jaspreetsachdev
7dd139cf3b
Merge pull request #925 from Telecominfraproject/release-4.1
...
Release 4.1
2025-08-30 12:44:52 -04:00
Jaspreet Sachdev
544b687f46
Merge remote-tracking branch 'origin/main' into release-4.1
2025-08-30 12:42:04 -04:00
Arif Alam
c27b015a63
est_client: fix certificate issuer matching
...
Signed-off-by: Arif Alam <arif.alam@netexperience.com>
2025-08-29 22:52:28 -04:00
Arif Alam
02c2e6945b
est_client: cloud_discovery: fixup demo environment
...
Signed-off-by: Arif Alam <arif.alam@netexperience.com>
2025-08-28 21:39:54 -04:00
Sebastian Huang
e7cd5038ac
mediatek-sdk: Disable surge protection mode for AN8801SB PHY driver
...
Build OpenWrt/uCentral images / build (hfcl_ion4x_3) (push) Has been cancelled
Build OpenWrt/uCentral images / build (hfcl_ion4x_w) (push) Has been cancelled
Build OpenWrt/uCentral images / build (hfcl_ion4xe) (push) Has been cancelled
Build OpenWrt/uCentral images / build (hfcl_ion4xi) (push) Has been cancelled
Build OpenWrt/uCentral images / build (hfcl_ion4xi_w) (push) Has been cancelled
Build OpenWrt/uCentral images / build (indio_um-305ax) (push) Has been cancelled
Build OpenWrt/uCentral images / build (senao_iap2300m) (push) Has been cancelled
Build OpenWrt/uCentral images / build (senao_iap4300m) (push) Has been cancelled
Build OpenWrt/uCentral images / build (senao_jeap6500) (push) Has been cancelled
Build OpenWrt/uCentral images / build (sercomm_ap72tip-v4) (push) Has been cancelled
Build OpenWrt/uCentral images / build (sonicfi_rap630c-311g) (push) Has been cancelled
Build OpenWrt/uCentral images / build (sonicfi_rap630w-211g) (push) Has been cancelled
Build OpenWrt/uCentral images / build (sonicfi_rap630w-311g) (push) Has been cancelled
Build OpenWrt/uCentral images / build (sonicfi_rap630w-312g) (push) Has been cancelled
Build OpenWrt/uCentral images / build (sonicfi_rap63xc-211g) (push) Has been cancelled
Build OpenWrt/uCentral images / build (sonicfi_rap650c) (push) Has been cancelled
Build OpenWrt/uCentral images / build (sonicfi_rap7110c-341x) (push) Has been cancelled
Build OpenWrt/uCentral images / build (sonicfi_rap750e-h) (push) Has been cancelled
Build OpenWrt/uCentral images / build (sonicfi_rap750e-s) (push) Has been cancelled
Build OpenWrt/uCentral images / build (sonicfi_rap750w-311a) (push) Has been cancelled
Build OpenWrt/uCentral images / build (udaya_a6-id2) (push) Has been cancelled
Build OpenWrt/uCentral images / build (udaya_a6-od2) (push) Has been cancelled
Build OpenWrt/uCentral images / build (yuncore_ax820) (push) Has been cancelled
Build OpenWrt/uCentral images / build (yuncore_ax840) (push) Has been cancelled
Build OpenWrt/uCentral images / build (yuncore_fap640) (push) Has been cancelled
Build OpenWrt/uCentral images / build (yuncore_fap650) (push) Has been cancelled
Build OpenWrt/uCentral images / build (yuncore_fap655) (push) Has been cancelled
Build OpenWrt/uCentral images / build (zyxel_nwa130be) (push) Has been cancelled
Build OpenWrt/uCentral images / trigger-testing (push) Has been cancelled
Build OpenWrt/uCentral images / create-x64_vm-ami (push) Has been cancelled
Signed-off-by: Sebastian Huang <sebastian_huang@accton.com>
2025-08-20 08:16:30 +02:00
Paul White
34e4a01e25
ucentral-state: Respect LED config before enabling
...
Ensure that LEDs are configured to be ON before attempting to change their state.
Previously, if the LED was configured to be OFF, it would still enter a double-blink
state when the cloud connection was lost, and then switch to solid ON upon
reconnection—ignoring the configured OFF state.
This update changes that behavior:
- If LEDs are configured OFF, they will remain OFF even during cloud
disconnection (no double-blink).
- After temporary state changes (e.g., during factory reset), the LED will
return to its configured state (either OFF or ON).
Signed-off-by: Paul White <paul@shasta.cloud>
2025-08-20 08:16:08 +02:00
Tanya Singh
60e9fb2645
cloud_discover: typo fix in DHCP script option 138
...
Build OpenWrt/uCentral images / build (hfcl_ion4x_3) (push) Waiting to run
Build OpenWrt/uCentral images / build (hfcl_ion4x_w) (push) Waiting to run
Build OpenWrt/uCentral images / build (hfcl_ion4xe) (push) Waiting to run
Build OpenWrt/uCentral images / build (hfcl_ion4xi) (push) Waiting to run
Build OpenWrt/uCentral images / build (hfcl_ion4xi_w) (push) Waiting to run
Build OpenWrt/uCentral images / build (indio_um-305ax) (push) Waiting to run
Build OpenWrt/uCentral images / build (senao_iap2300m) (push) Waiting to run
Build OpenWrt/uCentral images / build (senao_iap4300m) (push) Waiting to run
Build OpenWrt/uCentral images / build (senao_jeap6500) (push) Waiting to run
Build OpenWrt/uCentral images / build (sercomm_ap72tip-v4) (push) Waiting to run
Build OpenWrt/uCentral images / build (sonicfi_rap630c-311g) (push) Waiting to run
Build OpenWrt/uCentral images / build (sonicfi_rap630w-211g) (push) Waiting to run
Build OpenWrt/uCentral images / build (sonicfi_rap630w-311g) (push) Waiting to run
Build OpenWrt/uCentral images / build (sonicfi_rap630w-312g) (push) Waiting to run
Build OpenWrt/uCentral images / build (sonicfi_rap63xc-211g) (push) Waiting to run
Build OpenWrt/uCentral images / build (sonicfi_rap650c) (push) Waiting to run
Build OpenWrt/uCentral images / build (sonicfi_rap7110c-341x) (push) Waiting to run
Build OpenWrt/uCentral images / build (sonicfi_rap750e-h) (push) Waiting to run
Build OpenWrt/uCentral images / build (sonicfi_rap750e-s) (push) Waiting to run
Build OpenWrt/uCentral images / build (sonicfi_rap750w-311a) (push) Waiting to run
Build OpenWrt/uCentral images / build (udaya_a6-id2) (push) Waiting to run
Build OpenWrt/uCentral images / build (udaya_a6-od2) (push) Waiting to run
Build OpenWrt/uCentral images / build (yuncore_ax820) (push) Waiting to run
Build OpenWrt/uCentral images / build (yuncore_ax840) (push) Waiting to run
Build OpenWrt/uCentral images / build (yuncore_fap640) (push) Waiting to run
Build OpenWrt/uCentral images / build (yuncore_fap650) (push) Waiting to run
Build OpenWrt/uCentral images / build (yuncore_fap655) (push) Waiting to run
Build OpenWrt/uCentral images / build (zyxel_nwa130be) (push) Waiting to run
Build OpenWrt/uCentral images / trigger-testing (push) Blocked by required conditions
Build OpenWrt/uCentral images / create-x64_vm-ami (push) Blocked by required conditions
Signed-off-by: Tanya Singh <tanya_singh@accton.com>
2025-08-19 07:33:01 +02:00
jaspreetsachdev
462ff4f813
Merge pull request #915 from Telecominfraproject/release-4.1
...
Release 4.1
2025-08-18 12:28:42 -04:00
Jaspreet Sachdev
71b738f8ee
Merge remote-tracking branch 'origin/main' into release-4.1
2025-08-18 12:26:55 -04:00
John Crispin
b995833a03
cloud_discovery: fix typo
...
Signed-off-by: John Crispin <john@phrozen.org>
2025-08-14 16:58:33 +02:00
John Crispin
9866d4a86e
cloud_discovery: update CDS QA endpoint
...
Signed-off-by: John Crispin <john@phrozen.org>
2025-08-14 16:14:42 +02:00
jaspreetsachdev
4ad04c7948
Merge pull request #914 from Telecominfraproject/release-4.1
...
Release 4.1 merge
2025-08-14 09:54:57 -04:00
John Crispin
143d4e3b58
cloud_discovery: make the reenrollment process more robust
...
Signed-off-by: John Crispin <john@phrozen.org>
2025-08-14 11:44:04 +02:00
John Crispin
0735fd8c9a
elfutils: fix build with GCC11
...
Signed-off-by: John Crispin <john@phrozen.org>
2025-08-14 10:31:04 +02:00
Tanya Singh
c7f9061eee
cloud_discovery: Fix typo in cloud_discovery script
...
Signed-off-by: Tanya Singh <tanya_singh@accton.com>
2025-08-14 07:57:59 +02:00
Paul White
f4a58c0989
qca-ssdk: Move MIB loop cnt variable to handle
...
The MIB loop cnt variable was defined as a static variable in the function that
implements the loop, however this function can be called for more than one switch
on some platforms. This results in a race condition that leads to memory
corruption and kernel crashes.
The fix moves the loop cnt variable to the passed in switch handle, this way
there is one per switch chip. Thix fix was identified by looking at newer
versions of the qca-ssdk software package from QCA.
Signed-off-by: Paul White <paul@shasta.cloud>
2025-08-13 14:39:38 +02:00
John Crispin
cd78a832e3
cloud_discovery: use production CDS for migration path
...
Signed-off-by: John Crispin <john@phrozen.org>
2025-08-13 14:35:42 +02:00
Paul White
7b6fc736f6
base-files: boot: add sync after uci-defaults
...
A scenario was seen where UCI config was not flushed to disk before
an AP power-cycle after uci-defaults was completed. Since these
scripts are deleted after being ran once, there is no way to recover
without a factory reset.
Adding this sync operation proved to help avoid this situation from
happening
Signed-off-by: Paul White <paul@shasta.cloud>
2025-08-12 19:19:10 +02:00
John Crispin
f997f8dff0
tip-defaults: add operational OpenLan root CA
...
Signed-off-by: John Crispin <john@phrozen.org>
2025-08-12 19:11:54 +02:00
John Crispin
c4b3eeed81
est_client: switch to production environment
...
Signed-off-by: John Crispin <john@phrozen.org>
2025-08-11 06:36:22 +02:00
John Crispin
b2ba9d7c1b
ucentral-client: update to latest HEAD
...
549e84e ucentral-client: Add discovery metadata to connect payload
Signed-off-by: John Crispin <john@phrozen.org>
2025-08-11 06:13:02 +02:00
Marek Kwaczynski
b982f3f4c2
cloud_discovery: Track and persist discovery method
...
Adds support for recording the method used to discover the cloud
controller (e.g. DHCP, FLASH, OpenLAN).
The selected method records the current date and time along
with the discovery method into "/etc/ucentral/discovery.state.json".
The date is stored in epoch format.
Fixed: WIFI-14966
Signed-off-by: Marek Kwaczynski <marek@shasta.cloud>
2025-08-11 05:41:36 +02:00
John Crispin
68dfd58303
wireless-regdb: disable channel 14 in JP
...
Fixes: WIFI-14962
Signed-off-by: John Crispin <john@phrozen.org>
2025-08-07 14:51:33 +02:00
John Crispin
6ba26cba2b
est_client: add a function to validate that the CN is correct
...
cloud_discovery will not start if the CN does not match the devices serial.
an error will be written to syslog
---
Wed Aug 6 14:23:23 2025 user.notice root: ERROR
Wed Aug 6 14:23:23 2025 user.notice root: ERROR
Wed Aug 6 14:23:23 2025 user.notice root: ERROR
Wed Aug 6 14:23:23 2025 user.notice root: The certificate used has a CN that does not match the serial of the device
Wed Aug 6 14:23:23 2025 user.notice root: ERROR
Wed Aug 6 14:23:23 2025 user.notice root: ERROR
Wed Aug 6 14:23:23 2025 user.notice root: ERROR
---
Signed-off-by: John Crispin <john@phrozen.org>
2025-08-06 16:23:57 +02:00
John Crispin
b5b276bfcc
est_client: check if a cert is present inside the fwtool helper
...
This was causing devices without a birt cert being present from doing a
sysupgrade.
Signed-off-by: John Crispin <john@phrozen.org>
2025-08-06 11:03:59 +02:00
Tanya Singh
de7dc7e01a
ipq50xx: Fix bootbank switching when firmware upgrade is triggered for Edgecore EAP104 and OAP101 series
...
Fixes: WIFI-14957
Signed-off-by: Tanya Singh <tanya_singh@accton.com>
2025-08-06 10:54:55 +02:00
jackcybertan
a967d67af3
qca-wifi-7: Added ramoops support for SonicFi IPQ5332 devices
...
Fixes: WIFI-14869
Signed-off-by: jackcybertan <jack.tsai@cybertan.com.tw>
2025-08-06 10:53:52 +02:00
John Crispin
8a68073f4f
ucentral-schema: update to latest HEAD
...
remove a patch that was accidentally merged
Signed-off-by: John Crispin <john@phrozen.org>
2025-08-04 16:33:15 +02:00
John Crispin
efd804987e
rtty: there was an error in the operationalpem passed to the client
...
Signed-off-by: John Crispin <john@phrozen.org>
2025-08-04 15:44:21 +02:00
jackcybertan
b036ba37e3
certificates: Store-PKI2.0-key-for-RAP6x-production
...
Fixes: WIFI-14951
Signed-off-by: jackcybertan <jack.tsai@cybertan.com.tw>
2025-08-04 08:39:53 +02:00
John Crispin
7352de2421
update to latest HEAD
...
e27ecb4 ssid: decouple batman tunnel from meshpoint interfaces
Signed-off-by: John Crispin <john@phrozen.org>
2025-08-04 08:36:13 +02:00
John Crispin
8c11eb23a3
mt7621: add insta1/2 partitions for yuncore ax820
...
Signed-off-by: John Crispin <john@phrozen.org>
2025-08-04 08:35:42 +02:00
Tanya Singh
83874b75f3
mediatek-sdk: Remove extra lines (for logging) from 99-mtk-sr-scene-cond
...
Signed-off-by: Tanya Singh <tanya_singh@accton.com>
2025-08-04 08:08:24 +02:00
John Crispin
694cf6ded8
rtty: use the operational certificate
...
Fixes: WIFI-14943
Signed-off-by: John Crispin <john@phrozen.org>
2025-07-31 17:50:14 +02:00
John Crispin
0a3a207584
uboot-envtools: add udaya-id5 support
...
Signed-off-by: John Crispin <john@phrozen.org>
2025-07-31 14:54:56 +02:00
Tanya Singh
b0e95e68a2
afc: Use either ca-cert or access-token to get authorization in curl command for the AFC server
...
Fixes:WIFI-14427
Signed-off-by: Tanya Singh <tanya_singh@accton.com>
2025-07-31 10:03:02 +02:00
Tanya Singh
26ed5acb60
rrmd: update timeout for RRM during self-healing and fix center channel mapping in RRM with Channel Utilization
...
Fixes: WIFI-14901
Signed-off-by: Tanya Singh <tanya_singh@accton.com>
2025-07-31 10:02:27 +02:00
John Crispin
d1e4c48617
cloud_discovery: add automatic reenrolment of operational certificates
...
The daemon will check the vailidity of the operational certificate once and hour.
If the certificate is valid for less than three days, a reenrollment is attempted.
Once the reenroll happened the connection to the cloud controller will be restarted.
Fixes: WIFI-14900
Fixes: WIFI-14694
Signed-off-by: John Crispin <john@phrozen.org>
2025-07-31 09:48:10 +02:00
Tanya Singh
3a8fc316f2
qca-wifi-7/afc: Use curl instead of uclient to send/receive AFC request/response using hostapd
...
Fixes: WIFI-14427
Signed-off-by: Tanya Singh <tanya_singh@accton.com>
2025-07-30 09:34:26 +02:00
jackcybertan
d85dc2a819
certificates: Enhance PKI enrollment on squashfs (SonicFi RAP6* series)
...
The updated flow:
- Mount /dev/mtdblock* (the certificates partition) to /mnt
- Copy its contents to /certificates
- Unmount /mnt
- Extract the PKI 2.0 certificates into /certificates
Fixes: WIFI-14904
Signed-off-by: jackcybertan <jack.tsai@cybertan.com.tw>
2025-07-30 09:04:52 +02:00
John Crispin
acca9737e4
ucentral-schema: update to latest HEAD
...
30c7374 Add 'access-token' to AFC server config
Fixes: WIFI-14427
Signed-off-by: John Crispin <john@phrozen.org>
2025-07-30 09:02:17 +02:00
Tanya Singh
6d2fd1de0d
afc: Use curl instead of uclient to send/receive AFC request/response using hostapd
...
Fixes: WIFI-14427
Signed-off-by: Tanya Singh <tanya_singh@accton.com>
2025-07-30 09:02:05 +02:00
John Crispin
1d822a10d2
toolchain: use gcc11 for legacy targets
...
Signed-off-by: John Crispin <john@phrozen.org>
2025-07-28 09:51:18 +02:00
John Crispin
ebdc88ee1f
certificates: improvements
...
* make the code more generic
* add udaya a2 support
Signed-off-by: John Crispin <john@phrozen.org>
2025-07-28 09:50:22 +02:00
John Crispin
778cc679a0
profiles: add more wifi-5 profiles
...
* edgecore_spw2ac1200
* hfcl_ion4
Signed-off-by: John Crispin <john@phrozen.org>
2025-07-27 19:35:04 +02:00
YenLin Pan
088d78faa7
qca-ssdk: adjust the amplitude level of SGMII for Zyxel NWA130BE
...
To fix EMI and avoid Ethernet RX stuck after reboot for Zyxel NWA130BE.
Ethernet Rx stuck was sometimes happened when we do stress reboot,
need to adjust the amplitude level of SGMII for CPU and QCA8385 side.
And those settings come from the result that Zyxel HW team and Manufacturer
co-work to fine tune for NWA130BE.
Signed-off-by: YenLin Pan <YenLin.Pan@zyxel.com.tw>
2025-07-27 19:24:15 +02:00
Tanya Singh
5306f7db27
cloud_discovery: Add 'sync' after file generation in Cloud discovery process
...
Fixes: WIFI-14906
Signed-off-by: Tanya Singh <tanya_singh@accton.com>
2025-07-27 17:40:03 +02:00
Tanya Singh
c8bffdc250
rrmd: Add self-healing in ucentral-state and channel switching improvements to RRM with channel utilization
...
Fixes: WIFI-14901
Signed-off-by: Tanya Singh <tanya_singh@accton.com>
2025-07-27 17:39:21 +02:00
John Crispin
3a3de9e146
ucentral-schema: update to latest HEAD
...
92fb3c1 WIFI-14901: Add rrm_chanutil status to health.uc (when it fails) and save health metric in /tmp/ucentral.health
6313892 WIFI-14906: Add 'sync' after file generation in Cloud discovery process
Signed-off-by: John Crispin <john@phrozen.org>
2025-07-27 17:03:48 +02:00
John Crispin
4d5c9a2d4c
ucentral-client: update to latest HEAD
...
c536f69 cloud package manager
Fixes: WIFI-14588
Signed-off-by: John Crispin <john@phrozen.org>
2025-07-27 16:54:44 +02:00