Author: Jouni Malinen
Revision Date: 2023-11-11 21:44:52 UTC

SAE: Require PMKID match to PMKSA with SAE-EXT-KEY

This check was supposed to be done for all SAE cases other than FT
roaming.

Signed-off-by: Jouni Malinen <j@w1.fi>

Author: Tony Espy
Revision Date: 2015-09-14 19:27:11 UTC

scan: make fake AP level random(0-99)

Author: Jouni Malinen
Revision Date: 2012-10-07 17:59:01 UTC

EAP-TLS server: Fix TLS Message Length validation

EAP-TLS/PEAP/TTLS/FAST server implementation did not validate TLS
Message Length value properly and could end up trying to store more
information into the message buffer than the allocated size if the first
fragment is longer than the indicated size. This could result in hostapd
process terminating in wpabuf length validation. Fix this by rejecting
messages that have invalid TLS Message Length value.

This would affect cases that use the internal EAP authentication server
in hostapd either directly with IEEE 802.1X or when using hostapd as a
RADIUS authentication server and when receiving an incorrectly
constructed EAP-TLS message. Cases where hostapd uses an external
authentication are not affected.

Thanks to Timo Warns for finding and reporting this issue.

Signed-hostap: Jouni Malinen <j@w1.fi>
intended-for: hostap-1
(cherry picked from commit 586c446e0ff42ae00315b014924ec669023bd8de)

Author: Kalle Valo
Revision Date: 2011-02-17 12:32:23 UTC

Add 40_fix_scan_retry.patch.

Author: Mathieu Trudel-Lapierre
Revision Date: 2010-11-17 17:24:44 UTC

Import of Debian's pkg-wpa-devel group SVN repo in bzr for hackery.

Author: Kalle Valo
Revision Date: 2010-10-21 11:43:34 UTC

Fix debian/changelog.

Author: Kalle Valo
Revision Date: 2010-06-03 10:35:52 UTC

Add a hack to debian/rules for removing wpa_gui_de.qm.