bump hostapd

rmandrad · Sep 16, 2024 · 693d2c8 · 693d2c8
1 parent d65b716
commit 693d2c8
Show file tree

Hide file tree

Showing 43 changed files with 250 additions and 3,616 deletions.
diff --git a/package/network/services/hostapd/Config.in b/package/network/services/hostapd/Config.in
@@ -33,11 +33,11 @@ config WPA_WOLFSSL
 
 config DRIVER_11AC_SUPPORT
 	bool
-	default y
+	default n
 
 config DRIVER_11AX_SUPPORT
 	bool
-	default y
+	default n
 	select WPA_MBO_SUPPORT
 
 config WPA_ENABLE_WEP
@@ -59,8 +59,3 @@ config WPA_MBO_SUPPORT
 	  that facilitate efficient use of multiple frequency bands.
 	  Enabling MBO on an AP using RSN requires 802.11w to be enabled.
 	  Hostapd will refuse to start if MBO and RSN are enabled without 11w.
-
-config DRIVER_11BE_SUPPORT
-	bool
-	default y
-
diff --git a/package/network/services/hostapd/Makefile b/package/network/services/hostapd/Makefile
@@ -5,13 +5,13 @@
 include $(TOPDIR)/rules.mk
 
 PKG_NAME:=hostapd
-PKG_RELEASE:=3
+PKG_RELEASE:=1
 
-PKG_SOURCE_URL:=https://github.com/rmandrad/hostapd
+PKG_SOURCE_URL:=https://w1.fi/hostap.git
 PKG_SOURCE_PROTO:=git
-PKG_SOURCE_DATE:=2024-09-04
-PKG_SOURCE_VERSION:=9907c324a0846f3a4899133b9f08ebefb0719ca5
-PKG_MIRROR_HASH:=32deaa53c684be89f9bd69398595d1f539278a1aecb3a3bf605078fe932e2bc3
+PKG_SOURCE_DATE:=2024-09-15
+PKG_SOURCE_VERSION:=5ace39b0a4cdbe18ddbc4e18f80ee3876233c20b
+PKG_MIRROR_HASH:=43187d1ddd923970ef3821a0fe267880c2483f6f1a5acd0dd2d7906661ab1372
 
 PKG_MAINTAINER:=Felix Fietkau <[email protected]>
 PKG_LICENSE:=BSD-3-Clause
@@ -27,7 +27,6 @@ PKG_CONFIG_DEPENDS:= \
 	CONFIG_WPA_RFKILL_SUPPORT \
 	CONFIG_DRIVER_11AC_SUPPORT \
 	CONFIG_DRIVER_11AX_SUPPORT \
-	CONFIG_DRIVER_11BE_SUPPORT \
 	CONFIG_WPA_ENABLE_WEP
 
 PKG_BUILD_FLAGS:=gc-sections lto
@@ -80,20 +79,13 @@ ifneq ($(CONFIG_DRIVER_11AX_SUPPORT),)
   HOSTAPD_IEEE80211AX:=y
 endif
 
-ifneq ($(CONFIG_DRIVER_11BE_SUPPORT),)
-  HOSTAPD_IEEE80211BE:=y
-endif
-
-
-
 CORE_DEPENDS = +ucode +libubus +libucode +ucode-mod-fs +ucode-mod-nl80211 +ucode-mod-rtnl +ucode-mod-ubus +ucode-mod-uloop +libblobmsg-json +libudebug
 OPENSSL_DEPENDS = +PACKAGE_$(1):libopenssl +PACKAGE_$(1):libopenssl-legacy
 
 DRIVER_MAKEOPTS= \
 	CONFIG_ACS=y CONFIG_DRIVER_NL80211=y \
 	CONFIG_IEEE80211AC=$(HOSTAPD_IEEE80211AC) \
 	CONFIG_IEEE80211AX=$(HOSTAPD_IEEE80211AX) \
-	CONFIG_IEEE80211BE=$(HOSTAPD_IEEE80211BE) \
 	CONFIG_MBO=$(CONFIG_WPA_MBO_SUPPORT) \
 	CONFIG_UCODE=y CONFIG_APUP=y
 

diff --git a/package/network/services/hostapd/files/hostapd-basic.config b/package/network/services/hostapd/files/hostapd-basic.config
@@ -44,9 +44,15 @@ CONFIG_DRIVER_NL80211=y
 # Driver interface for no driver (e.g., RADIUS server only)
 #CONFIG_DRIVER_NONE=y
 
+# IEEE 802.11F/IAPP
+#CONFIG_IAPP=y
+
 # WPA2/IEEE 802.11i RSN pre-authentication
 CONFIG_RSN_PREAUTH=y
 
+# IEEE 802.11w (management frame protection)
+#CONFIG_IEEE80211W=y
+
 # Support Operating Channel Validation
 CONFIG_OCV=y
 
@@ -148,6 +154,9 @@ CONFIG_IEEE80211R=y
 # the IEEE 802.11 Management capability (e.g., FreeBSD/net80211)
 #CONFIG_DRIVER_RADIUS_ACL=y
 
+# IEEE 802.11n (High Throughput) support
+CONFIG_IEEE80211N=y
+
 # Wireless Network Management (IEEE Std 802.11v-2011)
 # Note: This is experimental and not complete implementation.
 #CONFIG_WNM=y
@@ -156,20 +165,10 @@ CONFIG_IEEE80211R=y
 CONFIG_IEEE80211AC=y
 
 # IEEE 802.11ax HE support
-#CONFIG_IEEE80211AX=y
-
-# IEEE 802.11be EHT support
-# CONFIG_IEEE80211AX is mandatory for setting CONFIG_IEEE80211BE.
 # Note: This is experimental and work in progress. The definitions are still
 # subject to change and this should not be expected to interoperate with the
-# final IEEE 802.11be version.
-CONFIG_IEEE80211BE=y
-
-# Simultaneous Authentication of Equals (SAE), WPA3-Personal
-#CONFIG_SAE=y
-
-# SAE Public Key, WPA3-Personal
-#CONFIG_SAE_PK=y
+# final IEEE 802.11ax version.
+#CONFIG_IEEE80211AX=y
 
 # Remove debugging code that is printing out debug messages to stdout.
 # This can be used to reduce the size of the hostapd considerably if debugging
@@ -356,12 +355,12 @@ CONFIG_TLS=internal
 # * ath10k
 #
 # For more details refer to:
-# https://wireless.wiki.kernel.org/en/users/documentation/acs
+# http://wireless.kernel.org/en/users/Documentation/acs
 #
 #CONFIG_ACS=y
 
 # Multiband Operation support
-# These extensions facilitate efficient use of multiple frequency bands
+# These extentions facilitate efficient use of multiple frequency bands
 # available to the AP and the devices that may associate with it.
 #CONFIG_MBO=y
 
@@ -387,39 +386,13 @@ CONFIG_TLS=internal
 # Airtime policy support
 CONFIG_AIRTIME_POLICY=y
 
+# Proxy ARP support
+#CONFIG_PROXYARP=y
+
 # Override default value for the wpa_disable_eapol_key_retries configuration
 # parameter. See that parameter in hostapd.conf for more details.
 #CFLAGS += -DDEFAULT_WPA_DISABLE_EAPOL_KEY_RETRIES=1
 
-# Wired equivalent privacy (WEP)
-# WEP is an obsolete cryptographic data confidentiality algorithm that is not
-# considered secure. It should not be used for anything anymore. The
-# functionality needed to use WEP is available in the current hostapd
-# release under this optional build parameter. This functionality is subject to
-# be completely removed in a future release.
-#CONFIG_WEP=y
-
-# Remove all TKIP functionality
-# TKIP is an old cryptographic data confidentiality algorithm that is not
-# considered secure. It should not be used anymore. For now, the default hostapd
-# build includes this to allow mixed mode WPA+WPA2 networks to be enabled, but
-# that functionality is subject to be removed in the future.
-#CONFIG_NO_TKIP=y
-
-# Pre-Association Security Negotiation (PASN)
-# Experimental implementation based on IEEE P802.11z/D2.6 and the protocol
-# design is still subject to change. As such, this should not yet be enabled in
-# production use.
-#CONFIG_PASN=y
-
-# Device Provisioning Protocol (DPP) (also known as Wi-Fi Easy Connect)
-#CONFIG_DPP=y
-# DPP version 2 support
-#CONFIG_DPP2=y
-# DPP version 3 support (experimental and still changing; do not enable for
-# production use)
-#CONFIG_DPP3=y
-
 # uBus IPC/RPC System
 # Services can connect to the bus and provide methods
 # that can be called by other services or clients.

diff --git a/package/network/services/hostapd/files/hostapd-full.config b/package/network/services/hostapd/files/hostapd-full.config
@@ -10,7 +10,7 @@
 # to override previous values of the variables.
 
 # Driver interface for Host AP driver
-CONFIG_DRIVER_HOSTAP=y
+#CONFIG_DRIVER_HOSTAP=y
 
 # Driver interface for wired authenticator
 CONFIG_DRIVER_WIRED=y
@@ -44,9 +44,15 @@ CONFIG_DRIVER_NL80211=y
 # Driver interface for no driver (e.g., RADIUS server only)
 #CONFIG_DRIVER_NONE=y
 
+# IEEE 802.11F/IAPP
+CONFIG_IAPP=y
+
 # WPA2/IEEE 802.11i RSN pre-authentication
 CONFIG_RSN_PREAUTH=y
 
+# IEEE 802.11w (management frame protection)
+#CONFIG_IEEE80211W=y
+
 # Support Operating Channel Validation
 CONFIG_OCV=y
 
@@ -148,6 +154,9 @@ CONFIG_IEEE80211R=y
 # the IEEE 802.11 Management capability (e.g., FreeBSD/net80211)
 #CONFIG_DRIVER_RADIUS_ACL=y
 
+# IEEE 802.11n (High Throughput) support
+CONFIG_IEEE80211N=y
+
 # Wireless Network Management (IEEE Std 802.11v-2011)
 # Note: This is experimental and not complete implementation.
 CONFIG_WNM=y
@@ -156,20 +165,10 @@ CONFIG_WNM=y
 CONFIG_IEEE80211AC=y
 
 # IEEE 802.11ax HE support
-#CONFIG_IEEE80211AX=y
-
-# IEEE 802.11be EHT support
-# CONFIG_IEEE80211AX is mandatory for setting CONFIG_IEEE80211BE.
 # Note: This is experimental and work in progress. The definitions are still
 # subject to change and this should not be expected to interoperate with the
-# final IEEE 802.11be version.
-CONFIG_IEEE80211BE=y
-
-# Simultaneous Authentication of Equals (SAE), WPA3-Personal
-CONFIG_SAE=y
-
-# SAE Public Key, WPA3-Personal
-CONFIG_SAE_PK=y
+# final IEEE 802.11ax version.
+#CONFIG_IEEE80211AX=y
 
 # Remove debugging code that is printing out debug messages to stdout.
 # This can be used to reduce the size of the hostapd considerably if debugging
@@ -289,7 +288,7 @@ CONFIG_TLS=internal
 
 # TLS-based EAP methods require at least TLS v1.0. Newer version of TLS (v1.2)
 # can be enabled to enable use of stronger crypto algorithms.
-CONFIG_TLSV12=y
+#CONFIG_TLSV12=y
 
 # Select which ciphers to use by default with OpenSSL if the user does not
 # specify them.
@@ -323,7 +322,7 @@ CONFIG_HS20=y
 #CONFIG_SQLITE=y
 
 # Enable Fast Session Transfer (FST)
-CONFIG_FST=y
+#CONFIG_FST=y
 
 # Enable CLI commands for FST testing
 #CONFIG_FST_TEST=y
@@ -356,14 +355,14 @@ CONFIG_FST=y
 # * ath10k
 #
 # For more details refer to:
-# https://wireless.wiki.kernel.org/en/users/documentation/acs
+# http://wireless.kernel.org/en/users/Documentation/acs
 #
 #CONFIG_ACS=y
 
 # Multiband Operation support
-# These extensions facilitate efficient use of multiple frequency bands
+# These extentions facilitate efficient use of multiple frequency bands
 # available to the AP and the devices that may associate with it.
-CONFIG_MBO=y
+#CONFIG_MBO=y
 
 # Client Taxonomy
 # Has the AP retain the Probe Request and (Re)Association Request frames from
@@ -387,39 +386,13 @@ CONFIG_TAXONOMY=y
 # Airtime policy support
 CONFIG_AIRTIME_POLICY=y
 
+# Proxy ARP support
+CONFIG_PROXYARP=y
+
 # Override default value for the wpa_disable_eapol_key_retries configuration
 # parameter. See that parameter in hostapd.conf for more details.
 #CFLAGS += -DDEFAULT_WPA_DISABLE_EAPOL_KEY_RETRIES=1
 
-# Wired equivalent privacy (WEP)
-# WEP is an obsolete cryptographic data confidentiality algorithm that is not
-# considered secure. It should not be used for anything anymore. The
-# functionality needed to use WEP is available in the current hostapd
-# release under this optional build parameter. This functionality is subject to
-# be completely removed in a future release.
-#CONFIG_WEP=y
-
-# Remove all TKIP functionality
-# TKIP is an old cryptographic data confidentiality algorithm that is not
-# considered secure. It should not be used anymore. For now, the default hostapd
-# build includes this to allow mixed mode WPA+WPA2 networks to be enabled, but
-# that functionality is subject to be removed in the future.
-#CONFIG_NO_TKIP=y
-
-# Pre-Association Security Negotiation (PASN)
-# Experimental implementation based on IEEE P802.11z/D2.6 and the protocol
-# design is still subject to change. As such, this should not yet be enabled in
-# production use.
-#CONFIG_PASN=y
-
-# Device Provisioning Protocol (DPP) (also known as Wi-Fi Easy Connect)
-#CONFIG_DPP=y
-# DPP version 2 support
-#CONFIG_DPP2=y
-# DPP version 3 support (experimental and still changing; do not enable for
-# production use)
-#CONFIG_DPP3=y
-
 # uBus IPC/RPC System
 # Services can connect to the bus and provide methods
 # that can be called by other services or clients.