Preparations for 0.6.6 release

[libeap.git] / hostapd / ChangeLog

diff --git a/hostapd/ChangeLog b/hostapd/ChangeLog
index a338cdf..8ee6d7b 100644 (file)
--- a/hostapd/ChangeLog
+++ b/hostapd/ChangeLog
@@ -1,6 +1,25 @@
 ChangeLog for hostapd
 
-????-??-?? - v0.6.5
+2008-11-23 - v0.6.6
+       * added a new configuration option, wpa_ptk_rekey, that can be used to
+         enforce frequent PTK rekeying, e.g., to mitigate some attacks against
+         TKIP deficiencies
+       * updated OpenSSL code for EAP-FAST to use an updated version of the
+         session ticket overriding API that was included into the upstream
+         OpenSSL 0.9.9 tree on 2008-11-15 (no additional OpenSSL patch is
+         needed with that version anymore)
+       * changed channel flags configuration to read the information from
+         the driver (e.g., via driver_nl80211 when using mac80211) instead of
+         using hostapd as the source of the regulatory information (i.e.,
+         information from CRDA is now used with mac80211); this allows 5 GHz
+         channels to be used with hostapd (if allowed in the current
+         regulatory domain)
+       * fixed EAP-TLS message processing for the last TLS message if it is
+         large enough to require fragmentation (e.g., if a large Session
+         Ticket data is included)
+       * fixed listen interval configuration for nl80211 drivers
+
+2008-11-01 - v0.6.5
        * added support for SHA-256 as X.509 certificate digest when using the
          internal X.509/TLSv1 implementation
        * fixed EAP-FAST PAC-Opaque padding (0.6.4 broke this for some peer
@@ -13,6 +32,19 @@ ChangeLog for hostapd
        * updated management frame protection to use IEEE 802.11w/D6.0
          (adds a new association ping to protect against unauthenticated
          authenticate or (re)associate request frames dropping association)
+       * added support for using SHA256-based stronger key derivation for WPA2
+         (IEEE 802.11w)
+       * added new "driver wrapper" for RADIUS-only configuration
+         (driver=none in hostapd.conf; CONFIG_DRIVER_NONE=y in .config)
+       * fixed WPA/RSN IE validation to verify that the proto (WPA vs. WPA2)
+         is enabled in configuration
+       * changed EAP-FAST configuration to use separate fields for A-ID and
+         A-ID-Info (eap_fast_a_id_info) to allow A-ID to be set to a fixed
+         16-octet len binary value for better interoperability with some peer
+         implementations; eap_fast_a_id is now configured as a hex string
+       * driver_nl80211: Updated to match the current Linux mac80211 AP mode
+         configuration (wireless-testing.git and Linux kernel releases
+         starting from 2.6.29)
 
 2008-08-10 - v0.6.4
        * added peer identity into EAP-FAST PAC-Opaque and skip Phase 2