John Crispin
205484080e
Revert "netifd: add gcmp-256 as a cipher suite when SAE is enabled on HE/EHT"
...
This reverts commit b17db16c15 .
Signed-off-by: John Crispin <john@phrozen.org >
2025-07-03 16:46:02 +02:00
cpchangemplu
f1fc99ccbe
ipq50xx: Add back emplus,wap385c
...
Signed-off-by: cpchangemplu <cp.chang@emplustech.com >
2025-07-03 14:26:46 +02:00
jackcybertan
db36e09553
ipq50xx : add sonicfi rap630e
...
Fixes: WIFI-14728
Signed-off-by: jackcybertan <jack.tsai@cybertan.com.tw >
2025-07-03 14:23:37 +02:00
John Crispin
b3174a0434
ubus: bump to latest HEAD
...
Signed-off-by: John Crispin <john@phrozen.org >
2025-07-03 09:21:59 +02:00
John Crispin
5f8c4d31cc
cloud_discovery: use the correct certificte for CDS
...
Fixes: WIFI-14694
Signed-off-by: John Crispin <john@phrozen.org >
2025-07-01 07:18:54 +02:00
John Crispin
aa78f40843
certificates: add support for tar file based certificate storage
...
Fixes: WIFI-14694
Signed-off-by: John Crispin <john@phrozen.org >
2025-07-01 07:18:54 +02:00
John Crispin
721fb4cc4d
est_client: fixup typo
...
Fixes: WIFI-14694
Signed-off-by: John Crispin <john@phrozen.org >
2025-07-01 07:18:54 +02:00
John Crispin
f75a36f89f
est_client: prevent downgrades to FW not supporting EST
...
Fixes: WIFI-14694
Signed-off-by: John Crispin <john@phrozen.org >
2025-07-01 07:18:54 +02:00
John Crispin
a375b9f774
est_client: add reenroll support
...
Fixes: WIFI-14694
Signed-off-by: John Crispin <john@phrozen.org >
2025-07-01 07:18:54 +02:00
John Crispin
16d029f10f
cloud_discovery: split EST code out into its own tool
...
Fixes: WIFI-14694
Signed-off-by: John Crispin <john@phrozen.org >
2025-07-01 07:18:54 +02:00
John Crispin
bb45e09e8b
cloud_discovery: place intermediate files into the /tmp folder
...
Fixes: WIFI-14694
Signed-off-by: John Crispin <john@phrozen.org >
2025-07-01 07:18:54 +02:00
John Crispin
2798088cec
cloud_discovery: rtrim() the extracted subject
...
this removes trailing \n\n characters
Fixes: WIFI-14694
Signed-off-by: John Crispin <john@phrozen.org >
2025-07-01 07:18:54 +02:00
John Crispin
470703a490
luci-mod-ucentral: update certupdate for insta birth certificates
...
Fixes: WIFI-14694
Signed-off-by: John Crispin <john@phrozen.org >
2025-07-01 07:18:54 +02:00
John Crispin
c56d60b2d3
certificates: do not check for cas.pem when mounting certs
...
Fixes: WIFI-14694
Signed-off-by: John Crispin <john@phrozen.org >
2025-07-01 07:18:54 +02:00
John Crispin
1178c3b6f1
certificates: set new certs inside UCI
...
Fixes: WIFI-14694
Signed-off-by: John Crispin <john@phrozen.org >
2025-07-01 07:18:54 +02:00
John Crispin
0db44ca55b
cloud_discovery: add insta EST support
...
Fixes: WIFI-14694
Signed-off-by: John Crispin <john@phrozen.org >
2025-07-01 07:18:54 +02:00
John Crispin
ae5015424b
cloud_discovery: add initial ubus status call
...
Fixes: WIFI-14694
Signed-off-by: John Crispin <john@phrozen.org >
2025-07-01 07:18:54 +02:00
John Crispin
32c7a7ff1d
cloud_discovery: add support for hostname_validation
...
Fixes: WIFI-14694
Signed-off-by: John Crispin <john@phrozen.org >
2025-07-01 07:18:54 +02:00
John Crispin
39e601cbd4
luci-mod-ucentral: remove digicert specific files
...
Fixes: WIFI-14694
Signed-off-by: John Crispin <john@phrozen.org >
2025-07-01 07:18:54 +02:00
John Crispin
ce9c896371
cloud_discovery: depend on the certificates package
...
Fixes: WIFI-14694
Signed-off-by: John Crispin <john@phrozen.org >
2025-07-01 07:18:54 +02:00
John Crispin
0008cb20dd
cloud_discovery: add option 138 support
...
Fixes: WIFI-14694
Signed-off-by: John Crispin <john@phrozen.org >
2025-07-01 07:18:54 +02:00
John Crispin
701242ed25
netifd: drop dhcp option 138 patch
...
Fixes: WIFI-14694
Signed-off-by: John Crispin <john@phrozen.org >
2025-07-01 07:18:54 +02:00
John Crispin
67dd4bfca7
cloud_discovery: remove pki2 env lookup
...
Fixes: WIFI-14694
Signed-off-by: John Crispin <john@phrozen.org >
2025-07-01 07:18:54 +02:00
John Crispin
88fb4cafbc
firstcontact: remove now unused digicert client
...
Fixes: WIFI-14694
Signed-off-by: John Crispin <john@phrozen.org >
2025-07-01 07:18:54 +02:00
Justin.Guo
feb410ddc3
cig-poe-judgment: add package
...
Support reading WAN PoE type from /proc/poe_info for WF189/WF189W/WF189H/WF672A
Fixes: WIFI-14697
Signed-off-by: Justin.Guo <guoxijun@actiontec.com >
2025-06-27 12:39:58 +02:00
jackcybertan
43a8dd1303
poe: add userland helpers scripts/tools
...
Support user to control PSE on/off (chip: tps23861) via ucentral config file.
Use uci-default to write poe's uci default file.
Fixes: WIFI-14724
Signed-off-by: jackcybertan <jack.tsai@cybertan.com.tw >
2025-06-27 12:38:19 +02:00
Ian Chen
188f6b33e0
netifd-morse: fix HaLow client cannot access network
...
add wds_bridge in hostapd for HaLow radio
Fixes: WIFI-14615
Signed-off-by: Ian Chen <ian77_chen@accton.com >
2025-06-27 12:37:20 +02:00
John Crispin
27e4eb3685
ucentral-client: update to latest HEAD
...
08a842d Cloud Package Manager
Fixes: WIFI-14588
Signed-off-by: John Crispin <john@phrozen.org >
2025-06-27 09:41:44 +02:00
John Crispin
cd8294eca0
ucentral-schema: update to latest HEAD
...
125a148 add PoE support for client ports
17b6c18 Cloud Package Manager
a86b8b0 Fix typo in enhanced MPSK property name
57852ed update schema.json to 4.1.0
e155483 command: update upgrade and factory commands to handle new operational certs
Signed-off-by: John Crispin <john@phrozen.org >
2025-06-27 07:39:52 +02:00
Kumiko18
e12ecf831e
cpm: Cloud Package Manager
...
Added cpm init.d file to list installed package on remote APs
Fixes: WIFI-14588
Signed-off-by: Kumiko18 <alex18_huang@accton.com >
2025-06-27 07:38:23 +02:00
Marek Kwaczynski
1213182012
mpskd: fix incorrect MPSK value assignment
...
If MPSK is enabled on any interface, `ssid.mpsk` should be true.
Prevents overwriting true with a false value when multiple interfaces
share the same SSID.
Also allow handling of the 'reload' event even when MPSK is not enabled,
to ensure config reloads are not skipped, e.g. when configuration is empty.
Fixes: WIFI-14484
Signed-off-by: Marek Kwaczynski <marek@shasta.cloud >
2025-06-27 07:37:20 +02:00
Sundareswar P
d5df71619a
qca-wifi7: hostapd: Fix for roaming failure during PSK2-RADIUS configuration
...
After roaming to EAP105, the roaming frames were exchanged successfully,
but the STA sent a deauthentication frame to the AP with an "INVALID IE" error.
The RSNXE subfield in the FTIE was set in the Reassociation Response frame.
The STA validated the Reassociation frame and was unable to process the
RSNXE subfield.
Modified SAE options (sae_pwe=4 and sae_require_pmf=0).
Fixes: WIFI-14544
Signed-off-by: Marek Kwaczynski <marek@shasta.cloud >
2025-06-27 07:37:20 +02:00
John Crispin
a177884893
.github/workflows/build-dev.yml: add cig_wf660a
...
Fixes: WIFI-14630
Signed-off-by: John Crispin <john@phrozen.org >
2025-06-26 11:38:08 +02:00
Jesse Wu
1f7d8a7bb7
ipq50xx: add EMPLUS WAP385C support
...
Signed-off-by: Jesse Wu <Jesse.Wu@emplustech.com >
2025-06-18 07:01:49 +02:00
jackcybertan
dc02d2722a
ipq807x_v5.4: update BDF for SonicFi RAP650C
...
Fixes: WIFI-14574
Signed-off-by: jackcybertan <jack.tsai@cybertan.com.tw >
2025-06-18 06:58:41 +02:00
jackcybertan
13ac9166ef
ipq807x_v5.4: change SonicFi RAP650C Wi-Fi MAC address sequence
...
Signed-off-by: jackcybertan <jack.tsai@cybertan.com.tw >
2025-06-18 06:58:41 +02:00
John Crispin
3d6f360cb6
ucentral-client: set version.json to 4.1.0
...
Signed-off-by: John Crispin <john@phrozen.org >
2025-06-13 08:19:37 +02:00
John Crispin
6659e77bd0
qca-wifi-7/ipq53xx: consolidate phy_quirk handling
...
Fixes: WIFI-14680
Signed-off-by: John Crispin <john@phrozen.org >
2025-06-13 08:19:37 +02:00
wingate5678
b061cc55ce
ipq807x_v5.4: cooling daemon with configuration file support
...
Fixes: WIFI-14682
Signed-off-by: wingate5678 <wingate.chi@cybertan.com.tw >
2025-06-13 08:19:37 +02:00
John Crispin
b17db16c15
netifd: add gcmp-256 as a cipher suite when SAE is enabled on HE/EHT
...
Fixes: WIFI-14594
Signed-off-by: John Crispin <john@phrozen.org >
2025-06-11 14:26:29 +02:00
John Crispin
d36866301f
feeds/hostapd: fix/improve rssi_threshold handling
...
* add an ucentral-event
* turn thresholds into bss options
Fixes: WIFI-14679
Signed-off-by: John Crispin <john@phrozen.org >
2025-06-11 09:18:09 +02:00
John Crispin
ffccb65d1b
qca-wifi-7/hostapd: fix/improve rssi_threshold handling
...
* add an ucentral-event
* turn thresholds into bss options
Fixes: WIFI-14679
Signed-off-by: John Crispin <john@phrozen.org >
2025-06-11 09:18:07 +02:00
John Crispin
af165342ed
ipq807x_v5.4/hostapd: fix/improve rssi_threshold handling
...
* add an ucentral-event
* turn thresholds into bss options
Fixes: WIFI-14679
Signed-off-by: John Crispin <john@phrozen.org >
2025-06-11 09:18:04 +02:00
John Crispin
ed62236d31
ucentral-schema: update to latest HEAD
...
ac3a1c7 convert rssi threshold to interface options
Fixes: WIFI-14679
Signed-off-by: John Crispin <john@phrozen.org >
2025-06-11 09:17:55 +02:00
wingate5678
346bdd9c16
qca-wifi-7: sonicfi rap7110c-341x change BDF
...
Fixes: WIFI-14661
Signed-off-by: wingate5678 <wingate.chi@cybertan.com.tw >
2025-06-10 10:53:33 +02:00
Jesse Wu
dc41a0fd0c
ipq60xx: Support EMPLUS WAP386V2 model
...
Device specifications:
======================
SoC: Qualcomm IPQ6018
RAM: 1 x 1G DDR4 RAM
Flash: NAND 128MB
Radio: 2T2R@2.4GHz , 2T2R@5GHz
Ethernet: 1 x 1GbE PHY
Reset Button: 1
Power Source: AC, Standard PoE 802.3af/at
LED Indicator: 4 x Single-color LED indicator (GPIO Control)
Signed-off-by: Jesse Wu <Jesse.Wu@emplustech.com >
2025-06-10 10:46:38 +02:00
cpchangemplu
2b26a4e68a
mediatek: Add thermal protection for EMPLUS WAP588M model
...
Signed-off-by: cpchangemplu <cp.chang@emplustech.com >
2025-06-10 10:43:53 +02:00
cpchangemplu
fa96b2b24d
mediatek: Fix image upgrade fail for EMPLUS WAP588M
...
Signed-off-by: cpchangemplu <cp.chang@emplustech.com >
2025-06-10 08:55:54 +02:00
John Crispin
36f00adc7a
ucentral-schema: update to latest HEAD
...
827ccc2 setting probe_request_rssi incorrectly turned the SSID into a hidden one
Fixes: WIFI-14678
Signed-off-by: John Crispin <john@phrozen.org >
2025-06-10 08:52:16 +02:00
Tanya Singh
5314a752bd
mediatek: Enable dualboot for EAP111 and EAP112 by default
...
Fixes: WIFI-14579
Signed-off-by: Tanya Singh <tanya_singh@accton.com >
2025-06-10 07:39:11 +02:00