hostap: Security improvements #74847
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
MaochenWang1
force-pushed
the
main_zephyr_10
branch
from
63d975a to
223bf7a
Compare
krish2718
requested changes
Jun 24, 2024
MaochenWang1
force-pushed
the
main_zephyr_10
branch
4 times, most recently
from
9308ab4 to
953c39e
Compare
|
Hi @krish2718 @jukkar @rlubos please review again, thanks |
MaochenWang1
force-pushed
the
main_zephyr_10
branch
from
953c39e to
5f9de8e
Compare
krish2718
reviewed
Jul 25, 2024
MaochenWang1
force-pushed
the
main_zephyr_10
branch
from
5f9de8e to
fe45111
Compare
|
Hi @krish2718 @jukkar @rlubos please review again |
MaochenWang1
force-pushed
the
main_zephyr_10
branch
4 times, most recently
from
10cc4b1 to
81b13ef
Compare
krish2718
reviewed
Jul 29, 2024
MaochenWang1
force-pushed
the
main_zephyr_10
branch
2 times, most recently
from
de335e3 to
036555d
Compare
krish2718
reviewed
Jul 30, 2024
MaochenWang1
force-pushed
the
main_zephyr_10
branch
2 times, most recently
from
05b167b to
50026cb
Compare
krish2718
reviewed
Jul 30, 2024
MaochenWang1
force-pushed
the
main_zephyr_10
branch
2 times, most recently
from
f83b253 to
13fac8e
Compare
MaochenWang1
force-pushed
the
main_zephyr_10
branch
3 times, most recently
from
819dc03 to
8ef550b
Compare
krish2718
reviewed
Aug 17, 2024
MaochenWang1
force-pushed
the
main_zephyr_10
branch
from
8ef550b to
f87bb04
Compare
krish2718
reviewed
Aug 18, 2024
MaochenWang1
force-pushed
the
main_zephyr_10
branch
2 times, most recently
from
d01e31b to
0ee0f5e
Compare
krish2718
previously approved these changes
Aug 19, 2024
|
Hi @jukkar please review, thanks |
Support saving and getting Wi-Fi connection parameters recently used. Signed-off-by: Maochen Wang <[email protected]>
Support flushing PMKSA cache entries in the reconnection failed case of WPA3 SAE. Signed-off-by: Maochen Wang <[email protected]>
Keep WIFI_SECURITY_TYPE_EAP, and define WIFI_SECURITY_TYPE_EAP_TLS same value as WIFI_SECURITY_TYPE_EAP to make it backwards compatible. Ready to support more EAP type in the comming PR. Signed-off-by: Maochen Wang <[email protected]>
Add basic WPA2 EAP-TLS support. Also, add test infrasturcture esp. the certification handling, non-certificate credentials are take as runtime input and certificated are build time input for testing. A real application can set certificates at runtime too. Signed-off-by: Maochen Wang <[email protected]> Signed-off-by: Chaitanya Tata <[email protected]>
For Enterprise crypto MbedTLS needs more heap either separate pool or libc heap, based on experiments 55000 was arrived for a successful WPA2-EAP-TLS association. Signed-off-by: Chaitanya Tata <[email protected]>
For Wi-Fi Enterprise testing these configurations are necessary. Signed-off-by: Chaitanya Tata <[email protected]>
MaochenWang1
force-pushed
the
main_zephyr_10
branch
from
0ee0f5e to
ea1077a
Compare
|
Hi @jukkar please review, this PR has pending too long, and faces conflicts several times |
krish2718
approved these changes
Aug 20, 2024
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
hostap: Support getting Wi-Fi connection parameters recently used
hostap: Support flushing PMKSA cache entries
hostap: add WPA2 EAP_TLS support
Implements #54213 partially (only EAP-TLS).