Commit Graph

129 Commits

Author SHA1 Message Date
gauri patankar
84252e4eb8 wpa_supplicant: Update security patches from upstream
1. Adding security patch for SAE side channel attacks
2. Adding confirm message validation in error cases
3. Adding y coordinate for PWE in SAE
2022-10-11 11:33:33 +05:30
Laukik Hase
82c5bdcb76
wpa_supplicant: MBEDTLS_PRIVATE & MBEDTLS_ALLOW_PRIVATE_ACCESS-related cleanup 2022-10-10 11:48:16 +05:30
Kapil Gupta
198a4335f2 Remove unnecessary code from disconnect handler 2022-10-04 21:38:59 +05:30
gauri patankar
c89686647d esp_wifi:added hash key length validation 2022-09-30 10:40:27 +05:30
Kapil Gupta
cc6196ff6a esp_wifi: Remove unnecessary function pointer from wpa_sm_init 2022-09-29 12:46:53 +00:00
wuzhenghui
6b6bb3a321 esp32c6: add wpa_supplicant support 2022-09-26 20:32:13 +08:00
Kapil Gupta
6729f870b9 wpa_supplicant: Prevent pmk flush for unspecified reasoncode 2022-09-26 15:09:48 +05:30
Kapil Gupta
2bbd5ea69c Merge branch 'bugfix/wps_connect_to_open_ap' into 'master'
esp_wifi: bugfix wps connect to open AP

See merge request espressif/esp-idf!20247
2022-09-20 23:59:47 +08:00
Shreyas Sheth
d12351f7a6 esp_wifi: bugfix wps connect to open AP
Set Mac address in correct field
2022-09-20 11:43:53 +05:30
Kapil Gupta
3c5c108fa8 wpa_supplicat: Use same channel as found in WPS scan for WPS connect 2022-09-16 10:58:03 +05:30
Kapil Gupta
06db6c2098 Merge branch 'bugfix/wps_ssid_len_validation' into 'master'
wpa_supplicant: Add WPS ssid length validation

See merge request espressif/esp-idf!19486
2022-08-29 13:55:17 +08:00
Mahavir Jain
fbd1972318
wpa_supplicant: fix issue with WPA2 enterprise TLS session
Usage of `mbedtls_ssl_conf_sig_algs()` was incorrect, it must include signature
algorithm with hash. This change is as per requirement defined in mbedTLS-3.2.1
release.
2022-08-24 11:59:35 +05:30
Laukik Hase
6319970ab7
esp_tls/wpa_supplicant: Updated deprecated mbedtls APIs 2022-08-24 11:59:34 +05:30
Jiang Jiang Jian
08ed16f48c Merge branch 'bugfix/remove_rc4_3des_tls_cipher_wpa' into 'master'
wpa_supplicant: remove RC4 and 3DES ciphers for TLS

Closes IDFGH-8107

See merge request espressif/esp-idf!19718
2022-08-24 14:07:05 +08:00
Kapil Gupta
964f0ad5ad wpa_supplicant: remove RC4 and 3DES ciphers for TLS
MbedTLS-3.x has dropped support for 3DES and RC4 TLS cipher
suites. Removing them from supplicant as well

Closes https://github.com/espressif/esp-idf/issues/9607
2022-08-23 13:02:05 +05:30
Kapil Gupta
4df06ed2f0 wpa_supplicant: Fix WPS connection issue after WPS done
esp_wifi_disconnect is needed to clear the wifi state and enable
station to connect to new SSID. Add changes to call it after
WPS is done.
2022-08-22 20:32:34 +05:30
Kapil Gupta
51f785fabe wpa_supplicant: Add WPS ssid length validation 2022-08-10 12:08:40 +05:30
Shreyas Sheth
341a92aaa5 esp_wifi: WPA3 SAE keep default value as h2e and hunting and pecking for sae pwe 2022-07-22 12:23:13 +05:30
Kapil Gupta
951928960b esp_wifi: WPA2 enterprise related changes
1. Removed DHE ciphers when mbedTLS is disabled since they take
too much processing power.
2. Removed support of SHA384 and SHA512 when mbedTLS is disabled
due to too much processing needed.
3. Fixed bugs in crypto_hash_init API which was causing
EAP connections to fail when mbedTLS was enabled.
4. Cleaned some code of crypto_hash_***
2022-07-21 13:33:18 +05:30
Kapil Gupta
9d98cd8f8d WiFi: Do not disconnect in WPS disable incase WPS is done/scanning
Closes https://github.com/espressif/esp-idf/issues/9341
2022-07-18 14:57:01 +05:30
Shyamal Khachane
88db86672d fix for OWE memory leak 2022-07-15 14:29:32 +05:30
Kapil Gupta
ff00a1c7a2 esp_wifi: Clear old keys before going for new connection 2022-07-12 16:37:55 +05:30
Shreyas Sheth
591c7a496c esp_wifi: WPA3 SAE H2E support for station 2022-06-20 18:51:11 +05:30
Kapil Gupta
7fae6ce4f2 Correct SSID copy length during WPS scan 2022-06-18 13:26:48 +00:00
Shyamal Khachane
6d55761f60 OWE support for station 2022-06-15 17:20:24 +05:30
Kapil Gupta
bb23d783c0 Merge branch 'bugfix/sta_rejoin_softap_mode_issue' into 'master'
wpa_supplicant: Add changes to deinit sta_info correctly

Closes WIFI-4441

See merge request espressif/esp-idf!18395
2022-06-07 21:47:14 +08:00
Kapil Gupta
ed2bed49c0 wpa_supplicant: Add changes to deinit sta_info correctly
Incase sta pointer is not null during station join, deinit of
previous sm causing crash due to incorrect typecast.

Add changes to correct this.
2022-06-07 11:41:53 +05:30
Kapil Gupta
e9128b3b5b wpa_supplicant: Removed ESP32 reference from generic APIs/Code 2022-06-06 11:03:36 +05:30
Kapil Gupta
e60ebc0cbe Use snprintf instead of sprintf 2022-06-06 11:03:36 +05:30
Jiang Jiang Jian
8efa4d64e0 Merge branch 'feature/add_task_wrappers' into 'master'
wpa_supplicant: Add osi layer for FreeRTOS calls

Closes WIFI-2996

See merge request espressif/esp-idf!11734
2022-05-30 10:29:50 +08:00
Kapil Gupta
777b2caa1c wpa_supplicant: Move ETS/ESP timers to eloop 2022-05-29 09:32:16 +05:30
Zhang Jun Hao
fcf8c84ad5 fix potential leak of memory check error 2022-05-28 08:52:55 +00:00
Kapil Gupta
0cdad0a002 wpa_supplicant: Add wrappers for FreeRTOS APIs 2022-05-26 15:23:21 +05:30
Kapil Gupta
a6811adac7 wpa_supplicant: Add WPS registrar support for softAP mode 2022-05-24 12:11:53 +05:30
Kapil Gupta
ee33c6ae05 esp_wifi: Add APIs to check BTM and RRM support of connected AP 2022-05-16 15:57:59 +05:30
Kapil Gupta
c2429f1cf9 wpa_supplicant: sync eap code with upstream 2022-05-13 12:57:47 +08:00
Kapil Gupta
36321fda82 Merge branch 'feature/eloop_timer' into 'master'
wpa_supplicant: Add timer based eloop implementation

See merge request espressif/esp-idf!17430
2022-05-12 12:30:44 +08:00
Kapil Gupta
ecc87cfc8d wpa_supplicant: wps code updation
Update WPS code with upstream. Also moved ESP specific code
in another esp code folder.
2022-05-11 12:18:52 +00:00
Kapil Gupta
d06daee350 wpa_supplicant: Add timer based eloop implementation 2022-05-11 17:45:23 +05:30
Kapil Gupta
cb222740bd Merge branch 'bugfix/coverity_fixes' into 'master'
wpa_supplicant: Fix issues reported by coverity

Closes WIFI-4390

See merge request espressif/esp-idf!17915
2022-05-05 18:17:27 +08:00
kapil.gupta
3d5ca7ee6e wpa_supplicant: Add support for FT psk 2022-05-01 16:16:51 +05:30
Kapil Gupta
f070e2db6d wpa_supplicant: Fix issues reported by coverity 2022-04-26 21:40:27 +05:30
Nachiket Kukade
bd40793771 Merge branch 'bugfix/dpp_pkey_api_fix' into 'master'
Move adding prefix/postfix of DPP key to example

Closes IDFGH-7116

See merge request espressif/esp-idf!17383
2022-04-19 15:04:13 +08:00
Kapil Gupta
86013e918a Merge branch 'feature/mbedtls_default_bundle_wpa_ent' into 'master'
wpa_supplicant: Add CA certification bundle support

See merge request espressif/esp-idf!17055
2022-04-18 19:47:45 +08:00
Nachiket Kukade
8dea7cbed6 wpa_supplicant/dpp: Avoid deadlock while deleting DPP task
Closes https://github.com/espressif/esp-idf/issues/8724
2022-04-14 16:54:47 +05:30
Nachiket Kukade
282d3c6188 wpa_supplicant/dpp: Move adding prefix/postfix of DPP key to example
1. Move adding of prefix/postfix to the private key to example code.
   This is to preserve forward compatibility when more curves are supported.
2. Documentation correction of bootstrapping key configuration.
2022-04-14 16:54:47 +05:30
Kapil Gupta
92c18f11d9 wpa_supplicant: Remove scan done event in task 2022-04-06 19:49:52 +05:30
Kapil Gupta
62eb06e386 wpa_supplicant: Add CA certification bundle support
Add support for CA certificate bundle support for server
certificate validation
2022-04-05 10:57:09 +05:30
Kapil Gupta
9130988299 Merge branch 'bugfix/security_validation' into 'master'
wpa_supplicant: Add BTM security checks

Closes WIFI-4075 and WIFI-4081

See merge request espressif/esp-idf!16619
2022-03-10 15:14:06 +08:00
Sagar Bijwe
6501eff7f5 Remove legacy system event framework. 2022-03-09 15:53:45 +05:30
Kapil Gupta
c098c253b1 wpa_supplicant: Add BTM security checks 2022-03-09 03:58:39 +00:00
Jiang Jiang Jian
1068c7720b Merge branch 'bugfix/ignore_pmf_capable_flag' into 'master'
Always connect Station in PMF mode if possible

Closes WIFI-4320

See merge request espressif/esp-idf!17023
2022-03-03 19:34:36 +08:00
Kapil Gupta
84f9aa13c9 Merge branch 'bugfix/dpp_sdkconfig_default' into 'master'
esp_example: Enable MbedTLS for DPP enrollee by default

Closes WIFI-4275

See merge request espressif/esp-idf!16624
2022-03-03 00:10:25 +08:00
Nachiket Kukade
7ed8fdac59 esp_wifi: Always connect Station in PMF mode if possible
While using esp_wifi_set_config, flag pmf_capable defaults to 0.
Users may not bother to enable it, which prevents connection to a
WPA3 AP. Or the AP may reset into WPA3 mode failing the re-connection.
To ensure better security, deprecate the pmf_capable flag and set it to
true internally.
2022-02-21 11:31:56 +05:30
Jakob Hasse
b9d66670e8 wpa_supplicant: added missing includes 2022-02-17 16:11:56 +08:00
Kapil Gupta
20847eeb96 Merge branch 'bugfix/eap_client_crash' into 'master'
wpa_supplicant: Fix memory corruption

Closes WIFI-4299

See merge request espressif/esp-idf!16841
2022-02-11 09:54:27 +00:00
aditi_lonkar
c3a661c0fd esp_wifi: Add pmf support for softAP. 2022-02-09 18:58:37 +05:30
Kapil Gupta
9b38b15180 wpa_supplicant: Fix invalid memory dereference 2022-02-08 23:08:51 +08:00
Anton Maklakov
7cdd151612 Merge branch 'bugfix/nocommon' into 'master'
enable and fix warnings on common symbols

Closes IDFGH-3055 and IDF-3013

See merge request espressif/esp-idf!16802
2022-01-28 14:39:51 +00:00
Kapil Gupta
f57ccaabee esp_example: Enable MbedTLS for DPP enrollee by default 2022-01-28 13:53:39 +08:00
Ivan Grokhotkov
d4190a9471 wpa_supplicant: mark global variables defined in headers 'extern'
...to avoid defining common symbols.
GCC since version 10 defaults to -fno-common and doesn't generate
common symbols, leading to duplicate definitions of these symbols.
2022-01-27 11:00:09 +07:00
Kapil Gupta
dfb60c0436 wpa_supplicant: Scan resumption in PBC mode 2022-01-25 16:41:51 +05:30
Hrudaynath Dhabe
6d81821516 esp_wifi: Fix the negotiation of method with eap server. 2022-01-03 13:31:32 +05:30
Jiang Jiang Jian
d95b56a435 Merge branch 'bugfix/rrm_dpp_task_delete' into 'master'
wpa_supplicant: Correct task deletion for RRM and DPP tasks

Closes IDFGH-5688

See merge request espressif/esp-idf!14940
2021-12-27 10:26:33 +00:00
Kapil Gupta
69e404e7b8 wpa_supplicant: Correct task deletion for RRM and DPP tasks
Closes https://github.com/espressif/esp-idf/issues/7409
2021-12-24 13:52:29 +05:30
Kapil Gupta
0336584f3e esp_wifi: Refactor key install code 2021-12-23 21:31:31 +08:00
Kapil Gupta
14b949077d wpa_supplicant: Add WPS Fixes
Add following bugfixes

1. Station not able to connect when WPS pin is pressed first on AP.
2. PBC overlap getting detected for selected registrar PIN APs.
3. Station not considering authorised MACs for PIN method.
4. For PIN methodm If no AP is found, station will loop through
   APs in its vicinity and try to do WPS with them one by one till
   WPS timeout occurs. This is for some APs which do not set
   selected registrar correctly.
2021-12-20 17:34:30 +05:30
Kapil Gupta
d3542495ab ESP_WIFI: Remove static analysis warnings 2021-12-08 17:32:22 +05:30
Hrudaynath Dhabe
5f96a6ffd2 esp_wifi: Add support for EAP-FAST authentication method 2021-11-22 17:33:36 +05:30
Kapil Gupta
4cbd4b19cb esp_wifi: Remove scan done event for supplicant scans
Closes https://github.com/espressif/esp-idf/issues/7423
2021-11-20 18:25:55 +05:30
Zhang Jun Hao
a568b4fddf esp_wifi: support station only mode for code size down 2021-10-27 11:48:22 +08:00
Kapil Gupta
54940f58a4 esp_wifi: Add WPA3 192-bit certification support 2021-10-12 20:48:53 +08:00
Kapil Gupta
797c7144bd esp_wifi: Add support for GCMP and GMAC ciphers 2021-10-12 20:48:51 +08:00
Kapil Gupta
834afad47e esp_wifi: Add support for MBO certification 2021-10-04 15:56:14 +08:00
Axel Lin
20d0891e1e wpa_supplicant: Trivial typo fix for setting spp_sup.require
No functional change since both SPP_AMSDU_CAP_ENABLE and SPP_AMSDU_REQ_ENABLE
are defined as 1.

Signed-off-by: Axel Lin <axel.lin@gmail.com>
Signed-off-by: Sagar Bijwe <sagar@espressif.com>

Merges https://github.com/espressif/esp-idf/pull/7366
2021-08-11 13:07:31 +08:00
Axel Lin
cd68b93e3b esp_supplicant: Make esp_rrm_send_neighbor_rep_request return proper error
Current code always return 0 even though wpas_rrm_send_neighbor_rep_request()
fails. Return proper error so the caller can know what's wrong.

Signed-off-by: Axel Lin <axel.lin@gmail.com>
Signed-off-by: Sagar Bijwe <sagar@espressif.com>

Merges https://github.com/espressif/esp-idf/pull/7233
2021-08-11 13:07:31 +08:00
Axel Lin
2a5d5c02b4 wpa_supplicant: Fix clear WLAN_FC_STYPE_ACTION bit in esp_register_action_frame
It should clear WLAN_FC_STYPE_ACTION bit intead of WLAN_FC_STYPE_ACTION.

Signed-off-by: Axel Lin <axel.lin@gmail.com>
Signed-off-by: Sagar Bijwe <sagar@espressif.com>

Merges https://github.com/espressif/esp-idf/pull/7252
2021-08-11 13:07:31 +08:00
Axel Lin
e144a60206 wpa_supplicant: Fix memory leak in esp_issue_scan error paths
Fix memory leak when allocate memory for params->ssid / params->bssid fails.

Fixes: 27101f9454 ("wpa_supplicant: Add initial roaming support")
Signed-off-by: Axel Lin <axel.lin@gmail.com>
Signed-off-by: Sagar Bijwe <sagar@espressif.com>

Merges https://github.com/espressif/esp-idf/pull/7240
2021-08-11 13:07:31 +08:00
Kapil Gupta
e667d1af2e wpa_supplicant: bypass sonar checks for upstream code 2021-07-22 14:12:22 +08:00