{"id":118137,"date":"2024-07-23T15:43:01","date_gmt":"2024-07-23T13:43:01","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-hostapd-i-wpa_supplicant-2-11-realizaczii-steka-besprovodnyh-protokolov"},"modified":"2024-07-23T15:43:01","modified_gmt":"2024-07-23T13:43:01","slug":"vypusk-hostapd-i-wpa_supplicant-2-11-realizaczii-steka-besprovodnyh-protokolov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/vypusk-hostapd-i-wpa_supplicant-2-11-realizaczii-steka-besprovodnyh-protokolov","title":{"rendered":"Udgivelsen af hostapd og wpa_supplicant 2.11, implementeringen af protokolstakken til tr\u00e5dl\u00f8se netv\u00e6rk","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Efter to og et halvt \u00e5rs udvikling er version 2.11 af hostapd\/wpa_supplicant offentliggjort. Dette s\u00e6t sikrer driften af de tr\u00e5dl\u00f8se protokoller IEEE 802.1X, WPA, WPA2, WPA3 og EAP. S\u00e6ttet inkluderer applikationen wpa_supplicant for at forbinde til et tr\u00e5dl\u00f8st netv\u00e6rk som klient, samt baggrundsprocessen hostapd til at sikre drift af adgangspunktet og autentificeringsserveren, herunder komponenter som WPA Authenticator, klient\/server RADIUS-autentificering og EAP-server. Kildeteksterne for projektet distribueres under BSD-licensen.    <\/p>\n<p>V\u00e6sentlige \u00e6ndringer i de nye versioner af hostapd og wpa_supplicant:   <\/p>\n<ul>\n<li class=\"l\"> Indf\u00f8rt indledende support for Wi-Fi 7 (EHT\/IEEE 802.11be) og forbedret support for Wi-Fi 6 (HE\/IEEE 802.11ax).\n<li class=\"l\"> Der er tilf\u00f8jet support til den tredje version af DPP (Device Provisioning Protocol), kendt som 'Wi-Fi Easy Connect', samt muligheden for at overf\u00f8re Wi-Fi-indstillinger via DPP. DPP muligg\u00f8r en forenklet ops\u00e6tning af tr\u00e5dl\u00f8se enheder uden sk\u00e6rminterface ved at bruge en anden mere avanceret enhed, der allerede er tilsluttet det tr\u00e5dl\u00f8se netv\u00e6rk. DPP er baseret p\u00e5 brug af offentlig n\u00f8gleautentificering, for eksempel kan parametre til en IoT-enhed uden sk\u00e6rm defineres fra en smartphone baseret p\u00e5 et QR-kodebillede trykt p\u00e5 enheden, som koder den offentlige n\u00f8gle.\n<li class=\"l\"> Tilf\u00f8jet support for \u00e6ndringer af API'en, foresl\u00e5et i kryptografibiblioteket OpenSSL 3.0.\n<li class=\"l\"> I implementeringen af authentication protokoller EAP-SIM (Extensible Authentication Protocol \u2014 Subscriber Identity Module) og EAP-AKA (Extensible Authentication Protocol \u2014 Authentication and Key Agreement), er der nu support for en mekanisme til beskyttelse af mobilnetv\u00e6rksidentifikatorens fortrolighed, som forhindrer afsl\u00f8ring af IMSI ved tilslutning til et adgangspunkt.\n<li class=\"l\"> Der er tilf\u00f8jet support til SAE AKM (Simultaneous Authentication of Equals \u2014 Authentication and Key Management) driftsm\u00e5der med variable n\u00f8glel\u00e6ngder.\n<li class=\"l\"> Tilf\u00f8jet support for en variant af AKM (Authentication and Key Management) baseret p\u00e5 SHA384-hashes.\n<li class=\"l\"> I implementeringen af PASN (Pre Association Security Negotiation) mekanismen, der bruges til at etablere en sikker forbindelse og beskytte udvekslingen af kontrolrammer i den tidlige tilslutningsfase, er der tilf\u00f8jet support til 'secure ranging' teknologi til sikker bestemmelse af afstanden mellem to Wi-Fi-enheder.\n<li class=\"l\"> Tilf\u00f8jet st\u00f8tte til USD (Unsynchronized Service Discovery)-mekanismen, som forenkler opdagelsen af tjenester af tr\u00e5dl\u00f8se enheder.\n<li class=\"l\"> Der er tilf\u00f8jet support til eksplicit beskyttelse af SSID ved fire-trins tilslutningsforhandling. Beskyttelsen aktiveres ved brug af indstillingen 'ssid_protection=1' og blokerer for s\u00e5rbarheden CVE-2023-52424, som muligg\u00f8r tilslutning til et mindre beskyttet tr\u00e5dl\u00f8st netv\u00e6rk.\n<li class=\"l\"> \u00c6ndringer specifikke for hostapd:\n<ul>\n<li class=\"l\"> Tilf\u00f8jet st\u00f8tte til baggrundsregistrering af interferens fra radarssystemer, der opererer i de samme frekvensb\u00e5nd (ved registrering skifter den til andre frekvenser). Derudover tilf\u00f8jet st\u00f8tte til CAC (Channel Availability Check)-mekanismen, der er beregnet til at lytte til kanalen f\u00f8r brug for at kontrollere dens tilg\u00e6ngelighed af radar-systemet.\n<li class=\"l\"> I implementeringen af SAE (Simultaneous Authentication of Equals)-forbindelsesforhandling er muligheden for at anmode om adgangskode fra RADIUS-serveren blevet tilf\u00f8jet.\n<li class=\"l\"> Tilf\u00f8jet st\u00f8tte til ACL (Access-Control List)- og PSK (Pre-Shared Key)-kontroller ved brug af RADIUS-protokollen under forbindelseforhandlingen (wpa_psk_radius=3).\n<li class=\"l\"> I implementeringen af ACS (Automatic Channel Selection)-mekanismen er der taget h\u00f8jde for b\u00e5ndbredde og typer af kanaler ved valg af den anvendte kanal.\n<li class=\"l\"> Udvidet st\u00f8tte til brug af flere BSSID (Basic Service Set Identifier)-identifikatorer p\u00e5 \u00e9n adgangspunkt for at muligg\u00f8re drift af virtuelle tr\u00e5dl\u00f8se netv\u00e6rk.\n<li class=\"l\"> Tilf\u00f8jet grundl\u00e6ggende st\u00f8tte til brug af TLS til kryptering af foresp\u00f8rgsler via RADIUS-protokollen.    <\/ul>\n<li class=\"l\"> \u00c6ndringer specifikke for wpa_supplicant:\n<ul>\n<li class=\"l\"> I implementeringen af MACsec (IEEE 802.1AE)-standarden, der giver midler til at beskytte datakanalen, er muligheden for at bruge GCM-AES-256-krypteringss\u00e6t blevet tilf\u00f8jet samt st\u00f8tte til hardwareacceleration ved at flytte operationerne til netv\u00e6rksadapteren.\n<li class=\"l\"> For TLSv1.3 er underst\u00f8ttelsen af EAP-TLS forbedret.\n<li class=\"l\"> Styrket beskyttelse mod DoS-angreb ved brug af PMF (Protected Management Frames).\n<li class=\"l\"> Forbedret roaming mellem AKM (Authentication and Key Management) ved valg af SME\/BSS (Service Management Entity\/Basic Service Set)-driver.\n<li class=\"l\"> Givet mulighed for at bruge PASN (Protected Access Secure Negotiation)-mekanismen med eksterne programmer.\n<li class=\"l\"> Tilf\u00f8jet st\u00f8tte til brug af forudgenererede MAC-adresser (mac_addr=3) i stedet for at generere en tilf\u00e6ldig MAC til hvert net.\n<li class=\"l\"> Som standard er anden fase af autentifikation (phase2_auth=1) aktiveret for protokollen EAP-PEAP, hvilket indeb\u00e6rer autentifikation af klienten inden for en sikker tunnel.\n<li class=\"l\"> Udvidet support for MSCS-teknologi (Multi-Streaming Channel Switching), som muligg\u00f8r enhedens skift mellem flere kanaler.\n<li class=\"l\"> Udvidet support for SCS-teknologi (Spatial Channel Switching) til prioriteret behandling af vigtig trafik ved brug af QoS.    <\/ul>\n<\/ul>\n<p>Kilde: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=61596\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u0441 \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u043e\u0439 \u043b\u0435\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0432\u044b\u043f\u0443\u0441\u043a hostapd\/wpa_supplicant 2.11, \u043d\u0430\u0431\u043e\u0440\u0430 \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 IEEE 802.1X, WPA, WPA2, WPA3 \u0438 EAP. \u0412 \u0441\u043e\u0441\u0442\u0430\u0432 \u043d\u0430\u0431\u043e\u0440\u0430 \u0432\u0445\u043e\u0434\u0438\u0442 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 wpa_supplicant \u0434\u043b\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0432 \u0440\u043e\u043b\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0444\u043e\u043d\u043e\u0432\u044b\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 hostapd \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0442\u043e\u0447\u043a\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0435\u0433\u043e \u0442\u0430\u043a\u0438\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b \u043a\u0430\u043a WPA Authenticator, [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-118137","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u0441 \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u043e\u0439 \u043b\u0435\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0432\u044b\u043f\u0443\u0441\u043a hostapd\/wpa_supplicant 2.11, \u043d\u0430\u0431\u043e\u0440\u0430 \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 IEEE 802.1X, WPA, WPA2, WPA3 \u0438 EAP.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/da\/blog\/news\/vypusk-hostapd-i-wpa_supplicant-2-11-realizaczii-steka-besprovodnyh-protokolov\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"da_DK\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a hostapd \u0438 wpa_supplicant 2.11, \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u0442\u0435\u043a\u0430 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u0441 \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u043e\u0439 \u043b\u0435\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0432\u044b\u043f\u0443\u0441\u043a hostapd\/wpa_supplicant 2.11, \u043d\u0430\u0431\u043e\u0440\u0430 \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 IEEE 802.1X, WPA, WPA2, WPA3 \u0438 EAP.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/da\/blog\/news\/vypusk-hostapd-i-wpa_supplicant-2-11-realizaczii-steka-besprovodnyh-protokolov\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2024-07-23T13:43:01+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2024-07-23T13:43:01+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Udgivelse af hostapd og wpa_supplicant 2.11, implementering af et tr\u00e5dl\u00f8st protokolsystem | ProHoster","description":"Efter to et halvt \u00e5rs udvikling er version 2.11 af hostapd\/wpa_supplicant udgivet, et s\u00e6t til at underst\u00f8tte tr\u00e5dl\u00f8se protokoller som IEEE 802.1X, WPA, WPA2, WPA3 og EAP.","canonical_url":"https:\/\/prohoster.info\/da\/blog\/news\/vypusk-hostapd-i-wpa_supplicant-2-11-realizaczii-steka-besprovodnyh-protokolov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a hostapd \u0438 wpa_supplicant 2.11, \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u0442\u0435\u043a\u0430 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 | ProHoster","og:description":"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u0441 \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u043e\u0439 \u043b\u0435\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0432\u044b\u043f\u0443\u0441\u043a hostapd\/wpa_supplicant 2.11, \u043d\u0430\u0431\u043e\u0440\u0430 \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 IEEE 802.1X, WPA, WPA2, WPA3 \u0438 EAP.","og:url":"https:\/\/prohoster.info\/da\/blog\/news\/vypusk-hostapd-i-wpa_supplicant-2-11-realizaczii-steka-besprovodnyh-protokolov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-07-23T13:43:01+00:00","article:modified_time":"2024-07-23T13:43:01+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"118137","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 04:44:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 04:44:19","updated":"2026-01-23 04:44:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/118137","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=118137"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/118137\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=118137"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=118137"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=118137"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}