openwrt/package/network/services/hostapd/files
Stijn Tintel d501786ff2 hostapd: add wpa_disable_eapol_key_retries option
Commit b6c3931ad6 introduced an AP-side
workaround for key reinstallation attacks. This option can be used to
mitigate KRACK on the station side, in case those stations cannot be
updated. Since many devices are out there will not receive an update
anytime soon (if at all), it makes sense to include this workaround.

Unfortunately this can cause interoperability issues and reduced
robustness of key negotiation, so disable the workaround by default, and
add an option to allow the user to enable it if he deems necessary.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit c5f97c9372)
2017-10-17 17:59:45 +03:00
..
hostapd-full.config hostapd: enable support for logging wpa_printf messages to syslog 2017-02-05 22:31:02 +01:00
hostapd-mini.config hostapd: enable support for logging wpa_printf messages to syslog 2017-02-05 22:31:02 +01:00
hostapd.sh hostapd: add wpa_disable_eapol_key_retries option 2017-10-17 17:59:45 +03:00
multicall.c packages: sort network related packages into package/network/ 2012-10-10 12:32:29 +00:00
wpa_supplicant-full.config kernel: remove hostap driver 2016-07-31 12:25:24 +02:00
wpa_supplicant-mini.config kernel: remove hostap driver 2016-07-31 12:25:24 +02:00
wpa_supplicant-p2p.config kernel: remove hostap driver 2016-07-31 12:25:24 +02:00
wps-hotplug.sh buttons: make all button handler scripts return 0 2015-07-24 09:11:35 +00:00