Preparations for 0.6.6 release

[libeap.git] / wpa_supplicant / ChangeLog

diff --git a/wpa_supplicant/ChangeLog b/wpa_supplicant/ChangeLog
index 4f213fa..5367612 100644 (file)
--- a/wpa_supplicant/ChangeLog
+++ b/wpa_supplicant/ChangeLog
@@ -1,6 +1,6 @@
 ChangeLog for wpa_supplicant
 
-????-??-?? - v0.6.6
+2008-11-23 - v0.6.6
        * added Milenage SIM/USIM emulator for EAP-SIM/EAP-AKA
          (can be used to simulate test SIM/USIM card with a known private key;
          enable with CONFIG_SIM_SIMULATOR=y/CONFIG_USIM_SIMULATOR=y in .config
@@ -8,6 +8,24 @@ ChangeLog for wpa_supplicant
        * added a new network configuration option, wpa_ptk_rekey, that can be
          used to enforce frequent PTK rekeying, e.g., to mitigate some attacks
          against TKIP deficiencies
+       * added an optional mitigation mechanism for certain attacks against
+         TKIP by delaying Michael MIC error reports by a random amount of time
+         between 0 and 60 seconds; this can be enabled with a build option
+         CONFIG_DELAYED_MIC_ERROR_REPORT=y in .config
+       * fixed EAP-AKA to use RES Length field in AT_RES as length in bits,
+         not bytes
+       * updated OpenSSL code for EAP-FAST to use an updated version of the
+         session ticket overriding API that was included into the upstream
+         OpenSSL 0.9.9 tree on 2008-11-15 (no additional OpenSSL patch is
+         needed with that version anymore)
+       * updated userspace MLME instructions to match with the current Linux
+         mac80211 implementation; please also note that this can only be used
+         with driver_nl80211.c (the old code from driver_wext.c was removed)
+       * added support (Linux only) for RoboSwitch chipsets (often found in
+         consumer grade routers); driver interface 'roboswitch'
+       * fixed canceling of PMKSA caching when using drivers that generate
+         RSN IE and refuse to drop PMKIDs that wpa_supplicant does not know
+         about
 
 2008-11-01 - v0.6.5
        * added support for SHA-256 as X.509 certificate digest when using the