisc_snoop.h
neighbor_db.c hostapd: Support showing neighbor list through hostapd_cli 2019-12-26 17:59:03 +02:00
neighbor_db.h hostapd: Support showing neighbor list through hostapd_cli 2019-12-26 17:59:03 +02:00
p2p_hostapd.c
p2p_hostapd.h
pmksa_cache_auth.c
pmksa_cache_auth.h OWE: PMKSA caching in AP mode 2017-10-09 12:12:54 +03:00
preauth_auth.c Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
preauth_auth.h
rrm.c hostapd: Fix a typo in function name 2019-01-02 16:40:34 +02:00
rrm.h
sta_info.c Remove CONFIG_IEEE80211N build option 2020-02-22 19:20:44 +02:00
sta_info.h SAE: A bit optimized sae_confirm_immediate=2 for testing purposes 2020-01-08 20:57:08 +02:00
taxonomy.c
taxonomy.h
tkip_countermeasures.c hostapd: Add logging around Michael MIC related failures 2018-04-02 16:51:29 +03:00
tkip_countermeasures.h
utils.c
vlan.c
vlan.h
vlan_full.c vlan: Use new bridge ioctl() 2019-01-02 00:23:43 +02:00
vlan_ifconfig.c
vlan_init.c Check snprintf result to avoid compiler warnings 2018-12-24 11:09:22 +02:00
vlan_init.h
vlan_ioctl.c
vlan_util.c
vlan_util.h
wmm.c Fix wmm compile on fedora-17 (gcc 4.7.2) 2020-02-03 02:03:32 +02:00
wmm.h
wnm_ap.c Add BIGTK KDE and subelement similarly to IGTK 2020-02-17 23:48:24 +02:00
wnm_ap.h WNM: Collocated Interference Reporting 2018-10-30 14:07:51 +02:00
wpa_auth.c AP: Allow PTK rekeying without Ext KeyID to be disabled as a workaround 2020-02-23 12:22:49 +02:00
wpa_auth.h AP: Allow PTK rekeying without Ext KeyID to be disabled as a workaround 2020-02-23 12:22:49 +02:00
wpa_auth_ft.c Add BIGTK KDE and subelement similarly to IGTK 2020-02-17 23:48:24 +02:00
wpa_auth_glue.c AP: Allow PTK rekeying without Ext KeyID to be disabled as a workaround 2020-02-23 12:22:49 +02:00
wpa_auth_glue.h
wpa_auth_i.h Generate BIGTK and rekey it with IGTK 2020-02-17 23:48:24 +02:00
wpa_auth_ie.c Merge wpa_supplicant and hostapd EAPOL-Key KDE parsers 2019-10-18 13:02:27 +03:00
wpa_auth_ie.h Merge wpa_supplicant and hostapd EAPOL-Key KDE parsers 2019-10-18 13:02:27 +03:00
wpa_auth_kay.c macsec: Support IEEE 802.1X(EAP)/PSK MACsec Key Agreement in hostapd 2019-06-03 20:27:44 +03:00
wpa_auth_kay.h macsec: Support IEEE 802.1X(EAP)/PSK MACsec Key Agreement in hostapd 2019-06-03 20:27:44 +03:00
wps_hostapd.c WPS: Mark added PSK entry with wps=1 tag for per-Enrollee PSK case 2020-02-16 11:54:36 +02:00
wps_hostapd.h
x_snoop.c
x_snoop.h