hostapd/wpa_supplicant - new development release v0.4.2

[Jouni Malinen]

New versions of wpa_supplicant and hostapd were just released and are
now available from http://hostap.epitest.fi/

This release is from the new development branch (0.4.x). Please note
that the 0.3.x branch continues to be the current source of stable
releases.

This version includes number of small bug fixes and couple of new
features. Not directly visible to end users, but an important addition
for developers, is in driver_test.c, i.e., in the "test" driver
interface. hostapd and wpa_supplicant can now be configured to talk to
eachother without requiring wireless cards or any kernel drivers. This
can be used to test most of the core code in both programs much more
easily than before. Before, it was only possible to run EAP tests in
this kind of setup, now this can be extended to WPA handshake, RADIUS
accounting, and so on. This should also make it easier to develop new
features since one host can be used to run developer tests while
modifying the programs.

I wrote some documentation on testing and developments tools that I
use. This is available as part of the wpa_supplicant developers'
documentation and the direct address for the page is
http://hostap.epitest.fi/wpa_supplicant/devel/testing_tools.html.

It would be useful to get feedback on whether this kind of tools and
documentation is useful. I'll continue adding tools that make my life
easier, but making these tools easy to use for others and writing
documentation takes time. This is more likely to happen if I know that
someone else finds them useful.


hostapd:
* EAP-PAX is now registered as EAP type 46
* fixed EAP-PAX MAC calculation
* fixed EAP-PAX CK and ICK key derivation
* renamed eap_authenticator configuration variable to eap_server to
  better match with RFC 3748 (EAP) terminology
* driver_test: added support for testing hostapd with wpa_supplicant
  by using test driver interface without any kernel drivers or network
  cards

wpa_supplicant:
* driver_ipw: updated driver structures to match with ipw2200-1.0.4
  (note: ipw2100-1.1.0 is likely to require an update to work with
  this)
* added support for using ap_scan=2 mode with multiple network blocks;
  wpa_supplicant will go through the networks one by one until the
  driver reports a successful association; this uses the same order for
  networks as scan_ssid=1 scans, i.e., the priority field is ignored
  and the network block order in the file is used instead
* fixed a potential issue in RSN pre-authentication ending up using
  freed memory if pre-authentication times out
* added support for matching alternative subject name extensions of the
  authentication server certificate; new configuration variables
  altsubject_match and altsubject_match2
* driver_ndis: added support for IEEE 802.1X authentication with wired
  NDIS drivers
* added support for querying private key password (EAP-TLS) through the
  control interface (wpa_cli/wpa_gui) if one is not included in the
  configuration file
* driver_broadcom: fixed couple of memory leaks in scan result
  processing
* EAP-PAX is now registered as EAP type 46
* fixed EAP-PAX MAC calculation
* fixed EAP-PAX CK and ICK key derivation
* added support for using password with EAP-PAX (as an alternative to
  entering key with eappsk); SHA-1 hash of the password will be used as
  the key in this case
* added support for arbitrary driver interface parameters through the
  configuration file with a new driver_param field; this adds a new
  driver_ops function set_param()
* added possibility to override l2_packet module with driver interface
  API (new send_eapol handler); this can be used to implement driver
  specific TX/RX functions for EAPOL frames
* fixed ctrl_interface_group processing for the case where gid is
  entered as a number, not group name
* driver_test: added support for testing hostapd with wpa_supplicant
  by using test driver interface without any kernel drivers or network
  cards


-- 
Jouni Malinen                                            PGP id EFC895FA