John Crispin
0c19ddddca
hostapd: fix wpa3-192 + 11r AKM
...
Fixes: WIFI-14016
Signed-off-by: John Crispin <john@phrozen.org>
2024-08-02 11:06:37 +02:00
John Crispin
273bce6f76
hostapd: fix extended radius AVPs
...
Signed-off-by: John Crispin <john@phrozen.org>
2024-07-24 06:14:00 +02:00
John Crispin
0a21b9d254
hostapd: enable FT-PSK for psk2-radius
...
Signed-off-by: John Crispin <john@phrozen.org>
2024-07-24 06:14:00 +02:00
John Crispin
ed8311e4e4
hostapd: add ft_key easy button
...
Signed-off-by: John Crispin <john@phrozen.org>
2024-07-18 16:08:08 +02:00
John Crispin
3085bf3ccc
hostapd: add rate support to FT
...
Signed-off-by: John Crispin <john@phrozen.org>
2024-07-18 16:08:08 +02:00
John Crispin
27ad029ceb
hostapd: add origin_ap to events for FT associations
...
Signed-off-by: John Crispin <john@phrozen.org>
2024-07-13 15:35:43 +02:00
John Crispin
33f8f22375
hostapd: add enhanced MPSK support
...
Signed-off-by: John Crispin <john@phrozen.org>
2024-07-11 12:17:15 +02:00
Felix Fietkau
6afc11838e
hostapd: add support for authenticating with multiple PSKs via ubus helper
...
Also supports assigning a VLAN ID based on the PSK
Signed-off-by: Felix Fietkau <nbd@nbd.name>
2024-07-11 09:34:28 +02:00
Felix Fietkau
b5048d8305
hostapd: reject probe/assoc/auth requests if any subscriber rejects them
...
Signed-off-by: Felix Fietkau <nbd@nbd.name>
2024-07-03 08:41:03 +02:00
Venkat Chimata
45eb5c9a6b
ieee8021x / hostapd: Fix 802.1x + DVLAN issues
...
ieee8021x
---------
1. Handle link_up events and update hostapd config
2. For certains scenarios, we need to remove and add
instead of reload (reload did not work).
Consider the following scenario -
Say on CIG 186w as an example
eth0.4086 interface exists with some non-ieee8021x config.
Push ieee8021x config. In general the flow is that
reload_config is called followed by invocation of services (from ucentral-schema)
Services inovation does n't wait until the configi reloaded ie in this context
ieee8021x service is invoked much before the network interfaces are recreated.
That is not correct. To handle this, we capture link-up events
and remove the existing interface (in hostapd as shown below) and add again
3. For swconfig platforms, the names contain a dot. Handle that gracefully in
ubus_unsub_object while adding hostapd interface
4. Add better logging using log.syslog
hostapd
---------
In case of swconfig switches, the basename of the interface should be based on the last dot.
Earlier it was done based on the first dot, which would result in incorrect basename.
For example if the interface name is eth0.4087 then the vlan->ifname would be eth0.4087. (A dot at the end) .
Before this patch, the basename was returned as eth0. It should be eth0.4087
Also fixed the return code by adding a default value of 0 and removed an unncessary check
for if_add before ubus add call.
Signed-off-by: Venkat Chimata <venkata@shasta.cloud>
2024-07-03 06:37:47 +02:00
John Crispin
a449f08839
hostapd: run afc client in insecure mode if the CA is not present
...
Signed-off-by: John Crispin <john@phrozen.org>
2024-06-28 06:21:36 +02:00
John Crispin
10d8c47272
hostapd: drop wispr rate patch
...
this was breaking EAP-TTLS roaming
Signed-off-by: John Crispin <john@phrozen.org>
2024-06-19 13:54:58 +02:00
John Crispin
ad51d1788c
hostapd: fix OWE vendor IE content
...
Signed-off-by: John Crispin <john@phrozen.org>
2024-06-18 13:09:37 +02:00
Felix Fietkau
9569b46398
ipq807x_v5.4: support sending FT refresh frames for switch learning tables
...
Signed-off-by: Felix Fietkau <nbd@nbd.name>
2024-06-12 14:46:54 +02:00
John Crispin
0037af2a6b
afcd: allow starting the daemon without a CA
...
Signed-off-by: John Crispin <john@phrozen.org>
2024-06-10 06:08:30 +02:00
John Crispin
82ef44048b
afcd: do not require a CA
...
Signed-off-by: John Crispin <john@phrozen.org>
2024-06-06 14:20:42 +02:00
Felix Fietkau
836a411d5d
ipq807x_v5.4: afc support fixes
...
Signed-off-by: Felix Fietkau <nbd@nbd.name>
2024-05-20 08:07:30 +02:00
Marek Kwaczynski
f74dd74cef
hostapd: fix opclass during CSA with DFS channels
...
During CSA with DFS channels, disable, enable interface
is a part of the algorithm.
When interface was enabled old operating class before switch
and new channel were used causing mismatch in
configured_fixed_chan_to_freq function.
Example of log when switch from channel 157 to 108 was triggered:
"Could not convert op_class 124 channel 108 to operating frequency"
Fixes: WIFI-13385
Signed-off-by: Marek Kwaczynski <marek@shasta.cloud>
2024-04-30 18:02:23 +02:00
Marek Kwaczynski
b1474acf2f
hostapd: ubus: add DFS channels support during CSA
...
Add options to trigger CSA with DFS channels, without
this patch ubus request was rejected:
ubus call hostapd.wlan0 switch_chan '{"freq":5260,"bcn_count":10}'
Command failed: Operation not supported
Fixes: WIFI-13385
Signed-off-by: Marek Kwaczynski <marek@shasta.cloud>
2024-04-30 18:02:13 +02:00
Felix Fietkau
f6ea5dd273
ipq807x_5.4: fix hostapd ap+sta issue
...
Signed-off-by: Felix Fietkau <nbd@nbd.name>
2024-04-29 17:35:36 +02:00
John Crispin
d779808f88
hostapd: backport get_sta_ies
...
Signed-off-by: John Crispin <john@phrozen.org>
2024-04-27 16:15:25 +02:00
John Crispin
aa293e250e
hostapd: enable OWE
...
Signed-off-by: John Crispin <john@phrozen.org>
2024-04-27 16:15:25 +02:00
Felix Fietkau
49560ef3d3
ipq807x_v5.4: backport AFC support
...
Signed-off-by: Felix Fietkau <nbd@nbd.name>
2024-04-20 11:44:38 +02:00
Arif Alam
a7c9a5f780
hostapd: WISPr bandwidth for psk2-radius
...
Get bandwidth limits from WISPr RADIUS AVPs for RADIUS ACL.
Signed-off-by: Arif Alam <arif.alam@netexperience.com>
2024-04-03 11:34:36 +02:00
Arif Alam
1ec29f6705
Fix psk2-radius feature
...
Add psk2-radius functionality in hostapd and fix config via netifd.
Fixes WIFI-13183
Signed-off-by: Arif Alam <arif.alam@netexperience.com>
2024-03-25 15:57:26 +01:00
John Crispin
f21fa9ab80
hostapd: add missing NULL pointer check on radar notification
...
Fixes: WIFI-13266
Fixes: WIFI-13265
Signed-off-by: John Crispin <john@phrozen.org>
2024-01-23 17:27:49 +01:00
John Crispin
c4bdf03787
hostapd: fix wpa3 regression
...
Signed-off-by: John Crispin <john@phrozen.org>
2023-12-01 11:50:25 +01:00
John Crispin
6500b62920
hostapd: always create a dummy psk file
...
Signed-off-by: John Crispin <john@phrozen.org>
2023-11-24 09:24:31 +01:00
John Crispin
5240ac395f
hostapd: fix wpa3 modes
...
the latest netifd update sets auth_type differently. adapt hostapd.sh for this.
Signed-off-by: John Crispin <john@phrozen.org>
2023-11-17 16:48:42 +01:00
John Crispin
56e0b3b50c
hostapd: globally ban clients when they are kicked
...
Signed-off-by: John Crispin <john@phrozen.org>
2023-11-17 08:54:26 +01:00
John Crispin
8f7369a71c
rrmd: allow kicking clients globally of from the AP
...
Signed-off-by: John Crispin <john@phrozen.org>
2023-11-14 16:54:09 +01:00
John Crispin
b2ad71e97d
ieee8021x: replace c code with ucode
...
Signed-off-by: John Crispin <john@phrozen.org>
2023-11-03 09:39:38 +01:00
John Crispin
99f6881a36
hostapd: add internal radius server
...
Signed-off-by: John Crispin <john@phrozen.org>
2023-10-23 08:38:02 +02:00
John Crispin
de2fb200a2
hostapd: add rate-limit to FT
...
Signed-off-by: John Crispin <john@phrozen.org>
2023-10-23 08:38:02 +02:00
John Crispin
64cfe870ec
hostapd: make the ubus binding aware of the wired driver
...
Signed-off-by: John Crispin <john@phrozen.org>
2023-10-05 09:53:22 +02:00
John Crispin
f7c79205e9
hostapd: sync hot-reload with latest upstream
...
Signed-off-by: John Crispin <john@phrozen.org>
2023-10-03 07:21:51 +02:00
John Crispin
9a04d5cb66
uspot: add CoA support
...
Fixes: WIFI-12103
Signed-off-by: John Crispin <john@phrozen.org>
2023-10-02 17:20:45 +02:00
John Crispin
d9f237b450
hostapd: update to latest hot reload
...
Signed-off-by: John Crispin <john@phrozen.org>
2023-09-25 11:52:41 +02:00
John Crispin
4f5a3b0c2b
ucentral-schema: update to latest HEAD
...
Fixes: WIFI-12956
Signed-off-by: John Crispin <john@phrozen.org>
2023-09-25 07:10:33 +02:00
John Crispin
6a6af16f48
hostapd: add CSA event
...
Signed-off-by: John Crispin <john@phrozen.org>
2023-09-18 15:58:39 +02:00
John Crispin
acd4b79dd4
ipq807x: backport latest wifi hot-reload to v5.4 kernel
...
Signed-off-by: John Crispin <john@phrozen.org>
2023-09-17 06:50:23 +02:00
John Crispin
e7ca6e8455
hostapd: fix ft-anonce behavior for broken clients
...
Signed-off-by: John Crispin <john@phrozen.org>
2023-09-13 16:37:12 +02:00
John Crispin
550bb6fb7e
hostapd: update the snooping patch
...
Fixes: WIFI-12929
Signed-off-by: John Crispin <john@phrozen.org>
2023-09-12 16:18:01 +02:00
John Crispin
b6b298ad68
hostapd: fix association of clients on Open/VLAN SSIDs
...
Fixes: WIFI-12929
Signed-off-by: John Crispin <john@phrozen.org>
2023-09-06 16:14:42 +02:00
John Crispin
eb6e95f760
hostapd: add proxy-state to DAS frames
...
Signed-off-by: John Crispin <john@phrozen.org>
2023-08-31 16:08:36 +02:00
John Crispin
c34d346b57
hostapd: update v5.4 version to latest hot-reload version
...
Signed-off-by: John Crispin <john@phrozen.org>
2023-08-31 16:08:35 +02:00
John Crispin
3b6582117b
ipq807x: add ath12 / v5.4 support
...
Signed-off-by: John Crispin <john@phrozen.org>
2023-04-10 14:25:48 +02:00