FragAttacks: Fragmentation & Aggregation Attacks
Go to file
Jouni Malinen 9e783041fa Add a workaround for EAP-FAST with Cisco AP local RADIUS server
When using the internal TLS implementation, EAP-FAST unauthenticated
provisioning ends up proposing multiple cipher suites. It looks like
Cisco AP (at least 350 and 1200 series) local authentication server does
not know how to search cipher suites from the list and seem to require
that the last entry in the list is the one that it wants to use.
However, TLS specification requires the list to be in the client
preference order. As a workaround, ass anon-DH AES-128-SHA1 again at the
end of the list to allow the Cisco code to find it.

This fixed EAP-FAST provisioning with the following IOS version:
Cisco IOS Software, C350 Software (C350-K9W7-M), Version 12.3(8)JEA3,
RELEASE SOFTWARE (fc2)
Compiled Wed 21-Nov-07 14:08 by ccai
2009-03-08 12:04:39 +02:00
eap_example Fixed eap_example build to match with EAP-PEAP changes 2008-09-24 08:46:05 +03:00
hostapd WMM-AC: Fix hostapd processing of ADDTS Request and add test code 2009-03-06 20:15:00 +02:00
mac80211_hwsim Added a place for example mac80211_hwsim test cases 2008-08-28 18:53:47 +03:00
patches Updated OpenSSL 0.9.8i patch to use new session ticket override API 2008-11-23 21:18:26 +02:00
radius_example Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release 2008-02-27 17:34:43 -08:00
src Add a workaround for EAP-FAST with Cisco AP local RADIUS server 2009-03-08 12:04:39 +02:00
testing Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release 2008-02-27 17:34:43 -08:00
wpa_supplicant Fix EAP-FAST only build to include the needed EAPOL implementation 2009-03-08 11:29:31 +02:00
www Preparations for 0.6.8 release 2009-02-15 20:17:25 +02:00
build_nsis.sh Added Windows NSIS installer for wpa_supplicant 2008-12-20 20:40:23 +02:00
build_release Include SIM simular for EAP-SIM in Windows build 2009-01-09 21:45:31 +02:00
COPYING Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release 2008-02-27 17:34:43 -08:00
FAQ Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release 2008-02-27 17:34:43 -08:00
README Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release 2008-02-27 17:34:43 -08:00

wpa_supplicant and hostapd v0.6.x
---------------------------------

Copyright (c) 2002-2007, Jouni Malinen <j@w1.fi> and contributors
All Rights Reserved.

These program is dual-licensed under both the GPL version 2 and BSD
license. Either license may be used at your option.


This package may include either wpa_supplicant, hostapd, or both. See
README file respective subdirectories (wpa_supplicant/README or
hostapd/README) for more details.

Source code files have been moved around in v0.6.x releases and
compared to earlier releases, the programs are now build by first
going to a subdirectory (wpa_supplicant or hostapd) and creating
build configuration (.config) and running 'make' there (for
Linux/BSD/cygwin builds).