Host AP/hostapd/wpa_supplicant - new development release v0.4.1

[Jouni Malinen]

New versions of Prism2/2.5/3 Host AP driver, wpa_supplicant, and
hostapd were just released and are now available from
http://hostap.epitest.fi/

This release is from the new development branch (0.4.x). Please note
that 0.3.x branch continues to be the current source of stable
releases.

This version includes number of bug fixes for the previous development
version. wpa_supplicant comes now with wpa_gui* which is a GUI version
of wpa_cli. In addition, I have started working on developers'
documentation for the programs. Currently, this is only for
wpa_supplicant, but once this part gets more complete, I would expect to
see similar documentation for hostapd. The current documentation is
available at http://hostap.epitest.fi/wpa_supplicant/devel/


*) http://hostap.epitest.fi/wpa_supplicant/wpa_gui.html
   (since there is now a GUI program included with wpa_supplicant,
   it is, of course, time for screenshots ;-)



hostap-driver:
* fixed beacon frame when moving from monitor mode to master mode
  (workaround for firmware bug that left IBSS IE in the Beacon frames)

hostapd:
* fixed RADIUS server initialization when only auth or acct server
  is configured and the other one is left empty
* driver_madwifi: added support for RADIUS accounting
* driver_madwifi: added preliminary support for compiling against 'BSD'
  branch of madwifi CVS tree
* driver_madwifi: fixed pairwise key removal to allow WPA reauth
  without disassociation
* added support for reading additional certificates from PKCS#12 files
  and adding them to the certificate chain
* fixed RADIUS Class attribute processing to only use Access-Accept
  packets to update Class; previously, other RADIUS authentication
  packets could have cleared Class attribute
* added support for more than one Class attribute in RADIUS packets
* added support for verifying certificate revocation list (CRL) when
  using integrated EAP authenticator for EAP-TLS; new hostapd.conf
  options 'check_crl'; CRL must be included in the ca_cert file for now

wpa_supplicant:
* driver_madwifi: fixed WPA/WPA2 mode configuration to allow EAPOL
  packets to be encrypted; this was apparently broken by the changed
  ioctl order in v0.4.0
* driver_madwifi: added preliminary support for compiling against 'BSD'
  branch of madwifi CVS tree
* added support for EAP-MSCHAPv2 password retries within the same EAP
  authentication session
* added support for password changes with EAP-MSCHAPv2 (used when the
  password has expired)
* added support for reading additional certificates from PKCS#12 files
  and adding them to the certificate chain
* fixed association with IEEE 802.1X (no WPA) when dynamic WEP keys
  were used
* fixed a possible double free in EAP-TTLS fast-reauthentication when
  identity or password is entered through control interface
* display EAP Notification messages to user through control interface
  with "CTRL-EVENT-EAP-NOTIFICATION" prefix
* added GUI version of wpa_cli, wpa_gui; this is not build
  automatically with 'make'; use 'make wpa_gui' to build (this requires
  Qt development tools)
* added 'disconnect' command to control interface for setting
  wpa_supplicant in state where it will not associate before
  'reassociate' command has been used
* added support for selecting a network from the list of all configured
  networks ('wpa_cli select_network <network id>'; this disabled all
  other networks; to re-enable, 'wpa_cli select_network any')
* added support for getting scan results through control interface
* added EAP workaround for PEAPv1 session resumption: allow outer,
  i.e., not tunneled, EAP-Success to terminate session since; this can
  be disabled with eap_workaround=0


-- 
Jouni Malinen                                            PGP id EFC895FA