Jouni Malinen [Sat, 17 Apr 2010 06:48:27 +0000 (09:48 +0300)]
VLAN: Reorder init to get same behavior for all VLAN interfaces
Both the wildcard VLAN entry and the statically configured VLAN
interfaces should behave in the same way. Initializing the
full dynamic VLAN code before adding the statically configured VLAN
interfaces allows the same processing to be applied to both statically
and dynamically added VLAN interface (i.e., also the statically
configured ones will be added to a bridge).
Jouni Malinen [Sat, 17 Apr 2010 06:45:18 +0000 (09:45 +0300)]
VLAN: Set statically configured VLAN interfaces up
This is needed to be able to bind stations to them with mac80211.
Jouni Malinen [Fri, 16 Apr 2010 15:56:23 +0000 (18:56 +0300)]
Do not trigger initial scan if there are no enabled networks
This allows wpa_supplicant to be started quickly with an empty
configuration. If an external program wants to fetch scan results
from wpa_supplicant, it will need to request a scan explicitly
in this type of case.
Jouni Malinen [Fri, 16 Apr 2010 11:13:27 +0000 (14:13 +0300)]
nl80211: Fix wpa_supplicant build
Jouni Malinen [Thu, 15 Apr 2010 22:13:46 +0000 (01:13 +0300)]
VLAN: Fix bridge interface clean up for no tagged_interface case
M. Braun [Thu, 15 Apr 2010 21:48:32 +0000 (00:48 +0300)]
VLAN: Decrease bridge forwarding delay to avoid EAPOL timeouts
M. Braun [Thu, 15 Apr 2010 21:39:59 +0000 (00:39 +0300)]
nl80211: Fix initial add_ifidx() realloc to not forget values
We need to make a copy of the old entries the first time the
if_indices buffer gets allocated.
M. Braun [Thu, 15 Apr 2010 21:36:33 +0000 (00:36 +0300)]
nl80211: Add bridge interfaces to own ifindex list automatically
Whenever our own interface is added to a bridge, add that bridge
into the list of own interfaces.
M. Braun [Thu, 15 Apr 2010 20:54:41 +0000 (23:54 +0300)]
VLAN: Set dynamic VLAN up to fix STA bind and key setup
Jouni Malinen [Thu, 15 Apr 2010 20:46:49 +0000 (23:46 +0300)]
nl80211: Add more debug info on NL80211_ATTR_STA_VLAN failures
Jouni Malinen [Thu, 15 Apr 2010 20:44:10 +0000 (23:44 +0300)]
Stop processing if STA VLAN bind fails
Jouni Malinen [Thu, 15 Apr 2010 17:35:51 +0000 (20:35 +0300)]
VLAN: Clean up debug code and error messages
Jouni Malinen [Thu, 15 Apr 2010 09:55:34 +0000 (12:55 +0300)]
WPS: Fix association when both WPS and WPA/RSN IE are included
The WPS IE was overriding the WPA/RSN IE in driver based MLME case
(hostapd_notif_assoc), but the MLME code here was not using WPS IE
correctly, i.e., it allowed the WPA/RSN IE override the operation.
Jouni Malinen [Wed, 14 Apr 2010 13:38:53 +0000 (16:38 +0300)]
Fix get_interfaces() driver call to use correct drv_priv data
Jouni Malinen [Mon, 12 Apr 2010 12:15:17 +0000 (15:15 +0300)]
Fix hostapd build without WPS
Jouni Malinen [Mon, 12 Apr 2010 09:25:21 +0000 (12:25 +0300)]
Fix internal DH implementation not to pad shared key
The returned buffer length was hardcoded to be the prime length
which resulted in shorter results being padded in the end. However,
the results from DH code are supposed to be unpadded (and when used
with WPS, the padding is done in WPS code and it is added to the
beginning of the buffer). This fixes WPS key derivation errors
in about 1/256 of runs ("WPS: Incorrect Authenticator") when using
the internal crypto code.
Jouni Malinen [Mon, 12 Apr 2010 06:39:36 +0000 (09:39 +0300)]
SME: Fix build without 802.11r or WPS
Jouni Malinen [Sun, 11 Apr 2010 20:00:51 +0000 (23:00 +0300)]
.gitignore for generated language files
Stefan Oswald [Sun, 11 Apr 2010 19:58:08 +0000 (22:58 +0300)]
wpa_gui: Add Qt translator installation and German translation
This takes QTranslator into use and adds a German translation of
wpa_gui.
Stefan Oswald [Sun, 11 Apr 2010 19:42:02 +0000 (22:42 +0300)]
wpa_gui: Make Status strings visible to linguist
Linguist cannot see the strings coming from wpa_supplicant, so create
a function that translates these to tr() strings inside wpa_gui
source code.
Stefan Oswald [Sun, 11 Apr 2010 19:35:02 +0000 (22:35 +0300)]
wpa_gui: Convert strings to use tr() in user-visible text
This is in preparation for allowing wpa_gui to be translated.
Witold Sowa [Sun, 11 Apr 2010 18:37:28 +0000 (21:37 +0300)]
dbus: Add new KeyMgmt interface capabilities
Add "wpa-ft-psk", "wpa-psk-sha256", "wpa-ft-eap" and "wpa-eap-sha256"
possible KeyMgmt values of interface capabilities to fit values in
BSS RSN options dictionary.
Jouni Malinen [Sun, 11 Apr 2010 18:25:15 +0000 (21:25 +0300)]
Add BSSID and reason code (if available) to disconnect event
This adds more details into the CTRL-EVENT-DISCONNECTED event to
make it easier to figure out which network was disconnected in some
race conditions and to what could have been the reason for
disconnection. The reason code is currently only available with
the nl80211 driver wrapper.
Jouni Malinen [Sun, 11 Apr 2010 18:00:16 +0000 (21:00 +0300)]
hostapd_cli: Add deauth/disassoc commands to usage help
Jouni Malinen [Sun, 11 Apr 2010 17:36:16 +0000 (20:36 +0300)]
nl80211: Define set_freq for wpa_supplicant, too
Jouni Malinen [Sun, 11 Apr 2010 17:33:33 +0000 (20:33 +0300)]
Add wpa_supplicant AP mode events for Public Action frames
Jouni Malinen [Sun, 11 Apr 2010 17:21:08 +0000 (20:21 +0300)]
Add WPS Registrar success callback
Jouni Malinen [Sun, 11 Apr 2010 17:16:43 +0000 (20:16 +0300)]
Started to make set_ap_wps_ie() capable of adding multiple IEs
This mechanism can be used to add various IEs to Beacon and Probe
Response frames and it should be made clear that it is not reserved
only for WPS IE.
Jouni Malinen [Sun, 11 Apr 2010 17:08:00 +0000 (20:08 +0300)]
wpa_supplicant AP mode: Add function for enabling MAC address filtering
This can be used to allow only a specific station to associate.
Jouni Malinen [Sun, 11 Apr 2010 17:06:12 +0000 (20:06 +0300)]
Make sure AP interface is initialize before accepting WPS commands
Jouni Malinen [Sun, 11 Apr 2010 17:03:39 +0000 (20:03 +0300)]
wpa_supplicant AP: More thorough AP mode deinit
Jouni Malinen [Sun, 11 Apr 2010 17:02:01 +0000 (20:02 +0300)]
Add more wpa_supplicant AP mode parameters for the driver wrapper
This makes it easier to configure AP mode for drivers that take care
of WPA/RSN IE generation.
Jouni Malinen [Sun, 11 Apr 2010 16:59:33 +0000 (19:59 +0300)]
Add registerable callback for wpa_supplicant AP mode completion
Jouni Malinen [Sun, 11 Apr 2010 16:56:23 +0000 (19:56 +0300)]
Try to start a new scan more quickly after driver rejection
This speeds up recovery from some cases where the driver may refuse
a new scan request command temporarily.
Jouni Malinen [Sun, 11 Apr 2010 16:55:40 +0000 (19:55 +0300)]
Add an option to request a connection without a new scan
Jouni Malinen [Sun, 11 Apr 2010 16:53:31 +0000 (19:53 +0300)]
Add option for overriding scan result handler for a single scan
Jouni Malinen [Sun, 11 Apr 2010 16:49:32 +0000 (19:49 +0300)]
FT: Fix wpa_sm_set_ft_params wrapper for non-FT build
Jouni Malinen [Sun, 11 Apr 2010 16:42:37 +0000 (19:42 +0300)]
Allow driver wrappers to indicate maximum remain-on-channel duration
Jouni Malinen [Sun, 11 Apr 2010 16:35:24 +0000 (19:35 +0300)]
nl80211: Fix key configuration in wpa_supplicant AP mode
Jouni Malinen [Sun, 11 Apr 2010 16:32:07 +0000 (19:32 +0300)]
nl80211: Remove forgotten Action frame registration example
Jouni Malinen [Sun, 11 Apr 2010 16:29:24 +0000 (19:29 +0300)]
Avoid dropping ctrl_iface on ENOBUFS error burst
These bursts can result in control interface monitors being detached
even if the external program is still working properly. Use much larger
error threshold for ENOBUFS to avoid this.
Jouni Malinen [Sun, 11 Apr 2010 16:27:41 +0000 (19:27 +0300)]
Deauthenticate instead of disassociate on disconnect command
This clears up authentication state in the driver and in case of
cfg80211, unlocks the BSS entry for the previously used AP.
Jouni Malinen [Sun, 11 Apr 2010 16:23:09 +0000 (19:23 +0300)]
Simplify driver_ops for virtual interface add/remove
There is no absolute requirement for separating address allocation
into separate functions, so simplify the driver wrapper interface
to use just if_add and if_remove instead of adding the new
alloc_interface_addr() and release_interface_addr() functions.
if_add() can now indicate if the driver forced a different interface
name or address on the virtual interface.
Jouni Malinen [Sun, 11 Apr 2010 16:10:01 +0000 (19:10 +0300)]
Allow sub-second resolution for scan requests
This is in preparation to use cases that may benefit from more frequent
scanning.
Jouni Malinen [Sun, 11 Apr 2010 16:06:42 +0000 (19:06 +0300)]
Optimize post-WPS scan based on channel used during provisioning
Scan only the frequency that was used during provisioning during the
first five scans for the connection. This speeds up connection in the
most likely case where the AP remains on the same channel. If the AP is
not found after these initial scans, all channels will be scanned.
Jouni Malinen [Sun, 11 Apr 2010 10:43:17 +0000 (13:43 +0300)]
EAP-MD5: Use conditional success decision
The server may still reject authentication at this point, so better
use conditional success decision. This allows the potentially
following EAP-Failure message to be processed properly. [Bug 354]
Jouni Malinen [Sun, 11 Apr 2010 09:29:16 +0000 (12:29 +0300)]
nl80211: Fix memory leak on send_action error path
Jouni Malinen [Sun, 11 Apr 2010 09:27:13 +0000 (12:27 +0300)]
Use unsigned bitfield for 1-bit values
Jouni Malinen [Sun, 11 Apr 2010 09:19:02 +0000 (12:19 +0300)]
SME: Handle association without own extra IEs
Need to check for this before calling ieee802_11_parse_elems().
Jouni Malinen [Sun, 11 Apr 2010 08:39:14 +0000 (11:39 +0300)]
Fix wpa_sm_has_ptk() no-WPA wrapper location
Yogesh Ashok Powar [Sun, 11 Apr 2010 08:32:15 +0000 (11:32 +0300)]
Allow advertising of U-APSD functionality in Beacon
hostapd does not implement UAPSD functionality. However, if U-APSD
functionality is implemented outside hostapd, add support to advertise
the functionality in beacon.
Signed-off-by: yogeshp@marvell.com
Jouni Malinen [Sat, 10 Apr 2010 19:56:55 +0000 (22:56 +0300)]
Add ctrl_iface command for triggering a roam to a specific BSS
'wpa_cli roam <bssid>' can now be used to test roaming within an ESS
(e.g., for FT over-the-air). This command will bypass a new scan and
will select the BSS based on the specified BSSID. It is responsibility
of the caller to make sure that the target AP is in the BSS table.
This can be done, e.g., by running a scan before the roam command,
if needed.
Jouni Malinen [Sat, 10 Apr 2010 19:46:54 +0000 (22:46 +0300)]
Fix error messages to print ASCII MAC address, not the parse buffer
Jouni Malinen [Sat, 10 Apr 2010 19:40:35 +0000 (22:40 +0300)]
FT: Validate MDIE and FTIE in FT 4-way handshake message 2/4
Jouni Malinen [Sat, 10 Apr 2010 19:39:49 +0000 (22:39 +0300)]
SME: Do not try to use FT over-the-air if PTK is not available
Jouni Malinen [Sat, 10 Apr 2010 19:06:13 +0000 (22:06 +0300)]
FT: Verify that MDIE and FTIE matches between AssocResp and EAPOL-Key 3/4
Jouni Malinen [Sat, 10 Apr 2010 18:55:29 +0000 (21:55 +0300)]
Split EAPOL-Key msg 3/4 Key Data validation into helper functions
Jouni Malinen [Sat, 10 Apr 2010 18:42:54 +0000 (21:42 +0300)]
FT: Add FTIE, TIE[ReassocDeadline], TIE[KeyLifetime] to EAPOL-Key 3/4
These are mandatory IEs to be included in the FT 4-Way Handshake
Message 3.
Jouni Malinen [Sat, 10 Apr 2010 18:42:01 +0000 (21:42 +0300)]
Add more verbose debugging for EAPOL-Key Key Data field IEs/KDEs
Jouni Malinen [Sat, 10 Apr 2010 13:48:40 +0000 (16:48 +0300)]
FT: Copy MDIE and FTIE from (Re)Association Response into EAPOL-Key 2/4
IEEE Std 802.11r-2008 requires that the message 2 includes FTIE and
MDIE from the AP's (Re)Association Response frame in the Key Data
field.
Jouni Malinen [Sat, 10 Apr 2010 13:47:29 +0000 (16:47 +0300)]
Make wpa_compare_rsn_ie() handle missing IEs
Jouni Malinen [Sat, 10 Apr 2010 13:46:17 +0000 (16:46 +0300)]
Parse EAPOL-Key msg 2/4 Key Data IEs/KDEs before checking RSN/WPA IE
This is needed to avoid incorrect validation errors on RSN/WPA IE
when using FT since there may be more than a single IE in the
Key Data field.
Jouni Malinen [Sat, 10 Apr 2010 08:36:35 +0000 (11:36 +0300)]
FT: Clean up wpa_sm_set_ft_params() by using common parse
Instead of parsing the IEs in the callers, use the already existing
parser in wpa_ft.c to handle MDIE and FTIE from initial MD association
response. In addition, this provides more complete access to association
response IEs to FT code which will be needed to fix FT 4-way handshake
message 2/4.
Jouni Malinen [Fri, 9 Apr 2010 14:14:27 +0000 (17:14 +0300)]
FT: Validate FTIE fields in Reassociation Request
ANonce, SNonce, R0KH-ID, and R1KH-ID must match with the values
used in the previous FT authentication sequence message per
IEEE Std 802.11r-2008, 11A.8.4.
Jouni Malinen [Fri, 9 Apr 2010 14:08:16 +0000 (17:08 +0300)]
FT: Validate protect IE count in FTIE MIC Control
Jouni Malinen [Fri, 9 Apr 2010 14:02:13 +0000 (17:02 +0300)]
FT: Validate SNonce and ANonce values during FT Protocol in supplicant
Jouni Malinen [Fri, 9 Apr 2010 13:59:27 +0000 (16:59 +0300)]
FT: Deauthenticate in case of Reassoc Response validation error
If validation of the Reassociation Response frame fails during FT
Protocol, do not allow association to be completed; instead, force
deauthentication.
Jouni Malinen [Fri, 9 Apr 2010 13:41:57 +0000 (16:41 +0300)]
FT: Set FT Capability and Policy properly in MDIE during initial MD assoc
This field needs to be copied from the scan results for the AP
per IEEE Std 802.11r-2008, 11A.4.2.
Jouni Malinen [Fri, 9 Apr 2010 13:26:20 +0000 (16:26 +0300)]
FT: Copy FT Capability and Policy to MDIE from target AP
This sets the FT Capability and Policy field in the MDIE to the values
received from the target AP (if available). This fixes the MDIE contents
during FT Protocol, but the correct value may not yet be used in initial
mobility domain association.
Jouni Malinen [Fri, 9 Apr 2010 13:08:50 +0000 (16:08 +0300)]
FT: Add R1KH-ID into FT auth seq 3rd message (Reassoc Req)
This is a mandatory subelement per IEEE Std 802.11r-2008, 11A.8.4.
Jouni Malinen [Fri, 9 Apr 2010 10:36:06 +0000 (13:36 +0300)]
FT: Fix Reassociation Response in FT Protocol to include ANonce/SNonce
These values are required to be included in the frame per
IEEE Std 802.11r-2008, 11A.8.5.
Jouni Malinen [Fri, 9 Apr 2010 10:30:49 +0000 (13:30 +0300)]
FT: Do not add MIC to FTIE during initial MD association
We do not have any keys set at this point so there is no point in
adding the MIC. In addition, IEEE Std 802.11r-2008, 11A.4.2
describes this frame to have MIC IE count of 0 and MIC of 0.
Jouni Malinen [Thu, 8 Apr 2010 09:25:19 +0000 (12:25 +0300)]
Fix compiler warning on non-802.11r build
Jouni Malinen [Thu, 8 Apr 2010 08:31:37 +0000 (11:31 +0300)]
nl80211: Start using NL80211_ATTR_LOCAL_STATE_CHANGE
This removes transmission of some unnecessary Deauthentication
frames in cases where we only need to clear the local state. In
addition, this resolves issues for 802.11r FT-over-DS by allowing
authentication state to be set locally even when no actual
Authentication frame is to be transmitted.
Jouni Malinen [Thu, 8 Apr 2010 08:29:54 +0000 (11:29 +0300)]
Sync with wireless-testing.git include/linux/nl80211.h
This adds NL80211_ATTR_LOCAL_STATE_CHANGE.
Jouni Malinen [Wed, 7 Apr 2010 20:57:39 +0000 (23:57 +0300)]
FT: Fix GTK subelement format in FTIE
The Key Info field was changed from 1-octet field to 2-octet field
in 802.11r/D7.0, but that had not been updated in the implementation.
Jouni Malinen [Wed, 7 Apr 2010 18:04:13 +0000 (21:04 +0300)]
FT: Fix FT 4-Way Handshake to include PMKR1Name in messages 2 and 3
IEEE Std 802.11r-2008, 11A.4.2 describes FT initial mobility domain
association in an RSN to include PMKR1Name in the PMKID-List field
in RSN IE in messages 2/4 and 3/4. This makes the RSN IE not be
bitwise identical with the values used in Beacon, Probe Response,
(Re)association Request frames.
The previous versions of wpa_supplicant and hostapd did not add the
PMKR1Name value in EAPOL-Key frame and did not accept it if added
(due to bitwise comparison of RSN IEs). This commit fixes the
implementation to be compliant with the standard by adding the
PMKR1Name value into EAPOL-Key messages during FT 4-Way Handshake and
by verifying that the received value matches with the value derived
locally.
This breaks interoperability with previous wpa_supplicant/hostapd
versions.
Jouni Malinen [Wed, 7 Apr 2010 14:27:46 +0000 (17:27 +0300)]
FT: Do not include RSN IE in (Re)Assoc Resp during initial MD association
RSN IE is only supposed to be included in Reassociation Response frames
and only when they are part of a fast BSS transition.
Jouni Malinen [Wed, 7 Apr 2010 08:40:34 +0000 (11:40 +0300)]
Use more os.h wrapper functions in hostapd_cli
Gregory Detal [Wed, 7 Apr 2010 08:14:54 +0000 (11:14 +0300)]
Add support for action scripts in hostapd_cli
Gregory Detal [Wed, 7 Apr 2010 08:13:14 +0000 (11:13 +0300)]
AP: Add wpa_msg() events for EAP server state machine
Jouni Malinen [Wed, 7 Apr 2010 07:31:06 +0000 (10:31 +0300)]
Fix SME to update WPA/RSN IE for rsn_supp module based on AssocReq
When using wpa_supplicant SME (i.e., using nl80211), the rsn_supp
module was not informed of the WPA/RSN IE that was used in
(Re)Association Request frame. This broke roaming between APs that
use different security policy (e.g., changing between WPA/TKIP and
WPA2/CCMP APs) or when using PMKSA caching.
Jouni Malinen [Wed, 7 Apr 2010 07:01:49 +0000 (10:01 +0300)]
Avoid hostapd segfault on invalid driver association event
Running hostapd and wpa_supplicant on the same interface at the same
time is not expected to work, but it should not cause hostapd to crash.
Ignore station mode association events (no addr field) to avoid this.
Andriy Tkachuk [Tue, 6 Apr 2010 17:44:26 +0000 (20:44 +0300)]
Fix WPA/RSN IE update on reconfig with set_generic_elem()
IF WPA/RSN parameters were changed or WPA/RSN was disabled, the
WPA/RSN IE in Beacon/Probe Response frames was only update with
set_beacon(). We need to do this with set_generic_elem(), too, to
work with all driver wrappers.
Jouni Malinen [Tue, 6 Apr 2010 15:04:30 +0000 (18:04 +0300)]
WPS: Fix WPS IE update in Beacon frames for nl80211
Call ieee802_11_set_beacon() in addition to set_ap_wps_ie() when
processing WPS IE updates. This is needed with drivers that use
set_beacon() instead of set_ap_wps_ie() (i.e., nl80211).
Michael Buesch [Tue, 6 Apr 2010 14:12:17 +0000 (17:12 +0300)]
hostapd: Use cp -f in make install
If hostapd is running, a make install fails with
cp: cannot create regular file `/usr/local/bin/hostapd': Text file busy
Use cp -f to avoid this error and force-override the file.
Signed-off-by: Michael Buesch <mb@bu3sch.de>
Jouni Malinen [Tue, 6 Apr 2010 07:38:37 +0000 (10:38 +0300)]
WPS: Add a workaround for incorrect NewWLANEventMAC format
Some ER implementation (e.g., some versions of Intel PROSet) seem to
use incorrect format for WLANEventMAC variable in PutWLANResponse.
Work around this by allowing various MAC address formats to be used
in this variable (debug message will be shown if the colon-deliminated
format specified in WFA WLANConfig 1.0 is not used).
Jouni Malinen [Tue, 6 Apr 2010 07:37:13 +0000 (10:37 +0300)]
Add a more flexible version of hwaddr_aton: hwaddr_aton2()
This version of the MAC address parser allows number of different
string formats for the address (e.g., 00:11:22:33:44:55, 0011.2233.4455,
001122334455, 00-11-22-33-44-55). It returns the number of characters
used from the input string in case of success.
Jouni Malinen [Sun, 4 Apr 2010 06:34:14 +0000 (09:34 +0300)]
FT: Re-set PTK on reassociation
It turns out that this is needed for both FT-over-DS and FT-over-air
when using mac80211, so it looks easiest to just unconditionally
re-configure the keys after reassociation when FT is used.
Jouni Malinen [Sun, 4 Apr 2010 06:31:13 +0000 (09:31 +0300)]
FT: Use bridge interface (if set) for RRB connection
This fixes receiving of RRB messages between FT APs
Jouni Malinen [Sun, 4 Apr 2010 06:17:57 +0000 (09:17 +0300)]
FT: Set WLAN_AUTH_FT auth_alg on FT-over-DS case
This is needed to allow reassociation processing to skip 4-way handshake
when FT-over-DS is used with an AP that has a previous association state
with the STA.
Jouni Malinen [Sun, 4 Apr 2010 06:16:11 +0000 (09:16 +0300)]
FT: Force key configuration after association in FT-over-DS
This seems to be needed at least with mac80211 when a STA is using
FT-over-DS to reassociate back to the AP when the AP still has the
previous association state.
Jouni Malinen [Sat, 3 Apr 2010 18:05:50 +0000 (21:05 +0300)]
Add AP-STA-DISCONNECT event for driver-based MLME
Jouni Malinen [Sat, 3 Apr 2010 18:03:13 +0000 (21:03 +0300)]
Allow hostapd_notif_assoc() to be called with all IEs
This makes the call simpler for driver wrappers since there is no need
to parse the IEs anymore before indicating association. In addition,
this allows association processing to be extended to use other IEs
in the future.
Jouni Malinen [Sat, 3 Apr 2010 16:37:21 +0000 (18:37 +0200)]
Fix Windows compilation issues with AP mode code
Jouni Malinen [Sat, 3 Apr 2010 16:36:49 +0000 (18:36 +0200)]
Add address to hostapd_logger output in wpa_supplicant as AP case
Jouni Malinen [Sat, 3 Apr 2010 16:35:42 +0000 (18:35 +0200)]
WPS: Do not include Label in default Config Methods
This avoids conflict with both Label and Display being included at
the same time (which would make it difficult to figure out which
PIN was actually used).
Jouni Malinen [Sat, 3 Apr 2010 16:34:44 +0000 (18:34 +0200)]
WPS: Fix PBC session overlap detection to use Device Password Id
Active PBC mode is indicated by Device Password Id == 4, not Config Methods
attribute.
Jouni Malinen [Sat, 3 Apr 2010 16:14:29 +0000 (09:14 -0700)]
driver_osx: Update set_key arguments to fix build
Jouni Malinen [Tue, 30 Mar 2010 05:57:10 +0000 (22:57 -0700)]
MFP: Fix IGTK PN in group rekeying
IGTK get_seqnum needs to be skipped in the same way as GTK one when
rekeying group keys. Previously, the old PN value (the one from the
previous key) was indicated and that resulted in MMIE replay detection
at the station.