openwrtv4/package/network/services/hostapd/files
Stijn Tintel c5f97c9372 hostapd: add wpa_disable_eapol_key_retries option
Commit 2127425434 introduced an AP-side
workaround for key reinstallation attacks. This option can be used to
mitigate KRACK on the station side, in case those stations cannot be
updated. Since many devices are out there will not receive an update
anytime soon (if at all), it makes sense to include this workaround.

Unfortunately this can cause interoperability issues and reduced
robustness of key negotiation, so disable the workaround by default, and
add an option to allow the user to enable it if he deems necessary.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-10-17 17:25:05 +03:00
..
hostapd-full.config hostapd: update hostapd full config 2017-09-28 00:26:11 +03:00
hostapd-mini.config hostapd: update hostapd mini config 2017-09-28 00:27:01 +03:00
hostapd.sh hostapd: add wpa_disable_eapol_key_retries option 2017-10-17 17:25:05 +03:00
multicall.c packages: sort network related packages into package/network/ 2012-10-10 12:32:29 +00:00
wpa_supplicant-full.config hostapd: update wpa_supplicant full config 2017-09-28 00:27:14 +03:00
wpa_supplicant-mini.config hostapd: update wpa_supplicant mini config 2017-09-28 00:27:26 +03:00
wpa_supplicant-p2p.config hostapd: update wpa_supplicant p2p config 2017-09-28 00:27:36 +03:00
wps-hotplug.sh buttons: make all button handler scripts return 0 2015-07-24 09:11:35 +00:00