baserev update by copy to link target

• Files Changed
• Browse Source

  switching to the new dbus interface in version 0.6.66.

• Files Changed
• Browse Source

  (bsc#1195312)

• Files Changed
• Browse Source

- Apply Revert-DBus-Add-sae-to-interface-key_mgmt-capabilities.patch
  to fix connect with AVM FB, if WPA3 transition mode is activated,
  e.g. Wifi -> Security: is WPA2 + WPA3, alt. switch to WPA2 (CCMP)

• Files Changed
• Browse Source

• Files Changed
• Browse Source

- drop wpa_supplicant-getrandom.patch : glibc has been updated
  so the getrandom() wrapper is now there

• Files Changed
• Browse Source

- disable SAE (bsc#1195395)

• Files Changed
• Browse Source

• Files Changed
• Browse Source

- config:
  * enable QCA vendor extensions to nl80211
  * enable EAP-EKE
  * Support HT overrides
  * WPA3-Enterprise 
  * TLS v1.1 and TLS v1.2
  * Fast Session Transfer (FST)
  * Automatic Channel Selection
  * Multi Band Operation
  * Fast Initial Link Setup
  * Mesh Networking (IEEE 802.11s)

• Files Changed
• Browse Source

- drop restore-old-dbus-interface.patch, wicked has been
  switching to the new dbus interface in version 0.6.6.

• Files Changed
• Browse Source

- config: 
  * Reenable Fast BSS Transition (likely fixing bsc#1195312)
  * Enable OCV, security feature that prevents MITM
    multi-channel attacks
  * Enable OWE for better hotspot support

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- refresh config from 2.10 defconfig, re-enable CONFIG_WEP

• Files Changed
• Browse Source

- update to 2.10.0:
  * SAE changes
    - improved protection against side channel attacks
      [https://w1.fi/security/2022-1/]
    - added support for the hash-to-element mechanism (sae_pwe=1 or
      sae_pwe=2); this is currently disabled by default, but will likely
      get enabled by default in the future
    - fixed PMKSA caching with OKC
    - added support for SAE-PK
  * EAP-pwd changes
    - improved protection against side channel attacks
    [https://w1.fi/security/2022-1/]
  * fixed P2P provision discovery processing of a specially constructed
    invalid frame
    [https://w1.fi/security/2021-1/]
  * fixed P2P group information processing of a specially constructed
    invalid frame
    [https://w1.fi/security/2020-2/]
  * fixed PMF disconnection protection bypass in AP mode
    [https://w1.fi/security/2019-7/]
  * added support for using OpenSSL 3.0
  * increased the maximum number of EAP message exchanges (mainly to
    support cases with very large certificates)
  * fixed various issues in experimental support for EAP-TEAP peer
  * added support for DPP release 2 (Wi-Fi Device Provisioning Protocol)
  * a number of MKA/MACsec fixes and extensions
  * added support for SAE (WPA3-Personal) AP mode configuration
  * added P2P support for EDMG (IEEE 802.11ay) channels
  * fixed EAP-FAST peer with TLS GCM/CCM ciphers
  * improved throughput estimation and BSS selection

• Files Changed
• Browse Source

• Browse Source