hostapd/wpa_supplicant - new stable release v0.4.8

[Jouni Malinen]

New versions of wpa_supplicant and hostapd were just released and are
now available from http://hostap.epitest.fi/

This release is a bug fix version from the stable (0.4.x) branch and
it replaces 0.4.7 as the recommended stable version. Main development
continues in the development branch (0.5.x).


hostapd:
* fixed stdarg use in hostapd_logger(): if both stdout and syslog
  logging was enabled, hostapd could trigger a segmentation fault in
  vsyslog on some CPU -- C library combinations

wpa_supplicant:
* fixed PC/SC code to use correct length for GSM AUTH command buffer
  and to not use pioRecvPci with SCardTransmit() calls; these were not
  causing visible problems with pcsc-lite, but Windows Winscard.dll
  refused the previously used parameters; this fixes EAP-SIM and
  EAP-AKA authentication using SIM/USIM card under Windows
* added support for EAP-FAST key derivation using other ciphers than
  RC4-128-SHA for authentication and AES128-SHA for provisioning
* fixed EAP-SIM and EAP-AKA pseudonym and fast re-authentication to
  decrypt AT_ENCR_DATA attributes correctly
* added support for configuring CA certificate as DER file and as a
  configuration blob
* fixed private key configuration as configuration blob and added
  support for using PKCS#12 as a blob
* fixed cygwin build
* added support for loading trusted CA certificates from Windows
  certificate store: ca_cert="cert_store://<name>", where <name> is
  likely CA (Intermediate CA certificates) or ROOT (root certificates)
* fixed TLS library deinitialization after RSN pre-authentication not
  to disable TLS library for normal authentication
* fixed PMKSA cache processing not to trigger deauthentication if the
  current PMKSA cache entry is replaced with a valid new entry
* fixed PC/SC initialization for ap_scan != 1 modes (this fixes
  EAP-SIM and EAP-AKA with real SIM/USIM card when using ap_scan=0 or
  ap_scan=2)
* do not try to use USIM APDUs when initializing PC/SC for SIM card
  access for a network that has not enabled EAP-AKA


-- 
Jouni Malinen                                            PGP id EFC895FA