wpasupplicant
16 years agoTNC: Added TNC server support into documentation and ChangeLogs
Jouni Malinen [Sun, 9 Mar 2008 10:14:15 +0000 (12:14 +0200)]
TNC: Added TNC server support into documentation and ChangeLogs

16 years agoTNC: Integrated TNC support into EAP-TTLS server
Jouni Malinen [Sun, 9 Mar 2008 10:05:06 +0000 (12:05 +0200)]
TNC: Integrated TNC support into EAP-TTLS server

If TNC is enabled, EAP-TTLS will run a second EAP (TNC) inside the tunnel
after a successful authentication.

16 years agoTNC: Fixed TNC when using EAP-TTLS with non-EAP Phase 2
Jouni Malinen [Sun, 9 Mar 2008 10:04:10 +0000 (12:04 +0200)]
TNC: Fixed TNC when using EAP-TTLS with non-EAP Phase 2

Need to process EAP AVP after the non-EAP Phase 2 method. In addition,
EAP-TTLS/MSCHAPv2 needs special code for handling the starting of TNC after
extra roundtrip of MSCHAPv2 success message.

16 years agoTNC: Integrated TNC support into EAP-FAST server
Jouni Malinen [Sun, 9 Mar 2008 09:22:17 +0000 (11:22 +0200)]
TNC: Integrated TNC support into EAP-FAST server

Tunneled EAP sequence is now used to perform both the authentication (e.g.,
using EAP-GTC) and TNC validation (EAP-TNC) inside the EAP-FAST tunnel if
TNC has been enabled.

16 years agoTNC: Added support for using TNC with EAP-FAST
Jouni Malinen [Sun, 9 Mar 2008 09:21:01 +0000 (11:21 +0200)]
TNC: Added support for using TNC with EAP-FAST

16 years agoTNC: Provide 'tnc' configuration option for EAP server and methods
Jouni Malinen [Sun, 9 Mar 2008 08:42:53 +0000 (10:42 +0200)]
TNC: Provide 'tnc' configuration option for EAP server and methods

16 years agoTNC: Added preliminary TNC implementation for hostapd
Jouni Malinen [Sun, 9 Mar 2008 08:37:18 +0000 (10:37 +0200)]
TNC: Added preliminary TNC implementation for hostapd

This adds EAP-TNC method and TNCS (IF-IMV and IF-TNCCS) functionality.
There is no integration with EAP-TTLS and EAP-FAST at this point, so this
version is not yet suitable for real use (i.e., EAP-TNC can only be tested
outside a tunnel which is not an allowed configuration for deployment).
However, the basic TNCS functionality is more or less complete and this
version seems to interoperate with wpa_supplicant.

16 years agoMake the "invalid group" error show up with default verbosity level
Jouni Malinen [Thu, 6 Mar 2008 20:49:46 +0000 (22:49 +0200)]
Make the "invalid group" error show up with default verbosity level

16 years agoFix qt3 wpa_gui build
Dan Williams [Wed, 5 Mar 2008 16:30:01 +0000 (18:30 +0200)]
Fix qt3 wpa_gui build

When a WpaMsg item to the QValueList WpaMsgList, there's no constructor
that the QValueList can call.  This is a port of the fix from the stable
branch where it builds fine.

16 years agoFix potential use-after-free in dbus byte array demarshaling code
Dan Williams [Wed, 5 Mar 2008 14:15:10 +0000 (16:15 +0200)]
Fix potential use-after-free in dbus byte array demarshaling code

The byte array code should be clearing its own pointer, not the string
array pointer.

16 years agoAdded a missing '#' to indicate a comment.
Jouni Malinen [Wed, 5 Mar 2008 14:06:43 +0000 (16:06 +0200)]
Added a missing '#' to indicate a comment.

16 years agoRenamed local DBUS_VERSION define to avoid conflict with dbus 1.1 headers
Jouni Malinen [Wed, 5 Mar 2008 14:05:26 +0000 (16:05 +0200)]
Renamed local DBUS_VERSION define to avoid conflict with dbus 1.1 headers

16 years agoEAP-FAST: Verify that identity from PAC-Opaque matches with Phase 2 (GTC)
Jouni Malinen [Thu, 28 Feb 2008 02:00:12 +0000 (18:00 -0800)]
EAP-FAST: Verify that identity from PAC-Opaque matches with Phase 2 (GTC)

16 years agoEAP-FAST: Cleaned up TLV processing and added support for EAP Sequences
Jouni Malinen [Thu, 28 Feb 2008 01:59:34 +0000 (17:59 -0800)]
EAP-FAST: Cleaned up TLV processing and added support for EAP Sequences

Number of TLVs were processed in groups and these cases were now separated
into more flexible processing of one TLV at the time. wpabuf_concat()
function was added to make it easier to concatenate TLVs. EAP Sequences are
now supported in both server and peer code, but the server side is not
enabled by default.

16 years agoEAP-FAST: Define and use EAP_FAST_CMK_LEN
Jouni Malinen [Thu, 28 Feb 2008 01:58:46 +0000 (17:58 -0800)]
EAP-FAST: Define and use EAP_FAST_CMK_LEN

16 years agoRemoved extra '_' from struct eap_tlv_crypto_binding__tlv name
Jouni Malinen [Thu, 28 Feb 2008 01:58:13 +0000 (17:58 -0800)]
Removed extra '_' from struct eap_tlv_crypto_binding__tlv name

16 years agoEAP-FAST: Divided eap_fast_process() into number of helper functions
Jouni Malinen [Thu, 28 Feb 2008 01:57:49 +0000 (17:57 -0800)]
EAP-FAST: Divided eap_fast_process() into number of helper functions

16 years agoEAP-FAST: Moved common peer/server functionality into a shared file
Jouni Malinen [Thu, 28 Feb 2008 01:57:19 +0000 (17:57 -0800)]
EAP-FAST: Moved common peer/server functionality into a shared file

16 years agoEAP-FAST: Added shared helper functions for building TLVs
Jouni Malinen [Thu, 28 Feb 2008 01:56:30 +0000 (17:56 -0800)]
EAP-FAST: Added shared helper functions for building TLVs

16 years agoEAP-FAST: Add peer identity into EAP-FAST PAC-Opaque
Jouni Malinen [Thu, 28 Feb 2008 01:55:40 +0000 (17:55 -0800)]
EAP-FAST: Add peer identity into EAP-FAST PAC-Opaque

This allows Phase 2 Identity Request to be skipped if the identity is
already known from PAC-Opaque received in TLS handshake in order to save
one roundtrip from normal authentication.

16 years agoPreparations for 0.4.11 release
Jouni Malinen [Thu, 28 Feb 2008 01:54:41 +0000 (17:54 -0800)]
Preparations for 0.4.11 release

16 years agoAdded max_listen_interval configuration option
Jouni Malinen [Thu, 28 Feb 2008 01:54:06 +0000 (17:54 -0800)]
Added max_listen_interval configuration option

This allows associations to be denied if the STA tries to use too large
listen interval. The default value is 65535 which matches with the field
size limits.

16 years agodriver_ralink: Make sure assoc_{req,resp}_ies do not get double-freed
Jouni Malinen [Thu, 28 Feb 2008 01:53:22 +0000 (17:53 -0800)]
driver_ralink: Make sure assoc_{req,resp}_ies do not get double-freed

16 years agodriver_ralink: Use os_strlcpy instead of os_strncpy to ensure null
Jouni Malinen [Thu, 28 Feb 2008 01:52:43 +0000 (17:52 -0800)]
driver_ralink: Use os_strlcpy instead of os_strncpy to ensure null
termination

16 years agodriver_ralink: Fixed couple of memory leaks on error path
Jouni Malinen [Thu, 28 Feb 2008 01:52:05 +0000 (17:52 -0800)]
driver_ralink: Fixed couple of memory leaks on error path

16 years agoVerify that os_get_time() does not fail before using the time value when
Jouni Malinen [Thu, 28 Feb 2008 01:50:36 +0000 (17:50 -0800)]
Verify that os_get_time() does not fail before using the time value when
registering an eloop timeout.

16 years agoFixed base64_decode() reject empty input buffers
Jouni Malinen [Thu, 28 Feb 2008 01:49:59 +0000 (17:49 -0800)]
Fixed base64_decode() reject empty input buffers

16 years agoEnforce non-zero MPPE key length
Jouni Malinen [Thu, 28 Feb 2008 01:49:24 +0000 (17:49 -0800)]
Enforce non-zero MPPE key length

16 years agoEnhance manpage with use of emphasis instead of strong quote
Kel Modderman [Thu, 28 Feb 2008 01:48:23 +0000 (17:48 -0800)]
Enhance manpage with use of emphasis instead of strong quote

The Debian package checker "lintian" was making noise about
wpa_supplicant.conf(5). It was caused by a line beginning with ', which is
apparently not liked by man(1).

I suggest the use of <emphasis>word</emphasis> where 'word' is used at the
moment.

Signed-off-by: Kel Modderman <kel@otaku42.de>

16 years agoSilence SIOCSIWAUTH ioctl failure message.
Jouni Malinen [Thu, 28 Feb 2008 01:47:23 +0000 (17:47 -0800)]
Silence SIOCSIWAUTH ioctl failure message.

These are expected in most cases and there is no need to confuse users
with the messages in stderr (perror was used here). These are now only
shown in debug output and EOPNOTSUPP errors are silently ignored.

16 years agoAdded listen interval to hostapd sta_add() driver function
Jouni Malinen [Thu, 28 Feb 2008 01:45:00 +0000 (17:45 -0800)]
Added listen interval to hostapd sta_add() driver function

16 years agoAdded files that cg-init excluded
Jouni Malinen [Thu, 28 Feb 2008 01:36:06 +0000 (17:36 -0800)]
Added files that cg-init excluded

16 years agoRe-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
Jouni Malinen [Thu, 28 Feb 2008 01:34:43 +0000 (17:34 -0800)]
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release