Tanya Singh
b0e95e68a2
afc: Use either ca-cert or access-token to get authorization in curl command for the AFC server
...
Fixes:WIFI-14427
Signed-off-by: Tanya Singh <tanya_singh@accton.com>
2025-07-31 10:03:02 +02:00
Tanya Singh
6d2fd1de0d
afc: Use curl instead of uclient to send/receive AFC request/response using hostapd
...
Fixes: WIFI-14427
Signed-off-by: Tanya Singh <tanya_singh@accton.com>
2025-07-30 09:02:05 +02:00
John Crispin
4a5cf875d9
hostapd: convert to using hostapd_utils package
...
Signed-off-by: John Crispin <john@phrozen.org>
2025-07-17 07:55:04 +02:00
Marek Kwaczynski
1213182012
mpskd: fix incorrect MPSK value assignment
...
If MPSK is enabled on any interface, `ssid.mpsk` should be true.
Prevents overwriting true with a false value when multiple interfaces
share the same SSID.
Also allow handling of the 'reload' event even when MPSK is not enabled,
to ensure config reloads are not skipped, e.g. when configuration is empty.
Fixes: WIFI-14484
Signed-off-by: Marek Kwaczynski <marek@shasta.cloud>
2025-06-27 07:37:20 +02:00
John Crispin
af165342ed
ipq807x_v5.4/hostapd: fix/improve rssi_threshold handling
...
* add an ucentral-event
* turn thresholds into bss options
Fixes: WIFI-14679
Signed-off-by: John Crispin <john@phrozen.org>
2025-06-11 09:18:04 +02:00
John Crispin
e998711444
ipq807x/hostapd: backport FT VLAN fix
...
The bug was in the upstream hostapd codebase, backport/rebase the fix
--> ba150059d1ec964add8f29eb2c92dd6dfde97308
Fixes: WIFI-14508
Signed-off-by: John Crispin <john@phrozen.org>
2025-04-10 14:26:04 +02:00
Rick Sommerville
b67f97f213
hostapd: proxy arp: fail gracefully
...
Disable proxy arp and continue if snoop interface setup fail.
Fixes: WIFI-14507
Signed-off-by: Rick Sommerville <rick.sommerville@netexperience.com>
2025-04-09 08:53:01 +02:00
John Crispin
caee55a61f
hostapd: correctly set the sta->psk_id on 6G band
...
Signed-off-by: John Crispin <john@phrozen.org>
2025-03-26 07:40:55 +01:00
John Crispin
5a597c912d
ipq807x/hostapd: merge missing e-mspk sta/psk index patch
...
Signed-off-by: John Crispin <john@phrozen.org>
2025-03-24 10:47:05 +01:00
Marek Kwaczynski
18bb47be4d
hostapd: mpskd: use mpsk from wireless config
...
In MPSK AAA need to use mpsk info to block scans
becasue keys are not configured.
Signed-off-by: Marek Kwaczynski <marek@shasta.cloud>
2025-03-11 10:09:12 +01:00
Marek Kwaczynski
7847e1778e
netifd: hostapd.sh add multi_psk param
...
Notification about enabling multi_psk for specific
wireless network.
Signed-off-by: Marek Kwaczynski <marek@shasta.cloud>
2025-03-11 10:09:12 +01:00
Marek Kwaczynski
57735bcd18
hostapd: mpskd: fix checking addr in ssid_cache
...
Fix ucode syntax.
Signed-off-by: Marek Kwaczynski <marek@shasta.cloud>
2025-03-11 10:09:12 +01:00
Marek Kwaczynski
376072ad97
hostapd: mpskd: minor: remove white spaces end of the line
...
Signed-off-by: Marek Kwaczynski <marek@shasta.cloud>
2025-03-11 10:09:12 +01:00
John Crispin
7300252b07
hostapd: allow clients to refresh the used PSK if band is not 6G
...
Fixes: WIFI-14256
Signed-off-by: John Crispin <john@phrozen.org>
2024-11-13 15:03:28 +01:00
Tanya Singh
ccd23cb4c1
hostapd: add afcd respawn
...
Customize the procd instance respawn time parameters to avoid afcd instance
crash while creating afc-location.json
Fixes: WIFI-14261
Signed-off-by: Tanya Singh <tanya_singh@accton.com>
2024-11-11 07:00:41 +01:00
John Crispin
911da1bb41
mpskd: kick all 6G clients upon reload
...
Signed-off-by: John Crispin <john@phrozen.org>
2024-09-23 14:57:21 +02:00
Tanya Singh
ecff108ac9
afc: Add more fields to ubus command for GPS to send location info to AFC server
...
Fixes: WIFI-14065
Signed-off-by: Tanya Singh <tanya_singh@accton.com>
2024-09-16 11:49:02 +02:00
John Crispin
c235143c16
hostapd: allow using psk2-radius in combination with enhanced MPSK
...
Signed-off-by: John Crispin <john@phrozen.org>
2024-09-09 15:47:42 +02:00
Firas Shaari
2a4d4f6a2e
hostapd: Higher WAP2 SHA256 breaks MPSK deployments
...
Fixes: WIFI-14092
Signed-off-by: Firas Shaari <firas.shaari@shaariconsultancy.com>
2024-09-09 15:27:22 +02:00
John Crispin
8cd635c895
hostapd: fix radius rate limit while roaming
...
Fixes: WIFI-14054
Signed-off-by: John Crispin <john@phrozen.org>
2024-09-09 15:27:08 +02:00
John Crispin
9ac52bd77a
hostapd: fix mac specific multi-psk
...
Fixes: WIFI-14095
Signed-off-by: John Crispin <john@phrozen.org>
2024-09-09 15:27:07 +02:00
John Crispin
16ebaf4fa3
hostapd: always override r0k_holder
...
Signed-off-by: John Crispin <john@phrozen.org>
2024-08-15 07:11:29 +02:00
John Crispin
ebe0b3ea52
hostapd: do not auto generate r0/1k keys when ft_key is set
...
Signed-off-by: John Crispin <john@phrozen.org>
2024-08-07 06:38:24 +02:00
John Crispin
0c19ddddca
hostapd: fix wpa3-192 + 11r AKM
...
Fixes: WIFI-14016
Signed-off-by: John Crispin <john@phrozen.org>
2024-08-02 11:06:37 +02:00
John Crispin
273bce6f76
hostapd: fix extended radius AVPs
...
Signed-off-by: John Crispin <john@phrozen.org>
2024-07-24 06:14:00 +02:00
John Crispin
0a21b9d254
hostapd: enable FT-PSK for psk2-radius
...
Signed-off-by: John Crispin <john@phrozen.org>
2024-07-24 06:14:00 +02:00
John Crispin
ed8311e4e4
hostapd: add ft_key easy button
...
Signed-off-by: John Crispin <john@phrozen.org>
2024-07-18 16:08:08 +02:00
John Crispin
3085bf3ccc
hostapd: add rate support to FT
...
Signed-off-by: John Crispin <john@phrozen.org>
2024-07-18 16:08:08 +02:00
John Crispin
27ad029ceb
hostapd: add origin_ap to events for FT associations
...
Signed-off-by: John Crispin <john@phrozen.org>
2024-07-13 15:35:43 +02:00
John Crispin
33f8f22375
hostapd: add enhanced MPSK support
...
Signed-off-by: John Crispin <john@phrozen.org>
2024-07-11 12:17:15 +02:00
Felix Fietkau
6afc11838e
hostapd: add support for authenticating with multiple PSKs via ubus helper
...
Also supports assigning a VLAN ID based on the PSK
Signed-off-by: Felix Fietkau <nbd@nbd.name>
2024-07-11 09:34:28 +02:00
Felix Fietkau
b5048d8305
hostapd: reject probe/assoc/auth requests if any subscriber rejects them
...
Signed-off-by: Felix Fietkau <nbd@nbd.name>
2024-07-03 08:41:03 +02:00
Venkat Chimata
45eb5c9a6b
ieee8021x / hostapd: Fix 802.1x + DVLAN issues
...
ieee8021x
---------
1. Handle link_up events and update hostapd config
2. For certains scenarios, we need to remove and add
instead of reload (reload did not work).
Consider the following scenario -
Say on CIG 186w as an example
eth0.4086 interface exists with some non-ieee8021x config.
Push ieee8021x config. In general the flow is that
reload_config is called followed by invocation of services (from ucentral-schema)
Services inovation does n't wait until the configi reloaded ie in this context
ieee8021x service is invoked much before the network interfaces are recreated.
That is not correct. To handle this, we capture link-up events
and remove the existing interface (in hostapd as shown below) and add again
3. For swconfig platforms, the names contain a dot. Handle that gracefully in
ubus_unsub_object while adding hostapd interface
4. Add better logging using log.syslog
hostapd
---------
In case of swconfig switches, the basename of the interface should be based on the last dot.
Earlier it was done based on the first dot, which would result in incorrect basename.
For example if the interface name is eth0.4087 then the vlan->ifname would be eth0.4087. (A dot at the end) .
Before this patch, the basename was returned as eth0. It should be eth0.4087
Also fixed the return code by adding a default value of 0 and removed an unncessary check
for if_add before ubus add call.
Signed-off-by: Venkat Chimata <venkata@shasta.cloud>
2024-07-03 06:37:47 +02:00
John Crispin
a449f08839
hostapd: run afc client in insecure mode if the CA is not present
...
Signed-off-by: John Crispin <john@phrozen.org>
2024-06-28 06:21:36 +02:00
John Crispin
10d8c47272
hostapd: drop wispr rate patch
...
this was breaking EAP-TTLS roaming
Signed-off-by: John Crispin <john@phrozen.org>
2024-06-19 13:54:58 +02:00
John Crispin
ad51d1788c
hostapd: fix OWE vendor IE content
...
Signed-off-by: John Crispin <john@phrozen.org>
2024-06-18 13:09:37 +02:00
Felix Fietkau
9569b46398
ipq807x_v5.4: support sending FT refresh frames for switch learning tables
...
Signed-off-by: Felix Fietkau <nbd@nbd.name>
2024-06-12 14:46:54 +02:00
John Crispin
0037af2a6b
afcd: allow starting the daemon without a CA
...
Signed-off-by: John Crispin <john@phrozen.org>
2024-06-10 06:08:30 +02:00
John Crispin
82ef44048b
afcd: do not require a CA
...
Signed-off-by: John Crispin <john@phrozen.org>
2024-06-06 14:20:42 +02:00
Felix Fietkau
836a411d5d
ipq807x_v5.4: afc support fixes
...
Signed-off-by: Felix Fietkau <nbd@nbd.name>
2024-05-20 08:07:30 +02:00
Marek Kwaczynski
f74dd74cef
hostapd: fix opclass during CSA with DFS channels
...
During CSA with DFS channels, disable, enable interface
is a part of the algorithm.
When interface was enabled old operating class before switch
and new channel were used causing mismatch in
configured_fixed_chan_to_freq function.
Example of log when switch from channel 157 to 108 was triggered:
"Could not convert op_class 124 channel 108 to operating frequency"
Fixes: WIFI-13385
Signed-off-by: Marek Kwaczynski <marek@shasta.cloud>
2024-04-30 18:02:23 +02:00
Marek Kwaczynski
b1474acf2f
hostapd: ubus: add DFS channels support during CSA
...
Add options to trigger CSA with DFS channels, without
this patch ubus request was rejected:
ubus call hostapd.wlan0 switch_chan '{"freq":5260,"bcn_count":10}'
Command failed: Operation not supported
Fixes: WIFI-13385
Signed-off-by: Marek Kwaczynski <marek@shasta.cloud>
2024-04-30 18:02:13 +02:00
Felix Fietkau
f6ea5dd273
ipq807x_5.4: fix hostapd ap+sta issue
...
Signed-off-by: Felix Fietkau <nbd@nbd.name>
2024-04-29 17:35:36 +02:00
John Crispin
d779808f88
hostapd: backport get_sta_ies
...
Signed-off-by: John Crispin <john@phrozen.org>
2024-04-27 16:15:25 +02:00
John Crispin
aa293e250e
hostapd: enable OWE
...
Signed-off-by: John Crispin <john@phrozen.org>
2024-04-27 16:15:25 +02:00
Felix Fietkau
49560ef3d3
ipq807x_v5.4: backport AFC support
...
Signed-off-by: Felix Fietkau <nbd@nbd.name>
2024-04-20 11:44:38 +02:00
Arif Alam
a7c9a5f780
hostapd: WISPr bandwidth for psk2-radius
...
Get bandwidth limits from WISPr RADIUS AVPs for RADIUS ACL.
Signed-off-by: Arif Alam <arif.alam@netexperience.com>
2024-04-03 11:34:36 +02:00
Arif Alam
1ec29f6705
Fix psk2-radius feature
...
Add psk2-radius functionality in hostapd and fix config via netifd.
Fixes WIFI-13183
Signed-off-by: Arif Alam <arif.alam@netexperience.com>
2024-03-25 15:57:26 +01:00
John Crispin
f21fa9ab80
hostapd: add missing NULL pointer check on radar notification
...
Fixes: WIFI-13266
Fixes: WIFI-13265
Signed-off-by: John Crispin <john@phrozen.org>
2024-01-23 17:27:49 +01:00
John Crispin
c4bdf03787
hostapd: fix wpa3 regression
...
Signed-off-by: John Crispin <john@phrozen.org>
2023-12-01 11:50:25 +01:00