{"id":118137,"date":"2024-07-23T15:43:01","date_gmt":"2024-07-23T13:43:01","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-hostapd-i-wpa_supplicant-2-11-realizaczii-steka-besprovodnyh-protokolov"},"modified":"2024-07-23T15:43:01","modified_gmt":"2024-07-23T13:43:01","slug":"vypusk-hostapd-i-wpa_supplicant-2-11-realizaczii-steka-besprovodnyh-protokolov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/vypusk-hostapd-i-wpa_supplicant-2-11-realizaczii-steka-besprovodnyh-protokolov","title":{"rendered":"Hostapd ja wpa_supplicant 2.11 v\u00e4ljaanne, juhtmeta protokollide virna rakendused","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>P\u00e4rast kahe ja poole aasta arendust on avaldatud hostapd\/wpa_supplicant 2.11 v\u00e4ljaanne, IEEE 802.1X, WPA, WPA2, WPA3 ja EAP protokollide komplekt. Komplekti kuulub wpa_supplicant rakendus juhtmeta v\u00f5rku kliendina \u00fchendamiseks ning taustteenus hostapd, mis tagab juurdep\u00e4\u00e4supunkti ja autentimiserveri toimimise, sealhulgas sellised komponendid nagu WPA autentija, RADIUS autentimise klient\/server ja EAP server. Projekti allikaid levitatakse BSD litsentsi alusel.    <\/p>\n<p>Uutes hostapd ja wpa_supplicant vabastustes tehtud peamised muudatused:   <\/p>\n<ul>\n<li class=\"l\"> Lisatud esialgne tugi Wi-Fi 7-le (EHT\/IEEE 802.11be) ning parendatud tugi Wi-Fi 6-le (HE\/IEEE 802.11ax).\n<li class=\"l\"> Lisatud on kolmanda versiooni DPP (Device Provisioning Protocol) protokolli tugi, tuntud ka kui \u201eWi-Fi Easy Connect\u201c, ning v\u00f5imalus edastada Wi-Fi seadistuste parameetreid DPP abil. DPP protokoll v\u00f5imaldab juhtmeta seadmete lihtsustatud seadistamist ilma ekraaniliidese kasutamiseta, kasutades m\u00f5nda teist, juba juhtmeta v\u00f5rku \u00fchendatud seadmeid. DPP p\u00f5hineb avalike v\u00f5tmete autentimise kasutamisel, n\u00e4iteks IoT-seadmest, millel ei ole ekraani, saab seade parameetreid m\u00e4\u00e4rata nutitelefoni abil, l\u00e4htudes QR-koodi pildist, mis on tr\u00fckitud seadme korpusele ja kodeerib avaliku v\u00f5tme.\n<li class=\"l\"> Lisatud tugi API muudatustele, mis on pakutud OpenSSL 3.0 kr\u00fcptograafia raamatukogu harus.\n<li class=\"l\"> EAP-SIM (Extensible Authentication Protocol \u2014 Subscriber Identity Module) ja EAP-AKA (Extensible Authentication Protocol \u2014 Authentication and Key Agreement) autentimise protokollide rakenduses on n\u00fc\u00fcd toetatud mehhanismi, mis tagab mobiiliv\u00f5rgu abonendi identifikaatori konfidetsiaalsuse, v\u00e4listades IMSI avalikustamise \u00fchenduse loomisel juurdep\u00e4\u00e4supunktiga.\n<li class=\"l\"> Lisatud on SAE AKM (Simultaneous Authentication of Equals \u2014 Authentication and Key Management) t\u00f6\u00f6re\u017eiimide tugi muutuva v\u00f5tme suurusega.\n<li class=\"l\"> Lisatud tugi AKM (Authentication and Key Management) variandi p\u00f5hjal SHA384 hash-idele.\n<li class=\"l\"> PASN (Pre Association Security Negotiation) mehhanismi rakenduses, mida kasutatakse kaitstud \u00fchenduse loomise ja juhtimisraamide vahetuse kaitsmiseks varajases \u00fchendusstaadiumis, on lisatud tugi tehnoloogiale \u201esecure ranging\u201c kahe Wi-Fi seadme vahelise distantsi ohutuks m\u00e4\u00e4ramiseks.\n<li class=\"l\"> Lisatud USD (Unsynchronized Service Discovery) mehhanismi tugi, mis lihtsustab teenuste avastamist traadita seadmete poolt.\n<li class=\"l\"> Lisatud on SSID selge kaitse tugi neljaastmelise \u00fchenduse kokkuleppe raames. Kaitse aktiveeritakse valiku \u201essid_protection=1\u201c kaudu ja blokeerib haavatavuse CVE-2023-52424, mis v\u00f5imaldab luua \u00fchenduse v\u00e4hem kaitstud juhtmeta v\u00f5rguga.\n<li class=\"l\"> Muudatused, mis on spetsiifilised hostapd-le:\n<ul>\n<li class=\"l\"> Lisatud taustaga segamisvastase avastamise tugi radarite s\u00fcsteemide jaoks, mis t\u00f6\u00f6tavad samades sagedusvahemikes (avastamise korral toimub \u00fcleminek teistele sagedustele). Samuti on lisatud CAC (Channel Availability Check) mehhanismi tugi, mis kuulab kanali enne selle kasutamist, et kontrollida, kas radarite s\u00fcsteem on kanalit h\u00f5ivatud.\n<li class=\"l\"> SAE (Simultaneous Authentication of Equals) \u00fchenduste loomise meetodi rakenduses on n\u00fc\u00fcd v\u00f5imalik k\u00fcsida parooli RADIUS-serverilt.\n<li class=\"l\"> Lisatud ACL (Access-Control List) ja PSK (Pre-Shared Key) kontrollide tugi RADIUS-protokolli kasutamisel \u00fchenduse loomise ajal (wpa_psk_radius=3).\n<li class=\"l\"> ACS (Automatic Channel Selection) mehhanismi rakenduses on kanalite valimisel arvesse v\u00f5etud l\u00e4bilaskev\u00f5imet ja kanalite t\u00fc\u00fcpe.\n<li class=\"l\"> Laienenud tugi mitme BSSID (Basic Service Set Identifier) kasutamiseks \u00fches juurdep\u00e4\u00e4supunktis, et tagada virtuaalsete traadita v\u00f5rkude toimimine.\n<li class=\"l\"> Lisatud esmane tugi TLS-i kasutamiseks RADIUS-protokolli \u00fcle kantud p\u00e4ringute kr\u00fcpteerimiseks.    <\/ul>\n<li class=\"l\"> Muudatused, mis on spetsiifilised wpa_supplicant'ile:\n<ul>\n<li class=\"l\"> MACsec (IEEE 802.1AE) standardi rakenduses, mis pakub vahendeid andmeedastuskanali kaitsmiseks, on v\u00f5imalik kasutada GCM-AES-256 kr\u00fcpteerimisalgoritmi ja lisatud on r\u00f6\u00f6vellu viimise tugi, viies toimingud v\u00f5rguadapteri k\u00fclge.\n<li class=\"l\"> TLSv1.3 jaoks on parem EAP-TLS tugi.\n<li class=\"l\"> Parandatud kaitset DoS-r\u00fcnnakute eest PMF (Protected Management Frames) kasutamisel.\n<li class=\"l\"> Parandatud r\u00e4ndlust AKM (Authentication and Key Management) vahel SME\/BSS (Service Management Entity\/Basic Service Set) draiveri valimisel.\n<li class=\"l\"> Pakkuda v\u00f5imalust kasutada PASN (Protected Access Secure Negotiation) mehhanismi v\u00e4listes programmides.\n<li class=\"l\"> Lisatud tugi eelnevalt genereeritud MAC-aadresside (mac_addr=3) kasutamiseks juhuslike MAC-ide genereerimise asemel iga v\u00f5rgu jaoks.\n<li class=\"l\"> Teise autentimise etapi (phase2_auth=1) kasutamine EAP-PEAP protokolli jaoks on vaikimisi sisse l\u00fclitatud, mis h\u00f5lmab kliendi autentimist kaitstud tunnelis.\n<li class=\"l\"> MSCS (Multi-Streaming Channel Switching) tehnoloogia tugi on laienenud, v\u00f5imaldades seadmel vahetada mitme kanali vahel.\n<li class=\"l\"> SCS (Spatial Channel Switching) tehnoloogia tugi on laienenud, et eelistada olulise liikluse t\u00f6\u00f6tlemist QoS-i kasutamisel.    <\/ul>\n<\/ul>\n<p>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=61596\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u0441 \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u043e\u0439 \u043b\u0435\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0432\u044b\u043f\u0443\u0441\u043a hostapd\/wpa_supplicant 2.11, \u043d\u0430\u0431\u043e\u0440\u0430 \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 IEEE 802.1X, WPA, WPA2, WPA3 \u0438 EAP. \u0412 \u0441\u043e\u0441\u0442\u0430\u0432 \u043d\u0430\u0431\u043e\u0440\u0430 \u0432\u0445\u043e\u0434\u0438\u0442 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 wpa_supplicant \u0434\u043b\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0432 \u0440\u043e\u043b\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0444\u043e\u043d\u043e\u0432\u044b\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 hostapd \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0442\u043e\u0447\u043a\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0435\u0433\u043e \u0442\u0430\u043a\u0438\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b \u043a\u0430\u043a WPA Authenticator, [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-118137","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u0441 \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u043e\u0439 \u043b\u0435\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0432\u044b\u043f\u0443\u0441\u043a hostapd\/wpa_supplicant 2.11, \u043d\u0430\u0431\u043e\u0440\u0430 \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 IEEE 802.1X, WPA, WPA2, WPA3 \u0438 EAP.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/news\/vypusk-hostapd-i-wpa_supplicant-2-11-realizaczii-steka-besprovodnyh-protokolov\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a hostapd \u0438 wpa_supplicant 2.11, \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u0442\u0435\u043a\u0430 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u0441 \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u043e\u0439 \u043b\u0435\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0432\u044b\u043f\u0443\u0441\u043a hostapd\/wpa_supplicant 2.11, \u043d\u0430\u0431\u043e\u0440\u0430 \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 IEEE 802.1X, WPA, WPA2, WPA3 \u0438 EAP.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/news\/vypusk-hostapd-i-wpa_supplicant-2-11-realizaczii-steka-besprovodnyh-protokolov\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2024-07-23T13:43:01+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2024-07-23T13:43:01+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Hostapd ja wpa_supplicant 2.11 v\u00e4ljaanne, juhtmeta protokollide kihi teostus | ProHoster","description":"P\u00e4rast kahte ja pool aastat arendamist on avaldatud hostapd\/wpa_supplicant 2.11, komplekt juhtmeta protokollide t\u00f6\u00f6 tagamiseks IEEE 802.1X, WPA, WPA2, WPA3 ja EAP.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/vypusk-hostapd-i-wpa_supplicant-2-11-realizaczii-steka-besprovodnyh-protokolov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a hostapd \u0438 wpa_supplicant 2.11, \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u0442\u0435\u043a\u0430 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 | ProHoster","og:description":"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u0441 \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u043e\u0439 \u043b\u0435\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0432\u044b\u043f\u0443\u0441\u043a hostapd\/wpa_supplicant 2.11, \u043d\u0430\u0431\u043e\u0440\u0430 \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 IEEE 802.1X, WPA, WPA2, WPA3 \u0438 EAP.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/vypusk-hostapd-i-wpa_supplicant-2-11-realizaczii-steka-besprovodnyh-protokolov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-07-23T13:43:01+00:00","article:modified_time":"2024-07-23T13:43:01+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"118137","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 04:44:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 04:44:19","updated":"2026-01-23 04:44:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/118137","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=118137"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/118137\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=118137"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=118137"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=118137"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}