Changelog for wpa_supplicant-0.6.9-4.1.x86_64.rpm :
Thu Feb 4 13:00:00 2010 vbotkaAATTsuse.de
- update to version 0.6.9

Mon Sep 28 14:00:00 2009 lnusselAATTsuse.de
- simplify dbus config, allow introspection

Mon Sep 7 14:00:00 2009 claes.backstromAATTfsfe.org
- Added rotation of log file with logrotate (bnc#508041)

Tue May 12 14:00:00 2009 dmuellerAATTsuse.de
- reenable logfile writing support to make d-bus activation work
again (bnc#502957)

Tue Apr 7 14:00:00 2009 hschaaAATTsuse.de
- Enable ralink driver (bnc#481380)
- Enable nl80211 driver (bnc#485453)
- Rebase all SUSE patches to 0.6.9
- Remove upstreamed patches
- Update to 0.6.9

* driver_ndis: add PAE group address to the multicast address list to
fix wired IEEE 802.1X authentication

* fixed IEEE 802.11r key derivation function to match with the standard
(note: this breaks interoperability with previous version) [Bug 303]

* increased wpa_cli ping interval to 5 seconds and made this
configurable with a new command line options (-G)

* fixed scan buffer processing with WEXT to handle up to 65535
byte result buffer (previously, limited to 32768 bytes)

* added support for Wi-Fi Protected Setup (WPS)
(wpa_supplicant can now be configured to act as a WPS Enrollee to
enroll credentials for a network using PIN and PBC methods; in
addition, wpa_supplicant can act as a wireless WPS Registrar to
configure an AP); WPS support can be enabled by adding CONFIG_WPS=y
into .config and setting the runtime configuration variables in
wpa_supplicant.conf (see WPS section in the example configuration
file); new wpa_cli commands wps_pin, wps_pbc, and wps_reg are used to
manage WPS negotiation; see README-WPS for more details

* added support for EAP-AKA\' (draft-arkko-eap-aka-kdf)

* added support for using driver_test over UDP socket

* fixed PEAPv0 Cryptobinding interoperability issue with Windows Server
2008 NPS; optional cryptobinding is now enabled (again) by default

* fixed PSK editing in wpa_gui

* changed EAP-GPSK to use the IANA assigned EAP method type 51

* added a Windows installer that includes WinPcap and all the needed
DLLs; in addition, it set up the registry automatically so that user
will only need start wpa_gui to get prompted to start the wpasvc
servide and add a new interface if needed through wpa_gui dialog

* updated management frame protection to use IEEE 802.11w/D7.0

* added Milenage SIM/USIM emulator for EAP-SIM/EAP-AKA
(can be used to simulate test SIM/USIM card with a known private key;
enable with CONFIG_SIM_SIMULATOR=y/CONFIG_USIM_SIMULATOR=y in .config
and password=\"Ki:OPc\"/password=\"Ki:OPc:SQN\" in network configuration)

* added a new network configuration option, wpa_ptk_rekey, that can be
used to enforce frequent PTK rekeying, e.g., to mitigate some attacks
against TKIP deficiencies

* added an optional mitigation mechanism for certain attacks against
TKIP by delaying Michael MIC error reports by a random amount of time
between 0 and 60 seconds; this can be enabled with a build option
CONFIG_DELAYED_MIC_ERROR_REPORT=y in .config

* fixed EAP-AKA to use RES Length field in AT_RES as length in bits,
not bytes

* updated OpenSSL code for EAP-FAST to use an updated version of the
session ticket overriding API that was included into the upstream
OpenSSL 0.9.9 tree on 2008-11-15 (no additional OpenSSL patch is
needed with that version anymore)

* updated userspace MLME instructions to match with the current Linux
mac80211 implementation; please also note that this can only be used
with driver_nl80211.c (the old code from driver_wext.c was removed)

* added support (Linux only) for RoboSwitch chipsets (often found in
consumer grade routers); driver interface \'roboswitch\'

* fixed canceling of PMKSA caching when using drivers that generate
RSN IE and refuse to drop PMKIDs that wpa_supplicant does not know
about

* added support for SHA-256 as X.509 certificate digest when using the
internal X.509/TLSv1 implementation

* updated management frame protection to use IEEE 802.11w/D6.0

* added support for using SHA256-based stronger key derivation for WPA2
(IEEE 802.11w)

* fixed FT (IEEE 802.11r) authentication after a failed association to
use correct FTIE

* added support for configuring Phase 2 (inner/tunneled) authentication
method with wpa_gui-qt4

* added support for EAP Sequences in EAP-FAST Phase 2

* added support for using TNC with EAP-FAST

* added driver_ps3 for the PS3 Linux wireless driver

* added support for optional cryptobinding with PEAPv0

* fixed the OpenSSL patches (0.9.8g and 0.9.9) for EAP-FAST to
allow fallback to full handshake if server rejects PAC-Opaque

* added fragmentation support for EAP-TNC

* added support for parsing PKCS #8 formatted private keys into the
internal TLS implementation (both PKCS #1 RSA key and PKCS #8
encapsulated RSA key can now be used)

* added option of using faster, but larger, routines in the internal
LibTomMath (for internal TLS implementation) to speed up DH and RSA
calculations (CONFIG_INTERNAL_LIBTOMMATH_FAST=y)

* fixed race condition between disassociation event and group key
handshake to avoid getting stuck in incorrect state [Bug 261]

* fixed opportunistic key caching (proactive_key_caching)

Sun Mar 1 13:00:00 2009 cooloAATTsuse.de
- fix compilation with gcc 4.4

Mon Feb 9 13:00:00 2009 hschaaAATTsuse.de
- Add wpa_supplicant-respect_no_reply.patch which avoids
D-Bus errors if no reply was requested by the caller

Wed Jan 28 13:00:00 2009 hschaaAATTsuse.de
- Avoid unnecessary roaming if the driver (like ipw2100) does not
report signal level. This fixes association problems with ipw2100
(bnc#469779).

Wed Jan 28 13:00:00 2009 hschaaAATTsuse.de
- Fix dbus configuration again (bnc#470013, bnc#469530)

Thu Jan 22 13:00:00 2009 hschaaAATTsuse.de
- Add fix_dbus_config.patch (bnc#468392)

Mon Dec 8 13:00:00 2008 hschaaAATTsuse.de
- Add patch wpa_supplicant-hide_secrets-2.patch to _not_ print
passwords in clear text when started by NM with enabled debug
output

Mon Nov 10 13:00:00 2008 tambetAATTnovell.com
- Fix a bug where authentication would always fail using PKCS#11
interface from DBus control interface.
- Add support for PKCS#11 module initialization arguments.

Mon Oct 13 14:00:00 2008 hschaaAATTgmail.com
- update wpa_supplicant-roaming.patch which enables roaming by
default for some cards

Thu Oct 9 14:00:00 2008 hschaaAATTsuse.de
- add patches wpa_supplicant-dont_report_empty_initial_scan.patch
and wpa_supplicant-restore_scan_request_setting.patch which
speed up the initial association with a network when NM is used
- Add patch wpa_supplicant-fix_set_mode.patch which fixes an
association bug that was triggered when changing the interface
mode

Mon Sep 29 14:00:00 2008 hschaaAATTsuse.de
- add roaming capability (FATE 303806)

Tue Sep 23 14:00:00 2008 roAATTsuse.de
- drop buildreq for madwifi (dropped package)

Tue Sep 2 14:00:00 2008 roAATTsuse.de
- update to 0.6.4

* added support for EAP Sequences in EAP-FAST Phase 2

* added support for using TNC with EAP-FAST

* added driver_ps3 for the PS3 Linux wireless driver

* added support for optional cryptobinding with PEAPv0

* fixed the OpenSSL patches (0.9.8g and 0.9.9) for EAP-FAST to
allow fallback to full handshake if server rejects PAC-Opaque

* added fragmentation support for EAP-TNC

* added support for parsing PKCS #8 formatted private keys into the
internal TLS implementation (both PKCS #1 RSA key and PKCS #8
encapsulated RSA key can now be used)

* added option of using faster, but larger, routines in the internal
LibTomMath (for internal TLS implementation) to speed up DH and RSA
calculations (CONFIG_INTERNAL_LIBTOMMATH_FAST=y)

* fixed race condition between disassociation event and group key
handshake to avoid getting stuck in incorrect state [Bug 261]

* fixed opportunistic key caching (proactive_key_caching)

Mon Aug 4 14:00:00 2008 hschaaAATTsuse.de
- Remove patches that are already upstream
- Rebase patches to new version
- Update to 0.6.3

Mon May 5 14:00:00 2008 schwabAATTsuse.de
- Fix mangled error message.

Mon Mar 17 13:00:00 2008 hschaaAATTsuse.de
- Fix system bus activation (bnc#371500)

Tue Mar 11 13:00:00 2008 hschaaAATTsuse.de
- Remove patches that are upstream already
- Update to version 0.5.10, changes:

* added support for Makefile builds to include debug-log-to-a-file
functionality (CONFIG_DEBUG_FILE=y and -f on command line)

* added network configuration parameter \'frequency\' for setting
initial channel for IBSS (adhoc) networks

* fixed EAP-SIM and EAP-AKA message parser to validate attribute
lengths properly to avoid potential crash caused by invalid messages

* added driver_wext workaround for race condition between scanning and
association with drivers that take very long time to scan all
channels (e.g., madwifi with dual-band cards); wpa_supplicant is now
using a longer hardcoded timeout for the scan if the driver supports
notifications for scan completion (SIOCGIWSCAN event); this helps,
e.g., in cases where wpa_supplicant and madwifi driver ended up in
loop where the driver did not even try to associate

* fixed EAP-SIM not to include AT_NONCE_MT and AT_SELECTED_VERSION
attributes in EAP-SIM Start/Response when using fast reauthentication

* fixed problems in getting NDIS events from WMI on Windows 2000
- Changes in 0.5.9:

* fixed an integer overflow issue in the ASN.1 parser used by the
(experimental) internal TLS implementation to avoid a potential
buffer read overflow

* fixed a race condition with -W option (wait for a control interface
monitor before starting) that could have caused the first messages to
be lost

* updated EAP Generalized Pre-Shared Key (EAP-GPSK) to use the latest
draft (draft-ietf-emu-eap-gpsk-07.txt)

* added ctrl_iface RECONNECT (wpa_cli reconnect) command
(like reassociate, but only takes effect if already associated)

* fixed a possible race condition between wpa_cli reassociate and
wpa_cli disconnect

* return a non-zero exit code from non-interactive wpa_cli if the
command is not recognized or fails

* fixed 0.5.8 regressions in BSS selection that prevented wildcard SSID
from being used with non-WPA networks and disabled workaround for
ignoring bogus WPA/RSN IE in non-WPA configuration

* fixed OpenSSL TLS wrapper to clear trusted CA list to allow
network blocks to use different trusted CA configurations

* fixed a potential EAP state machine loop when mloving from PSK to EAP
configuration without restarting wpa_supplicant

Thu Jan 31 13:00:00 2008 hschaaAATTsuse.de
- Fix madwifi support (b.n.c #342670)

Tue Dec 18 13:00:00 2007 jgAATTsuse.de
- Fix two leaks when signalling state and scan results (rh #408141)

Wed Nov 14 13:00:00 2007 jgAATTsuse.de
- enable dbus interface
- apply fixes from Dan Williams
- build Qt4 version of wpa_gui
- dropped gcc 4.3 patch for Qt3 wpa_gui

Mon Nov 12 13:00:00 2007 ssommerAATTsuse.de
- fix build with gcc 4.3

Tue Jul 24 14:00:00 2007 jgAATTsuse.de
- update to version 0.5.8, changes:

* updated driver_wext.c to build with the current wireless-dev.git
tree and net/d80211 changes

* updated EAP Generalized Pre-Shared Key (EAP-GPSK) to use the latest
draft (draft-ietf-emu-eap-gpsk-03.txt)

* fixed \'make install\'

* fixed EAP-TTLS implementation not to crash on use of freed memory
if TLS library initialization fails

* fixed EAP-AKA Notification processing to allow Notification to be
processed after AKA Challenge response has been sent

Mon Mar 19 13:00:00 2007 jgAATTsuse.de
- adjusted include path for madwifi

Sat Mar 10 13:00:00 2007 dmuellerAATTsuse.de
- update to 0.5.7 (#253396):

* ChangeLog is under /usr/share/doc/packages/wpa_supplicant/ChangeLog

Mon Nov 6 13:00:00 2006 jgAATTsuse.de
- set IW_ENCODE_TEMP flag (needed to use dynamic WEP with airo
driver, bug 185528)

Fri Oct 6 14:00:00 2006 jgAATTsuse.de
- update to 0.4.9:

* fixed EAPOL re-authentication for sessions that used PMKSA
caching

* reject WPA/WPA2 message 3/4 if it does not include any valid
WPA/RSN IE

* driver_wext: added support for WE-21 change to SSID configuration

* driver_wext: fixed privacy configuration for static WEP keys mode
[Bug 140]

* driver_wext: added fallback to use SIOCSIWENCODE for setting
auth_alg if the driver does not support SIOCSIWAUTH