openwrt/package/network/services/hostapd
David Lam a5f3648a1c hostapd: add support for system cert bundle validation
Currently, it is very cumbersome for a user to connect to a WPA-Enterprise
based network securely because the RADIUS server's CA certificate must first be
extracted from the EAPOL handshake using tcpdump or other methods before it can
be pinned using the ca_cert(2) fields. To make this process easier and more
secure (combined with changes in openwrt/openwrt#2654), this commit adds
support for validating against the built-in CA bundle when the ca-bundle
package is installed. Related LuCI changes in openwrt/luci#3513.

Signed-off-by: David Lam <david@thedavid.net>
[bump PKG_RELEASE]
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2020-01-16 12:08:18 +01:00
..
files hostapd: add support for system cert bundle validation 2020-01-16 12:08:18 +01:00
patches hostapd: fix crash regression triggered by mesh mode 2019-12-08 19:51:53 +01:00
src hostapd: add ubus reload 2019-11-12 11:52:26 +01:00
Config.in hostapd: adjust to removal of WOLFSSL_HAS_AES_GCM 2019-10-12 23:43:08 +02:00
Makefile hostapd: add support for system cert bundle validation 2020-01-16 12:08:18 +01:00