summaryrefslogtreecommitdiff
path: root/sys/src/cmd/aux/wpa.c
AgeCommit message (Collapse)Author
2017-12-31aux/wpa: get rid of custom Hfmt() routine, just use encodefmt. use %E for ↵cinap_lenrek
mac addresses
2017-10-17aux/wpa: prevent PTK re-installation attack by replaying AP retransmitscinap_lenrek
this implements the mitigation suggested in section "6.5 Countermeasures" of "Key Reinstallation Attacks: Forcing Nonce Resuse in WPA2" [1]. [1] https://papers.mathyvanhoef.com/ccs2017.pdf
2017-04-02aux/wpa: go to background when not prompting, handle open networkscinap_lenrek
2017-02-16wpa: dont send initial "start" message, faster polling interval waiting for ↵cinap_lenrek
connection the kernel will automatically timeout the eap blocked state for us and reassociate for us, so there is no need to provoke the ap to start the wpa/eap handshake. make the polling faster changing the sleep time from 500 to 100 ms.
2015-06-28wpa: do not prompt for key when there is already one in factotumcinap_lenrek
2015-01-27wpa: fix password avp padding, recognize wpa1 authentication ouicinap_lenrek
we have to padd the data portion in the password avp, not add padding after the avp.
2015-01-27wpa: do not forward alert tls records, close connectioncinap_lenrek
2015-01-26wpa: cleanup, pad eap-ttls/pap password, zero passwords and key material ↵cinap_lenrek
after use
2015-01-25wpa: experimental wpa2 enterprise supportcinap_lenrek
this adds support for eap-peap/mschapv2 and eap-ttls/pap. code has only been tested with freeradius and a cheap access point, not tested with actual eduroam network.
2014-11-17wpa: handle essid: with whitespaces from ether ifstats filecinap_lenrek
2014-11-17wpa: fix quoting for essid with spacescinap_lenrek
2014-11-02wpa: fork note group when going to background (thanks jpm)cinap_lenrek
bug: as jpm pointed out, when we run aux/wpa in rio window and delete the window, aux/wpa was killed as it shared the note group of the window. fix: fork the notegroup.
2013-08-19wpa: repeat rsne setup after deassociation (roamng between access points)cinap_lenrek
the "auth" ctl command only sets the rsne of the current selected access point. so on deassociation, we wait for the connection to the potentially new access point and then setup new rsne before processing eapol messages.
2013-07-18wpa: wait for bss to connectcinap_lenrek
waiting at the auth command is too late because we want to read the brsne first to build the rsne used in the auth message.
2013-07-18wifi: make "auth" command non-blocking, let aux/wpa do the waiting for bss ↵cinap_lenrek
scan to complete.
2013-06-24wpa: fix error reporting for getptk(), use readn() to read ifstats filecinap_lenrek
2013-06-24wpa: deassociation, reply eapol version, send rsc 0 and reset install flag ↵cinap_lenrek
on message D reply, use 0 for txkey tsc
2013-06-22wpa: check for eapol v2ppatience0
2013-06-22wpa: s/peerwise/pairwise/g, fix bug where p is not incremented afterppatience0
reading wpa1oui into w, making the later memcmp with wpatkipoui bogus.
2013-06-16wpa: fix bugcinap_lenrek
2013-06-15wpa: automatically pick cipher suits from beacon rsnecinap_lenrek
2013-06-02aux/wpa: make sure essid is configured, dont make factotum ask for essidcinap_lenrek
2013-03-23wpa: fix rsc for wpa2cinap_lenrek
in wpa2, the rsc field of the eapol message3 is the packet number for *group* messages that the ap will use as there is no separate group key message. in wpa1, we use it for the peerwise key.
2013-03-23wpa: remove debug printcinap_lenrek
2013-03-23add experimental wpa2/ccmp supportcinap_lenrek
2013-03-17wpa: initial support for rsncinap_lenrek
2013-03-09aux/wpa: check reply counter only after mic checkcinap_lenrek
2013-03-09add wpa key setup program aux/wpacinap_lenrek