Commit Graph

193 Commits

Author SHA1 Message Date
Lubomir Rintel
966d547f69 Enable MESH & SAE 2019-01-21 16:07:22 +01:00
Lubomir Rintel
064b725fbd Update to 2.7 upstream release
Also, drop the non-aggressive roaming patch. There doesn't seem to be
much reason to deviate from upstream here.

Modernize the spec a bit by using %autosetup.
2018-12-18 17:31:58 +01:00
Lubomir Rintel
6671a4f075 Expose availability of SHA384 and FT on D-Bus 2018-11-29 15:19:05 +01:00
Lubomir Rintel
4356e0b173 Make the builds verbose 2018-11-29 15:08:54 +01:00
Lubomir Rintel
7f96e673cc Drop the broken Pmf D-Bus property patch
There already is a Pmf property. And NetworkManager doesn't need it
anyways.

More here: http://lists.infradead.org/pipermail/hostap/2018-August/038754.html
2018-08-15 14:45:49 +02:00
Davide Caratti
1a3463cc4a Ignore unauthenticated encrypted EAPOL-Key data
CVE-2018-14526
Upstream advisory: https://w1.fi/security/2018-1/unauthenticated-eapol-key-decryption.txt
2018-08-08 19:27:52 +02:00
Fedora Release Engineering
ce8fa396fd - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2018-07-14 08:59:20 +00:00
Davide Caratti
7c4f7fa0c7 fix wrong encoding of NL80211_ATTR_SMPS_MODE
https://bugzilla.redhat.com/show_bug.cgi?id=1570903
2018-06-22 16:50:28 +02:00
Davide Caratti
f50b348f99 make PMF configurable using D-Bus
https://bugzilla.redhat.com/show_bug.cgi?id=1567474
2018-05-11 18:56:57 +02:00
Fedora Release Engineering
e36192aacc - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2018-02-09 21:09:00 +00:00
Davide Caratti
fc0458e34d Don't restart wpa_supplicant.service on package upgrade (rh #1535233)
https://bugzilla.redhat.com/show_bug.cgi?id=1535233
2018-01-16 23:12:49 +01:00
Jiří Klimeš
4d5c88f31d Enable Fast BSS Transition for station mode (rh #1372928)
https://bugzilla.redhat.com/show_bug.cgi?id=1372928
2017-11-01 13:09:19 +01:00
Jiří Klimeš
dadca54170 Fix crash when using MACsec without loaded macsec.ko (rh #1497640)
https://bugzilla.redhat.com/show_bug.cgi?id=1497640
2017-11-01 12:58:14 +01:00
Lubomir Rintel
fbf8c1b456 Fix the "Key Reinstallation Attacks: Forcing Nonce Reuse in WPA2" issues
Upstream advisory: https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt
Details and the paper: https://www.krackattacks.com/

- hostapd: Avoid key reinstallation in FT handshake (CVE-2017-13082)
- Fix PTK rekeying to generate a new ANonce
- Prevent reinstallation of an already in-use group key and extend
  protection of GTK/IGTK reinstallation of WNM-Sleep Mode cases
  (CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081,
  CVE-2017-13087, CVE-2017-13088)
- Prevent installation of an all-zero TK
- TDLS: Reject TPK-TK reconfiguration
- WNM: Ignore WNM-Sleep Mode Response without pending request
- FT: Do not allow multiple Reassociation Response frames
2017-10-16 13:09:02 +02:00
Lubomir Rintel
f5828996b2 Fix a bogus changelog date 2017-10-16 13:08:19 +02:00
Fedora Release Engineering
ca7cba89e1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild 2017-08-03 10:22:58 +00:00
Fedora Release Engineering
9273785be3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild 2017-07-27 21:45:30 +00:00
Beniamino Galvani
3060fdc1de OpenSSL: fix private key password callback (rh #1465138) 2017-07-17 19:04:32 +02:00
Beniamino Galvani
750ee3c11d OpenSSL: use system ciphers by default (rh#1462262) 2017-07-17 19:04:32 +02:00
Beniamino Galvani
68b720b838 nl80211: Fix race condition in detecting MAC change (rh #1451834) 2017-05-17 17:27:19 +02:00
Davide Caratti
e688ea7718 macsec: fix segmentation fault and coverity scans (rh#1428937) 2017-04-11 19:08:00 +02:00
Thomas Haller
18d8fa3c44 enable IEEE 802.11w (management frame protection, PMF) (rh#909499) 2017-03-13 14:01:14 +01:00
Davide Caratti
fb7f6658b8 backport support for IEEE 802.1AE (macsec) 2017-03-03 15:27:28 +01:00
Fedora Release Engineering
e0ed12b18c - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild 2017-02-11 17:32:07 +00:00
Jiří Klimeš
73183ae44c Enable Wi-Fi Display support for Miracast (rh #1395682)
Patch by: Jonathan Dieter <jdieter@lesbg.com>

https://bugzilla.redhat.com/show_bug.cgi?id=1395682
2017-01-27 12:26:42 +01:00
Lubomir Rintel
d0ad4f7e1d Update to version 2.6 2016-11-22 15:55:13 +01:00
Lubomir Rintel
022452e0f6 Don't own a directory in /run/ 2016-03-21 14:10:47 +01:00
Fedora Release Engineering
f03bcb0261 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild 2016-02-05 03:09:06 +00:00
Lubomir Rintel
20b650e1cf Really synchronize the service file with upstream 2015-11-16 18:26:53 +01:00
Lukáš Nykrýn
70ad8a7849 Scriptlets replaced with new systemd macros (rh #850369) 2015-11-03 10:06:34 +01:00
Lubomir Rintel
dfd04df55b Enable syslog by default
This gives more relevant data to journal than logging in stdout. Also, pid file
is no longer needed, since we're a Type=dbus service.

The flat logging file is removed since it's not needed when we're logging into
journal. We probably can remove the logrotate file too.

The -u argument is moved into the service file as we can't really remove it
without changing the service's Type.
2015-10-31 22:12:37 +01:00
Lubomir Rintel
dd5ca60f4a Update to version 2.5 2015-10-27 09:08:51 +01:00
Lubomir Rintel
4b1dcdcfa7 Fix the D-Bus policy 2015-10-23 18:07:06 +02:00
Ville Skyttä
54e564b9e7 Don't order service after syslog.target (rh #1055197), mark COPYING as %license 2015-10-03 17:06:39 +03:00
Jiří Klimeš
3675773849 Fix for NDEF record payload length checking (rh #1241907) 2015-07-15 09:33:30 +02:00
Jiří Klimeš
d63c1a7a80 Fix a crash if P2P management interface is used (rh #1231973)
Upstream fix:
http://w1.fi/cgit/hostap/commit/wpa_supplicant/dbus/dbus_new_handlers.c?id=8a78e227df1ead19be8e12a4108e448887e64d6f

https://bugzilla.redhat.com/show_bug.cgi?id=1231973
2015-06-16 11:25:26 +02:00
Dan Williams
2ba26b0190 Remove obsolete wpa_supplicant-openssl-more-algs.patch
Fixed upstream back in 2010 by 1056dad796e78509604c0aa836803c8425b4ba37:
"Fix PKCS#12 use with OpenSSL 1.0.0"
2015-04-23 12:43:27 -05:00
Adam Williamson
47da8a0463 new release 2.4, backport CVE-2015-1863 fix, drop libeap 2015-04-23 10:06:50 -07:00
Orion Poplawski
3391589fc4 Do not install wpa_supplicant.service as executable (bug #803980) 2014-11-01 08:13:14 -06:00
Lubomir Rintel
237e32e034 Update to 2.3 2014-10-30 18:11:30 +01:00
Dan Williams
05ce9ccd8e Use os_exec() for action script execution (CVE-2014-3686) 2014-10-22 19:02:24 -05:00
Kevin Fenzi
8e194e2572 Rebuild for rpm bug 1131960 2014-08-21 11:54:52 -06:00
Peter Robinson
79b1127a93 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild 2014-08-18 08:54:58 +00:00
Dennis Gilmore
cd351838b3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild 2014-06-07 23:52:09 -05:00
Dan Williams
c573c20bc8 Don't disconnect when PMKSA cache gets too large (rh #1016707) 2013-11-18 16:04:03 -06:00
Dennis Gilmore
0a4f9f2fd7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild 2013-08-04 02:15:08 -05:00
Dan Williams
fe244795ae Make daemon and libeap full RELRO/PIC/PIE 2013-07-10 19:57:47 -05:00
Dan Williams
42f70a642b Build and package eapol_test (rh #638218) 2013-07-10 13:55:39 -05:00
Dan Williams
66a5d3bbb5 Disable libeap WiMAX hack for RHEL 2013-07-10 12:48:54 -05:00
Dan Williams
27b19498c9 Enable HT (802.11n) for AP mode 2013-05-15 08:22:14 -05:00
Dan Williams
155fa6a6d1 Use hardened build macros 2013-05-07 15:51:51 -05:00
Dan Williams
22b8be3d0f Update to v2.0 2013-05-07 15:12:27 -05:00
Dan Williams
b950724d02 Update to 1.1 2013-04-25 15:30:21 +02:00
Dennis Gilmore
f790f04078 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild 2013-02-14 21:17:29 -06:00
Dan Horák
3a757360f7 rebuilt again for fixed soname in libnl3 2013-01-20 16:30:12 +01:00
Kalev Lember
be87f0b3e6 Rebuilt for libnl3 2013-01-20 06:16:09 +01:00
Dan Williams
84eace9259 Bump version to sync with f18/master 2012-08-30 11:14:20 -05:00
Dan Williams
16eae335b8 Enable lightweight AP mode, P2P, and RSN IBSS 2012-08-30 11:14:15 -05:00
Dennis Gilmore
45d3eca51e - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild 2012-07-21 23:01:28 -05:00
Dan Williams
bea794b2d0 Fix systemd startup ordering (rh #815091) 2012-05-01 12:06:05 -05:00
Dan Williams
661e6b910e Rebuild against libnl3 2012-03-02 16:29:12 -06:00
Dan Williams
cbc1a0f900 Fix driver fallback for non nl80211-based drivers (rh #783712) 2012-02-03 09:30:41 -06:00
Dan Williams
0d7a886129 Need <unistd.h> for getopt() 2012-01-10 16:30:05 -06:00
Dan Williams
28f5ec3c55 Update to 1.0-rc1 + git 2012-01-10 16:18:58 -06:00
Tom "spot" Callaway
67c0f69126 add missing scriptlets 2011-09-09 12:10:05 -04:00
Tom "spot" Callaway
0920b823e3 convert to systemd 2011-09-08 14:30:41 -04:00
Dan Williams
7a399e8938 Fix various crashes with D-Bus interface (rh #678625) (rh #725517) 2011-07-27 10:07:17 -05:00
Dan Williams
7b60501ccc Don't crash when trying to access invalid properties via D-Bus (rh #678625) 2011-05-03 11:37:42 -05:00
Dan Williams
04316285a6 Make examples read-only to avoid erroneous python dependency (rh #687952) 2011-05-02 15:52:35 -05:00
Bill Nottingham
33a78881dc Bump rev, add changelog 2011-04-19 15:55:55 -04:00
Bill Nottingham
7e72405ca5 Be even more clean and only apply the patch when building libeap. 2011-04-19 14:20:37 -04:00
Bill Nottingham
bf93191ef3 Add support for building EAP as a library, for WiMAX usage. 2011-03-25 11:22:48 -04:00
Dennis Gilmore
5811d8ca91 - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild 2011-02-07 21:08:59 -06:00
Dan Williams
840f407ef7 Enable EAP-TNC (rh #659038) 2011-01-11 09:24:42 -06:00
Dan Williams
cdd9d9b1c8 Buildrequire libnl for nl80211 driver 2010-12-15 12:54:06 -06:00
Dan Williams
ebf92bd18c Enable bgscan plugin 2010-12-15 11:58:41 -06:00
Dan Williams
10a08821ad Update to 0.7.3 2010-12-08 10:33:40 -06:00
Peter Lemenkov
33fe68f313 Cosmetic fixes from the merge review
Signed-off-by: Peter Lemenkov <lemenkov@gmail.com>
2010-10-07 16:27:49 +04:00
Daniel Williams
b166cd6ec4 - Remove prereq on chkconfig
- Build GUI with qt4 for rawhide (rh #537105)
2010-05-13 19:38:13 +00:00
Daniel Williams
4b6173f748 - Fix crash when interfaces are removed (like suspend/resume) (rh #589507) 2010-05-07 01:16:58 +00:00
Daniel Williams
8529a653e7 - Fix handling of newer PKCS#12 files (rh #541924) 2010-01-07 03:31:05 +00:00
Daniel Williams
25bef9cb0e - Fix supplicant initscript return value (rh #521807)
- Fix race when connecting to WPA-Enterprise/802.1x-enabled access points
    (rh #508509)
- Don't double-scan when attempting to associate
2009-11-29 23:46:04 +00:00
Tomáš Mráz
14e25e323d - rebuilt with new openssl 2009-08-21 16:28:10 +00:00
Jesse Keating
a545601386 - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild 2009-07-27 07:27:03 +00:00
Daniel Williams
5a2016ff10 - Let D-Bus clients know when the supplicant is scanning 2009-05-13 14:53:07 +00:00
Daniel Williams
184c33502b - Ensure the supplicant starts and ends with clean driver state
- Handle driver disconnect spammage by forcibly clearing SSID
- Don't switch access points unless the current association is dire (rh
    #493745)
2009-05-12 20:25:14 +00:00
Daniel Williams
dd8912773d - Avoid creating bogus Ad-Hoc networks when forcing the driver to
disconnect (rh #497771)
2009-05-12 18:07:23 +00:00
Daniel Williams
bf697ebdfe drop upstreamed patch 2009-03-09 21:08:47 +00:00
Daniel Williams
6f5c0a590b - Update to latest upstream release 2009-03-09 21:02:40 +00:00
Colin Walters
3b7817c7cc - Add patch from upstream to suppress unrequested replies, this quiets a
dbus warning.
2009-02-25 18:17:56 +00:00
Daniel Williams
b206b7d518 - Fix scan result retrieval in very dense wifi environments 2009-02-06 22:25:50 +00:00
Daniel Williams
d455e80fd8 - Ensure that drivers don't retry association when they aren't supposed to 2009-02-06 21:35:16 +00:00
Daniel Williams
e7c2862af3 - Fix PEAP connections to Windows Server 2008 authenticators (rh #465022)
- Stop supplicant on uninstall (rh #447843)
- Suppress scan results message in logs (rh #466601)
2009-01-30 17:45:46 +00:00
Tomáš Mráz
e9bd286f5c - rebuild with new openssl 2009-01-18 15:31:52 +00:00
Daniel Williams
fb40b6cef9 - Handle encryption keys correctly when switching 802.11 modes (rh #459399)
- Better scanning behavior on resume from suspend/hibernate
- Better interaction with newer kernels and drivers
2008-10-13 15:06:57 +00:00
Daniel Williams
229cd7199e - Update to 0.6.4
- Remove 'hostap', 'madwifi', and 'prism54' drivers; use standard 'wext'
    instead
- Drop upstreamed patches
2008-08-27 21:14:47 +00:00
Daniel Williams
3b4d3de16a - Fix 802.11a frequency bug
- Always schedule specific SSID scans to help find hidden APs
- Properly switch between modes on mac80211 drivers
- Give adhoc connections more time to assocate
2008-06-11 11:01:48 +00:00
Christopher Aillon
8a6cfa2d53 - BuildRequires qt3-devel 2008-03-10 22:49:48 +00:00
Daniel Williams
bbc7f43cd1 - Fix log file path in service config file 2008-03-08 20:09:35 +00:00
Daniel Williams
a1b281305e - Don't start the supplicant by default when installed (rh #436380) 2008-03-06 22:51:39 +00:00