[OpenWrt-Devel] [PATCH] wireguard: bump to 0.0.20181006
* Account for big-endian 2^26 conversion in Poly1305. * Account for big-endian NEON in Curve25519. * Fix macros in big-endian AArch64 code so that this will actually run there at all. * Prefer if (IS_ENABLED(...)) over ifdef mazes when possible. * Call simd_relax() within any preempt-disabling glue code every once in a while so as not to increase latency if folks pass in super long buffers. * Prefer compiler-defined architecture macros in assembly code, which puts us in closer alignment with upstream CRYPTOGAMS code, and is cleaner. * Non-static symbols are prefixed with wg_ to avoid polluting the global namespace. * Return a bool from simd_relax() indicating whether or not we were rescheduled. * Reflect the proper simd conditions on arm. * Do not reorder lines in Kbuild files for the simd asm-generic addition, since we don't want to cause merge conflicts. * WARN() if the selftests fail in Zinc, since if this is an initcall, it won't block module loading, so we want to be loud. * Document some interdependencies beside include statements. * Add missing static statement to fpu init functions. * Use union in chacha to access state words as a flat matrix, instead of casting a struct to a u8 and hoping all goes well. Then, by passing around that array as a struct for as long as possible, we can update counter[0] instead of state[12] in the generic blocks, which makes it clearer what's happening. * Remove __aligned(32) for chacha20_ctx since we no longer use vmovdqa on x86, and the other implementations do not require that kind of alignment either. * Submit patch to ARM tree for adjusting RiscPC's cflags to be -march=armv3 so that we can build code that uses umull. * Allow CONFIG_ARM[64] to imply [!]CONFIG_64BIT, and use zinc arch config variables consistently throughout. * Document rationale for the 2^26->2^64/32 conversion in code comments. * Convert all of remaining BUG_ON to WARN_ON. * Replace `bxeq lr` with `reteq lr` in ARM assembler to be compatible with old ISAs via the macro in . * Do not allow WireGuard to be a built-in if IPv6 is a module. * Writeback the base register and reorder multiplications in the NEON x25519 implementation. * Try all combinations of different implementations in selftests, so that potential bugs are more immediately unearthed. * Self tests and SIMD glue code work with #include, which lets the compiler optimize these. Previously these files were .h, because they were included, but a simple grep of the kernel tree shows 259 other files that carry out this same pattern. Only they prefer to instead name the files with a .c instead of a .h, so we now follow the convention. * Support many more platforms in QEMU, especially big endian ones. * Kernels < 3.17 don't have read_cpuid_part, so fix building there. Signed-off-by: Jason A. Donenfeld --- package/network/services/wireguard/Makefile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/package/network/services/wireguard/Makefile b/package/network/services/wireguard/Makefile index 29c7447..3544e34 100644 --- a/package/network/services/wireguard/Makefile +++ b/package/network/services/wireguard/Makefile @@ -11,12 +11,12 @@ include $(INCLUDE_DIR)/kernel.mk PKG_NAME:=wireguard -PKG_VERSION:=0.0.20180925 +PKG_VERSION:=0.0.20181006 PKG_RELEASE:=1 PKG_SOURCE:=WireGuard-$(PKG_VERSION).tar.xz PKG_SOURCE_URL:=https://git.zx2c4.com/WireGuard/snapshot/ -PKG_HASH:=4a0488a07e40ec17e798f3e40a85cedf55f0560b1c3a8fd95806c7d4266cb0e8 +PKG_HASH:=9fe7cd5767eda65647463ec29ed707f917f4a77babaaf247adc4be7acaab4665 PKG_LICENSE:=GPL-2.0 Apache-2.0 PKG_LICENSE_FILES:=COPYING -- 2.19.0 ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/mailman/listinfo/openwrt-devel
[OpenWrt-Devel] [PATCH 3/3] mpc85xx: remove kernel 4.9 support
Signed-off-by: Magnus Kroken --- target/linux/mpc85xx/config-4.9| 361 - ...erpc-85xx-add-gpio-keys-to-of-match-table.patch | 10 - .../100-powerpc-85xx-tl-wdr4900-v1-support.patch | 78 - .../101-powerpc-85xx-hiveap-330-support.patch | 30 -- .../102-powerpc-add-cmdline-override.patch | 37 --- 5 files changed, 516 deletions(-) delete mode 100644 target/linux/mpc85xx/config-4.9 delete mode 100644 target/linux/mpc85xx/patches-4.9/001-powerpc-85xx-add-gpio-keys-to-of-match-table.patch delete mode 100644 target/linux/mpc85xx/patches-4.9/100-powerpc-85xx-tl-wdr4900-v1-support.patch delete mode 100644 target/linux/mpc85xx/patches-4.9/101-powerpc-85xx-hiveap-330-support.patch delete mode 100644 target/linux/mpc85xx/patches-4.9/102-powerpc-add-cmdline-override.patch diff --git a/target/linux/mpc85xx/config-4.9 b/target/linux/mpc85xx/config-4.9 deleted file mode 100644 index 68568c4a62..00 --- a/target/linux/mpc85xx/config-4.9 +++ /dev/null @@ -1,361 +0,0 @@ -# CONFIG_40x is not set -# CONFIG_44x is not set -# CONFIG_ADVANCED_OPTIONS is not set -CONFIG_AR8216_PHY=y -CONFIG_AR8216_PHY_LEDS=y -CONFIG_ARCH_ENABLE_MEMORY_HOTPLUG=y -CONFIG_ARCH_ENABLE_MEMORY_HOTREMOVE=y -CONFIG_ARCH_HAS_DMA_SET_COHERENT_MASK=y -CONFIG_ARCH_HAS_ELF_RANDOMIZE=y -CONFIG_ARCH_HAS_GCOV_PROFILE_ALL=y -CONFIG_ARCH_HAS_ILOG2_U32=y -CONFIG_ARCH_HAS_SG_CHAIN=y -CONFIG_ARCH_HAS_WALK_MEMORY=y -CONFIG_ARCH_HAVE_NMI_SAFE_CMPXCHG=y -CONFIG_ARCH_HIBERNATION_POSSIBLE=y -CONFIG_ARCH_MAY_HAVE_PC_FDC=y -CONFIG_ARCH_MIGHT_HAVE_PC_PARPORT=y -CONFIG_ARCH_MIGHT_HAVE_PC_SERIO=y -# CONFIG_ARCH_RANDOM is not set -CONFIG_ARCH_SUPPORTS_ATOMIC_RMW=y -CONFIG_ARCH_SUPPORTS_DEBUG_PAGEALLOC=y -CONFIG_ARCH_SUPPORTS_DEFERRED_STRUCT_PAGE_INIT=y -CONFIG_ARCH_SUPPORTS_UPROBES=y -CONFIG_ARCH_SUSPEND_POSSIBLE=y -CONFIG_ARCH_USE_BUILTIN_BSWAP=y -CONFIG_ARCH_WANT_IPC_PARSE_VERSION=y -CONFIG_ASN1=y -CONFIG_AUDIT_ARCH=y -CONFIG_BLK_MQ_PCI=y -CONFIG_BOOKE=y -CONFIG_BOOKE_WDT=y -CONFIG_BOUNCE=y -# CONFIG_BSC9131_RDB is not set -# CONFIG_BSC9132_QDS is not set -# CONFIG_C293_PCIE is not set -CONFIG_CLONE_BACKWARDS=y -CONFIG_CLZ_TAB=y -CONFIG_CMDLINE="console=ttyS0,115200" -CONFIG_CMDLINE_BOOL=y -# CONFIG_CMDLINE_OVERRIDE is not set -# CONFIG_CORENET_GENERIC is not set -# CONFIG_CPM2 is not set -CONFIG_CPU_BIG_ENDIAN=y -CONFIG_CRYPTO_AEAD=y -CONFIG_CRYPTO_AEAD2=y -# CONFIG_CRYPTO_AES_PPC_SPE is not set -CONFIG_CRYPTO_AKCIPHER=y -CONFIG_CRYPTO_AKCIPHER2=y -CONFIG_CRYPTO_AUTHENC=y -CONFIG_CRYPTO_DEV_FSL_CAAM=y -CONFIG_CRYPTO_DEV_FSL_CAAM_AHASH_API=y -CONFIG_CRYPTO_DEV_FSL_CAAM_CRYPTO_API=y -# CONFIG_CRYPTO_DEV_FSL_CAAM_DEBUG is not set -# CONFIG_CRYPTO_DEV_FSL_CAAM_IMX is not set -# CONFIG_CRYPTO_DEV_FSL_CAAM_INTC is not set -CONFIG_CRYPTO_DEV_FSL_CAAM_JR=y -CONFIG_CRYPTO_DEV_FSL_CAAM_PKC_API=y -CONFIG_CRYPTO_DEV_FSL_CAAM_RINGSIZE=9 -CONFIG_CRYPTO_DEV_FSL_CAAM_RNG_API=y -CONFIG_CRYPTO_HASH=y -CONFIG_CRYPTO_HASH2=y -CONFIG_CRYPTO_HW=y -CONFIG_CRYPTO_MANAGER=y -CONFIG_CRYPTO_MANAGER2=y -# CONFIG_CRYPTO_MD5_PPC is not set -CONFIG_CRYPTO_NULL=y -CONFIG_CRYPTO_NULL2=y -CONFIG_CRYPTO_RNG=y -CONFIG_CRYPTO_RNG2=y -CONFIG_CRYPTO_RSA=y -# CONFIG_CRYPTO_SHA1_PPC is not set -# CONFIG_CRYPTO_SHA1_PPC_SPE is not set -# CONFIG_CRYPTO_SHA256_PPC_SPE is not set -CONFIG_CRYPTO_WORKQUEUE=y -CONFIG_DEBUG_BUGVERBOSE=y -# CONFIG_DEFAULT_UIMAGE is not set -CONFIG_DNOTIFY=y -CONFIG_DTC=y -# CONFIG_E200 is not set -CONFIG_E500=y -CONFIG_EARLY_PRINTK=y -CONFIG_EDAC_ATOMIC_SCRUB=y -CONFIG_EDAC_SUPPORT=y -CONFIG_ENABLE_MUST_CHECK=y -# CONFIG_EPAPR_BOOT is not set -CONFIG_ETHERNET_PACKET_MANGLE=y -# CONFIG_FHCI_DEBUG is not set -CONFIG_FIXED_PHY=y -CONFIG_FSL_BOOKE=y -# CONFIG_FSL_DPAA is not set -CONFIG_FSL_EMB_PERFMON=y -# CONFIG_FSL_FMAN is not set -CONFIG_FSL_GTM=y -CONFIG_FSL_LBC=y -CONFIG_FSL_PCI=y -CONFIG_FSL_PQ_MDIO=y -CONFIG_FSL_SOC=y -CONFIG_FSL_SOC_BOOKE=y -# CONFIG_FSL_ULI1575 is not set -CONFIG_GENERIC_ALLOCATOR=y -CONFIG_GENERIC_ATOMIC64=y -CONFIG_GENERIC_BUG=y -CONFIG_GENERIC_CLOCKEVENTS=y -CONFIG_GENERIC_CMOS_UPDATE=y -CONFIG_GENERIC_CPU_AUTOPROBE=y -# CONFIG_GENERIC_CSUM is not set -CONFIG_GENERIC_IO=y -CONFIG_GENERIC_IRQ_SHOW=y -CONFIG_GENERIC_IRQ_SHOW_LEVEL=y -CONFIG_GENERIC_ISA_DMA=y -CONFIG_GENERIC_NVRAM=y -CONFIG_GENERIC_PCI_IOMAP=y -CONFIG_GENERIC_SMP_IDLE_THREAD=y -CONFIG_GENERIC_STRNCPY_FROM_USER=y -CONFIG_GENERIC_STRNLEN_USER=y -# CONFIG_GENERIC_TBSYNC is not set -CONFIG_GENERIC_TIME_VSYSCALL_OLD=y -CONFIG_GEN_RTC=y -# CONFIG_GE_FPGA is not set -# CONFIG_GE_IMP3A is not set -CONFIG_GIANFAR=y -CONFIG_GPIOLIB=y -CONFIG_GPIO_GENERIC=y -CONFIG_GPIO_MPC8XXX=y -CONFIG_GPIO_SYSFS=y -CONFIG_HAS_DMA=y -CONFIG_HAS_IOMEM=y -CONFIG_HAS_IOPORT_MAP=y -# CONFIG_HAS_RAPIDIO is not set -# CONFIG_HAVE_64BIT_ALIGNED_ACCESS is not set -CONFIG_HAVE_ARCH_AUDITSYSCALL=y -# CONFIG_HAVE_ARCH_BITREVERSE is not set -CONFIG_HAVE_ARCH_JUMP_LABEL=y -CONFIG_HAVE_ARCH_KGDB=y -CONFIG_HAVE_ARCH_SECCOMP_FILTER=y
[OpenWrt-Devel] [PATCH 1/3] mpc85xx: add kernel 4.14 support
Based on patches previously submitted by Achim Gottinger: http://lists.infradead.org/pipermail/openwrt-devel/2018-June/012719.html Tested on TP-Link TL-WDR4900 v1. Signed-off-by: Magnus Kroken --- target/linux/mpc85xx/config-4.14 | 365 + ...erpc-85xx-add-gpio-keys-to-of-match-table.patch | 10 + .../100-powerpc-85xx-tl-wdr4900-v1-support.patch | 79 + .../101-powerpc-85xx-hiveap-330-support.patch | 30 ++ .../102-powerpc-add-cmdline-override.patch | 37 +++ 5 files changed, 521 insertions(+) create mode 100644 target/linux/mpc85xx/config-4.14 create mode 100644 target/linux/mpc85xx/patches-4.14/001-powerpc-85xx-add-gpio-keys-to-of-match-table.patch create mode 100644 target/linux/mpc85xx/patches-4.14/100-powerpc-85xx-tl-wdr4900-v1-support.patch create mode 100644 target/linux/mpc85xx/patches-4.14/101-powerpc-85xx-hiveap-330-support.patch create mode 100644 target/linux/mpc85xx/patches-4.14/102-powerpc-add-cmdline-override.patch diff --git a/target/linux/mpc85xx/config-4.14 b/target/linux/mpc85xx/config-4.14 new file mode 100644 index 00..0bdf7aa25d --- /dev/null +++ b/target/linux/mpc85xx/config-4.14 @@ -0,0 +1,365 @@ +# CONFIG_40x is not set +# CONFIG_44x is not set +# CONFIG_ADVANCED_OPTIONS is not set +CONFIG_AR8216_PHY=y +CONFIG_AR8216_PHY_LEDS=y +CONFIG_ARCH_ENABLE_MEMORY_HOTPLUG=y +CONFIG_ARCH_ENABLE_MEMORY_HOTREMOVE=y +CONFIG_ARCH_HAS_DMA_SET_COHERENT_MASK=y +CONFIG_ARCH_HAS_ELF_RANDOMIZE=y +CONFIG_ARCH_HAS_GCOV_PROFILE_ALL=y +CONFIG_ARCH_HAS_ILOG2_U32=y +CONFIG_ARCH_HAS_SG_CHAIN=y +CONFIG_ARCH_HAS_WALK_MEMORY=y +CONFIG_ARCH_HAVE_NMI_SAFE_CMPXCHG=y +CONFIG_ARCH_HIBERNATION_POSSIBLE=y +CONFIG_ARCH_MAY_HAVE_PC_FDC=y +CONFIG_ARCH_MIGHT_HAVE_PC_PARPORT=y +CONFIG_ARCH_MIGHT_HAVE_PC_SERIO=y +CONFIG_ARCH_MMAP_RND_BITS=11 +# CONFIG_ARCH_RANDOM is not set +CONFIG_ARCH_SUPPORTS_ATOMIC_RMW=y +CONFIG_ARCH_SUPPORTS_DEBUG_PAGEALLOC=y +CONFIG_ARCH_SUPPORTS_DEFERRED_STRUCT_PAGE_INIT=y +CONFIG_ARCH_SUPPORTS_UPROBES=y +CONFIG_ARCH_SUSPEND_POSSIBLE=y +CONFIG_ARCH_USE_BUILTIN_BSWAP=y +CONFIG_ARCH_WANT_IPC_PARSE_VERSION=y +CONFIG_ASN1=y +CONFIG_AUDIT_ARCH=y +CONFIG_BLK_MQ_PCI=y +CONFIG_BOOKE=y +CONFIG_BOOKE_WDT=y +CONFIG_BOUNCE=y +# CONFIG_BSC9131_RDB is not set +# CONFIG_BSC9132_QDS is not set +# CONFIG_C293_PCIE is not set +CONFIG_CLONE_BACKWARDS=y +CONFIG_CLZ_TAB=y +CONFIG_CMDLINE="console=ttyS0,115200" +CONFIG_CMDLINE_BOOL=y +# CONFIG_CMDLINE_OVERRIDE is not set +# CONFIG_CORENET_GENERIC is not set +# CONFIG_CPM2 is not set +CONFIG_CPU_BIG_ENDIAN=y +CONFIG_CRYPTO_AEAD=y +CONFIG_CRYPTO_AEAD2=y +# CONFIG_CRYPTO_AES_PPC_SPE is not set +CONFIG_CRYPTO_AKCIPHER=y +CONFIG_CRYPTO_AKCIPHER2=y +CONFIG_CRYPTO_AUTHENC=y +#CONFIG_CRYPTO_DEV_FSL_CAAM=y +#CONFIG_CRYPTO_DEV_FSL_CAAM_AHASH_API=y +#CONFIG_CRYPTO_DEV_FSL_CAAM_CRYPTO_API=y +# CONFIG_CRYPTO_DEV_FSL_CAAM_DEBUG is not set +# CONFIG_CRYPTO_DEV_FSL_CAAM_IMX is not set +# CONFIG_CRYPTO_DEV_FSL_CAAM_INTC is not set +#CONFIG_CRYPTO_DEV_FSL_CAAM_JR=y +#CONFIG_CRYPTO_DEV_FSL_CAAM_PKC_API=y +#CONFIG_CRYPTO_DEV_FSL_CAAM_RINGSIZE=9 +#CONFIG_CRYPTO_DEV_FSL_CAAM_RNG_API=y +CONFIG_CRYPTO_HASH=y +CONFIG_CRYPTO_HASH2=y +CONFIG_CRYPTO_HW=y +CONFIG_CRYPTO_MANAGER=y +CONFIG_CRYPTO_MANAGER2=y +# CONFIG_CRYPTO_MD5_PPC is not set +CONFIG_CRYPTO_NULL=y +CONFIG_CRYPTO_NULL2=y +CONFIG_CRYPTO_RNG=y +CONFIG_CRYPTO_RNG2=y +CONFIG_CRYPTO_RSA=y +# CONFIG_CRYPTO_SHA1_PPC is not set +# CONFIG_CRYPTO_SHA1_PPC_SPE is not set +# CONFIG_CRYPTO_SHA256_PPC_SPE is not set +CONFIG_CRYPTO_WORKQUEUE=y +CONFIG_DEBUG_BUGVERBOSE=y +# CONFIG_DEFAULT_UIMAGE is not set +CONFIG_DNOTIFY=y +CONFIG_DTC=y +# CONFIG_E200 is not set +CONFIG_E500=y +CONFIG_EARLY_PRINTK=y +CONFIG_EDAC_ATOMIC_SCRUB=y +CONFIG_EDAC_SUPPORT=y +CONFIG_ENABLE_MUST_CHECK=y +# CONFIG_EPAPR_BOOT is not set +CONFIG_ETHERNET_PACKET_MANGLE=y +# CONFIG_FHCI_DEBUG is not set +CONFIG_FIXED_PHY=y +CONFIG_FSL_BOOKE=y +# CONFIG_FSL_DPAA is not set +CONFIG_FSL_EMB_PERFMON=y +# CONFIG_FSL_FMAN is not set +CONFIG_FSL_GTM=y +CONFIG_FSL_LBC=y +CONFIG_FSL_PCI=y +CONFIG_FSL_PQ_MDIO=y +CONFIG_FSL_SOC=y +CONFIG_FSL_SOC_BOOKE=y +# CONFIG_FSL_ULI1575 is not set +CONFIG_GENERIC_ALLOCATOR=y +CONFIG_GENERIC_ATOMIC64=y +CONFIG_GENERIC_BUG=y +CONFIG_GENERIC_CLOCKEVENTS=y +CONFIG_GENERIC_CMOS_UPDATE=y +CONFIG_GENERIC_CPU_AUTOPROBE=y +# CONFIG_GENERIC_CSUM is not set +CONFIG_GENERIC_IO=y +CONFIG_GENERIC_IRQ_SHOW=y +CONFIG_GENERIC_IRQ_SHOW_LEVEL=y +CONFIG_GENERIC_ISA_DMA=y +CONFIG_GENERIC_NVRAM=y +CONFIG_GENERIC_PCI_IOMAP=y +CONFIG_GENERIC_SMP_IDLE_THREAD=y +CONFIG_GENERIC_STRNCPY_FROM_USER=y +CONFIG_GENERIC_STRNLEN_USER=y +# CONFIG_GENERIC_TBSYNC is not set +CONFIG_GENERIC_TIME_VSYSCALL_OLD=y +CONFIG_GEN_RTC=y +# CONFIG_GE_FPGA is not set +# CONFIG_GE_IMP3A is not set +CONFIG_GIANFAR=y +CONFIG_GPIOLIB=y +CONFIG_GPIO_GENERIC=y +CONFIG_GPIO_MPC8XXX=y +CONFIG_GPIO_SYSFS=y +CONFIG_HAS_DMA=y +CONFIG_HAS_IOMEM=y +CONFIG_HAS_IOPORT_MAP=y +# CONFIG_HAS_RAPIDIO is not set +#
[OpenWrt-Devel] [PATCH 2/3] mpc85xx: switch to kernel 4.14
Signed-off-by: Magnus Kroken --- target/linux/mpc85xx/Makefile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/target/linux/mpc85xx/Makefile b/target/linux/mpc85xx/Makefile index b181e67c0e..1eac544344 100644 --- a/target/linux/mpc85xx/Makefile +++ b/target/linux/mpc85xx/Makefile @@ -14,7 +14,7 @@ FEATURES:=squashfs MAINTAINER:=Imre Kaloz SUBTARGETS:=generic p1020 -KERNEL_PATCHVER:=4.9 +KERNEL_PATCHVER:=4.14 KERNELNAME:=zImage -- 2.11.0 ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] trying to acheive close to 1 Gbps with 802.11ac 3x3 mimo ath10k Compex wle900vx
It looks like Ben was right Further investigation is showing that my Compex WPJ563 (Qualcomm Atheros QCA9563 74Kc MIPS processor, Dragonfly Series 64KB I-Cache and 32 KB D-Cache, targeted to operate at 775MHz 128MB System Memory, 16MB NOR Flash) is the bottleneck. I've tested on the 1Gbps Ethernet link between a laptop with a 1Gbps port and the Compex 1Gbps port and the best throughput I got was 98 Mbps. This was with 3 TCP streams on iperf. I'm still finding it hard to believe that I can't get more speed out of this compex board running openwrt ... top is not showing the CPU go over 30% with iperf when the test is running Thanks for the other advice - I've built a test rig with antennas oriented like a propeller at 120 degrees (I'll share a pic) ... once I sort out the underlying problem or upgrade my router board - I'll test this mimo rig. David On Fri, Oct 5, 2018 at 6:02 PM Ben Greear wrote: > > If you are running iperf on a weak-ish AP CPU, then that will be a bottleneck. > Run iperf on external system through the AP instead. For TCP, use multiple > streams, > and first test with Ethernet mode to make sure iperf and/or CPU is not the > bottleneck > before you move to testing the WiFi interfaces. > > We can get around 900Mbps UDP download throughput on a 'perfect' setup with > 3x3 9880 WLE900VX > systems and the ath10k-ct firmware. > > Forcing MCS rate is not a good idea...tune antennas and/or RF environment so > that you do not have > to force MCS to get highest encoding rate. > > Thanks, > Ben > > On 10/05/2018 04:17 AM, David Johnson wrote: > > I'm trying to see what max speed can be achieved > > > > My setup is as follow: > > Board: Compex WPJ 563 > > Card Compex wle900vx > > OS: Libremesh running openwrt 18.06 > > Driver: ath10k_pci :00:00.0: firmware ver 10.2.4-1.0-00033 api 5 > > features no-p2p,raw-mode,mfp,allows-mesh-bcast crc32 c41417d0 > > Firmware: firmware-5.bin_10.2.4-1.0-00041 > > > > Physical setup > > Connected 3 6dBi antennas on each side to CH0, CH1, CH2 port to > > achieve 3x3 mimo. Distance between 2 devices is 2m on a bench. Set > > power level on each end to 8 dBm to ensure I don't saturate radios > > > > Status of radio Node A > > iwinfo wlan0-mesh info > > wlan0-mesh ESSID: "speedtest" > > Access Point: 04:F0:21:3E:DA:A2 > > Mode: Client Channel: 48 (5.240 GHz) > > Tx-Power: 8 dBm Link Quality: 70/70 > > Signal: -33 dBm Noise: -102 dBm > > Bit Rate: 6.0 MBit/s > > Encryption: none > > Type: nl80211 HW Mode(s): 802.11bgnac > > Hardware: 168C:003C : [Qualcomm Atheros QCA9880] > > TX power offset: none > > Frequency offset: none > > Supports VAPs: yes PHY name: phy0 > > > > Status of radio Node B > > wlan0-mesh ESSID: "speedtest" > > Access Point: 04:F0:21:3E:DA:A2 > > Mode: Master Channel: 48 (5.240 GHz) > > Tx-Power: 8 dBm Link Quality: 65/70 > > Signal: -45 dBm Noise: -105 dBm > > Bit Rate: 6.0 MBit/s > > Encryption: none > > Type: nl80211 HW Mode(s): 802.11bgnac > > Hardware: 168C:003C : [Qualcomm Atheros QCA9880] > > TX power offset: none > > Frequency offset: none > > Supports VAPs: yes PHY name: phy0 > > > > > > Ping between radios > > > > root@FlatsEast:~# ping 10.69.0.1 > > PING 10.69.0.1 (10.69.0.1) 56(84) bytes of data. > > 64 bytes from 10.69.0.1: icmp_req=1 ttl=64 time=1.29 ms > > 64 bytes from 10.69.0.1: icmp_req=2 ttl=64 time=1.22 ms > > 64 bytes from 10.69.0.1: icmp_req=3 ttl=64 time=1.22 ms > > > > Used iperf to set throughput > > Client side > > iperf -c 10.69.0.1 -P 10 -i 5 -t 120 > > > > Server side > > iperf -s > > > > Best performance achieved after waiting for TCP to stabalize: 139 Mbps > > [ 12] 45.0-50.0 sec 11.8 MBytes 19.7 Mbits/sec > > [ 11] 45.0-50.0 sec 7.12 MBytes 12.0 Mbits/sec > > [ 9] 45.0-50.0 sec 8.12 MBytes 13.6 Mbits/sec > > [ 6] 45.0-50.0 sec 7.75 MBytes 13.0 Mbits/sec > > [ 8] 45.0-50.0 sec 8.00 MBytes 13.4 Mbits/sec > > [ 4] 45.0-50.0 sec 7.75 MBytes 13.0 Mbits/sec > > [ 3] 45.0-50.0 sec 7.75 MBytes 13.0 Mbits/sec > > [ 10] 45.0-50.0 sec 6.62 MBytes 11.1 Mbits/sec > > [ 7] 45.0-50.0 sec 7.88 MBytes 13.2 Mbits/sec > > [ 5] 45.0-50.0 sec 9.88 MBytes 16.6 Mbits/sec > > [SUM] 45.0-50.0 sec 82.6 MBytes 139 Mbits/sec > > > > top: > > > > Mem: 47064K used, 78232K free, 188K shrd, 3936K buff, 10564K cached > > CPU: 19% usr 36% sys 0% nic 0% idle 0% io 0% irq 43% sirq > > Load average: 4.59 3.06 1.90 3/74 25823 > > PID PPID USER STAT VSZ %VSZ %CPU COMMAND > > 3 2 root RW 0 0% 32% [ksoftirqd/0] > > 24511 4419 root S33320 27% 22% iperf -c 10.69.0.1 -P 10 -i 5 -t > > 120 > > > > Any suggestions > > > > Regards > > David > > > > -- > Ben Greear > Candela Technologies Inc http://www.candelatech.com
[OpenWrt-Devel] [RFC 3/6] hostapd: Activate Simultaneous Authentication of Equals (SAE)
This build the full openssl and wolfssl versions with SAE support which
is the main part of WPA3 PSK.
This needs elliptic curve cryptography which is only provided by these
two external cryptographic libraries and not by the internal
implementation.
The WPA3_Specification_v1.0.pdf file says that in SAE only mode
Protected Management Frames (PMF) is required, in mixed mode with
WPA2-PSK PMF should be required for clients using SAE, and optional for
clients using WPA2-PSK. The defaults are set now accordingly.
Signed-off-by: Hauke Mehrtens
---
package/network/services/hostapd/Makefile | 4 +--
package/network/services/hostapd/files/hostapd.sh | 43 +++
2 files changed, 38 insertions(+), 9 deletions(-)
diff --git a/package/network/services/hostapd/Makefile
b/package/network/services/hostapd/Makefile
index a5c5379738..3f9b776f55 100644
--- a/package/network/services/hostapd/Makefile
+++ b/package/network/services/hostapd/Makefile
@@ -97,11 +97,11 @@ endif
ifeq ($(LOCAL_VARIANT),full)
ifeq ($(SSL_VARIANT),openssl)
-DRIVER_MAKEOPTS += CONFIG_TLS=openssl
+DRIVER_MAKEOPTS += CONFIG_TLS=openssl CONFIG_SAE=y
TARGET_LDFLAGS += -lcrypto -lssl
endif
ifeq ($(SSL_VARIANT),wolfssl)
-DRIVER_MAKEOPTS += CONFIG_TLS=wolfssl CONFIG_WPS_NFC=1
+DRIVER_MAKEOPTS += CONFIG_TLS=wolfssl CONFIG_WPS_NFC=1 CONFIG_SAE=y
TARGET_LDFLAGS += -lwolfssl
endif
endif
diff --git a/package/network/services/hostapd/files/hostapd.sh
b/package/network/services/hostapd/files/hostapd.sh
index 74e7e1..c9882701fa 100644
--- a/package/network/services/hostapd/files/hostapd.sh
+++ b/package/network/services/hostapd/files/hostapd.sh
@@ -37,11 +37,26 @@ hostapd_append_wep_key() {
}
hostapd_append_wpa_key_mgmt() {
- local auth_type="$(echo $auth_type | tr 'a-z' 'A-Z')"
+ local auth_type_l="$(echo $auth_type | tr 'a-z' 'A-Z')"
- append wpa_key_mgmt "WPA-$auth_type"
- [ "${ieee80211r:-0}" -gt 0 ] && append wpa_key_mgmt "FT-${auth_type}"
- [ "${ieee80211w:-0}" -gt 0 ] && append wpa_key_mgmt
"WPA-${auth_type}-SHA256"
+ case "$auth_type" in
+ psk|eap)
+ append wpa_key_mgmt "WPA-$auth_type_l"
+ [ "${ieee80211r:-0}" -gt 0 ] && append wpa_key_mgmt
"FT-${auth_type_l}"
+ [ "${ieee80211w:-0}" -gt 0 ] && append wpa_key_mgmt
"WPA-${auth_type_l}-SHA256"
+ ;;
+ sae)
+ append wpa_key_mgmt "SAE"
+ [ "${ieee80211r:-0}" -gt 0 ] && append wpa_key_mgmt
"FT-SAE"
+ ;;
+ psk-sae)
+ append wpa_key_mgmt "WPA-PSK"
+ [ "${ieee80211r:-0}" -gt 0 ] && append wpa_key_mgmt
"FT-PSK"
+ [ "${ieee80211w:-0}" -gt 0 ] && append wpa_key_mgmt
"WPA-PSK-SHA256"
+ append wpa_key_mgmt "SAE"
+ [ "${ieee80211r:-0}" -gt 0 ] && append wpa_key_mgmt
"FT-SAE"
+ ;;
+ esac
}
hostapd_add_log_config() {
@@ -209,6 +224,8 @@ hostapd_common_add_bss_config() {
config_add_int mcast_rate
config_add_array basic_rate
config_add_array supported_rates
+
+ config_add_boolean sae_require_mfp
}
hostapd_set_bss_options() {
@@ -230,7 +247,7 @@ hostapd_set_bss_options() {
macfilter ssid wmm uapsd hidden short_preamble rsn_preauth \
iapp_interface eapol_version dynamic_vlan ieee80211w nasid \
acct_server acct_secret acct_port acct_interval \
- bss_load_update_period chan_util_avg_period
+ bss_load_update_period chan_util_avg_period sae_require_mfp
set_default isolate 0
set_default maxassoc 0
@@ -284,6 +301,18 @@ hostapd_set_bss_options() {
append bss_conf
"radius_acct_interim_interval=$acct_interval" "$N"
}
+ case "$auth_type" in
+ sae)
+ set_default ieee80211w 2
+ set_default sae_require_mfp 1
+ ;;
+ psk-sae)
+ set_default ieee80211w 1
+ set_default sae_require_mfp 1
+ ;;
+ esac
+ [ -n "$sae_require_mfp" ] && append bss_conf
"sae_require_mfp=$sae_require_mfp" "$N"
+
local vlan_possible=""
case "$auth_type" in
@@ -293,7 +322,7 @@ hostapd_set_bss_options() {
# with WPS enabled, we got to be in unconfigured state.
wps_not_configured=1
;;
- psk)
+ psk|sae|psk-sae)
json_get_vars key wpa_psk_file
if [ ${#key} -lt 8 ]; then
wireless_setup_vif_failed INVALID_WPA_PSK
@@ -709,7 +738,7 @@ wpa_supplicant_add_network() {
hostapd_append_wep_key network_data
[OpenWrt-Devel] [RFC 5/6] netifd: Add support for wireless SAE authentication
Signed-off-by: Hauke Mehrtens
---
.../config/netifd/patches/001-wireless-sae.patch | 26 ++
1 file changed, 26 insertions(+)
create mode 100644 package/network/config/netifd/patches/001-wireless-sae.patch
diff --git a/package/network/config/netifd/patches/001-wireless-sae.patch
b/package/network/config/netifd/patches/001-wireless-sae.patch
new file mode 100644
index 00..e707bfbb21
--- /dev/null
+++ b/package/network/config/netifd/patches/001-wireless-sae.patch
@@ -0,0 +1,26 @@
+diff --git a/scripts/netifd-wireless.sh b/scripts/netifd-wireless.sh
+index fc077f2..396ef71 100644
+--- a/scripts/netifd-wireless.sh
b/scripts/netifd-wireless.sh
+@@ -211,7 +211,7 @@ wireless_vif_parse_encryption() {
+ # wpa2/tkip+aes => WPA2 RADIUS, CCMP+TKIP
+
+ case "$encryption" in
+- wpa2*|*psk2*)
++ wpa2*|*psk2*|psk3*|sae*)
+ wpa=2
+ ;;
+ wpa*mixed*|*psk*mixed*)
+@@ -228,6 +228,12 @@ wireless_vif_parse_encryption() {
+ wpa_pairwise="$wpa_cipher"
+
+ case "$encryption" in
++ psk3-mixed*|sae-mixed*)
++ auth_type=psk-sae
++ ;;
++ psk3*|sae*)
++ auth_type=sae
++ ;;
+ *psk*)
+ auth_type=psk
+ ;;
--
2.11.0
___
openwrt-devel mailing list
openwrt-devel@lists.openwrt.org
https://lists.openwrt.org/mailman/listinfo/openwrt-devel
[OpenWrt-Devel] [RFC 4/6] hostapd: Activate Opportunistic Wireless Encryption (OWE)
OWE is defined in RFC 8110 and provides encryption and forward security
for open networks.
Signed-off-by: Hauke Mehrtens
---
package/network/services/hostapd/Makefile | 4 ++--
package/network/services/hostapd/files/hostapd.sh | 8 +++-
2 files changed, 9 insertions(+), 3 deletions(-)
diff --git a/package/network/services/hostapd/Makefile
b/package/network/services/hostapd/Makefile
index 3f9b776f55..06cf0469ef 100644
--- a/package/network/services/hostapd/Makefile
+++ b/package/network/services/hostapd/Makefile
@@ -97,11 +97,11 @@ endif
ifeq ($(LOCAL_VARIANT),full)
ifeq ($(SSL_VARIANT),openssl)
-DRIVER_MAKEOPTS += CONFIG_TLS=openssl CONFIG_SAE=y
+DRIVER_MAKEOPTS += CONFIG_TLS=openssl CONFIG_SAE=y CONFIG_OWE=y
TARGET_LDFLAGS += -lcrypto -lssl
endif
ifeq ($(SSL_VARIANT),wolfssl)
-DRIVER_MAKEOPTS += CONFIG_TLS=wolfssl CONFIG_WPS_NFC=1 CONFIG_SAE=y
+DRIVER_MAKEOPTS += CONFIG_TLS=wolfssl CONFIG_WPS_NFC=1 CONFIG_SAE=y
CONFIG_OWE=y
TARGET_LDFLAGS += -lwolfssl
endif
endif
diff --git a/package/network/services/hostapd/files/hostapd.sh
b/package/network/services/hostapd/files/hostapd.sh
index c9882701fa..ae03f2d380 100644
--- a/package/network/services/hostapd/files/hostapd.sh
+++ b/package/network/services/hostapd/files/hostapd.sh
@@ -56,6 +56,9 @@ hostapd_append_wpa_key_mgmt() {
append wpa_key_mgmt "SAE"
[ "${ieee80211r:-0}" -gt 0 ] && append wpa_key_mgmt
"FT-SAE"
;;
+ owe)
+ append wpa_key_mgmt "OWE"
+ ;;
esac
}
@@ -316,7 +319,7 @@ hostapd_set_bss_options() {
local vlan_possible=""
case "$auth_type" in
- none)
+ none|owe)
wps_possible=1
# Here we make the assumption that if we're in open mode
# with WPS enabled, we got to be in unconfigured state.
@@ -733,6 +736,9 @@ wpa_supplicant_add_network() {
case "$auth_type" in
none) ;;
+ owe)
+ hostapd_append_wpa_key_mgmt
+ ;;
wep)
local wep_keyidx=0
hostapd_append_wep_key network_data
--
2.11.0
___
openwrt-devel mailing list
openwrt-devel@lists.openwrt.org
https://lists.openwrt.org/mailman/listinfo/openwrt-devel
[OpenWrt-Devel] [RFC 6/6] netifd: Add support for wireless OWE authentication
Signed-off-by: Hauke Mehrtens
---
.../config/netifd/patches/002-wireless-owe.patch | 23 ++
1 file changed, 23 insertions(+)
create mode 100644 package/network/config/netifd/patches/002-wireless-owe.patch
diff --git a/package/network/config/netifd/patches/002-wireless-owe.patch
b/package/network/config/netifd/patches/002-wireless-owe.patch
new file mode 100644
index 00..c8ca7d420b
--- /dev/null
+++ b/package/network/config/netifd/patches/002-wireless-owe.patch
@@ -0,0 +1,23 @@
+diff --git a/scripts/netifd-wireless.sh b/scripts/netifd-wireless.sh
+index 396ef71..52641c7 100644
+--- a/scripts/netifd-wireless.sh
b/scripts/netifd-wireless.sh
+@@ -211,7 +211,7 @@ wireless_vif_parse_encryption() {
+ # wpa2/tkip+aes => WPA2 RADIUS, CCMP+TKIP
+
+ case "$encryption" in
+- wpa2*|*psk2*|psk3*|sae*)
++ wpa2*|*psk2*|psk3*|sae*|owe*)
+ wpa=2
+ ;;
+ wpa*mixed*|*psk*mixed*)
+@@ -228,6 +228,9 @@ wireless_vif_parse_encryption() {
+ wpa_pairwise="$wpa_cipher"
+
+ case "$encryption" in
++ owe*)
++ auth_type=owe
++ ;;
+ psk3-mixed*|sae-mixed*)
+ auth_type=psk-sae
+ ;;
--
2.11.0
___
openwrt-devel mailing list
openwrt-devel@lists.openwrt.org
https://lists.openwrt.org/mailman/listinfo/openwrt-devel
[OpenWrt-Devel] [RFC 2/6] hostapd: backport build fix when OWE is activated
Signed-off-by: Hauke Mehrtens
---
...-unauthenticated-encrypted-EAPOL-Key-data.patch | 7 +-
...ld-error-in-AP-code-without-CONFIG_IEEE80.patch | 29 ++
.../patches/380-disable_ctrl_iface_mib.patch | 4 +--
.../patches/381-hostapd_cli_UNKNOWN-COMMAND.patch | 4 +--
.../hostapd/patches/700-fix-openssl11.patch| 9 ++-
5 files changed, 35 insertions(+), 18 deletions(-)
create mode 100644
package/network/services/hostapd/patches/040-OWE-Fix-build-error-in-AP-code-without-CONFIG_IEEE80.patch
diff --git
a/package/network/services/hostapd/patches/0001-WPA-Ignore-unauthenticated-encrypted-EAPOL-Key-data.patch
b/package/network/services/hostapd/patches/0001-WPA-Ignore-unauthenticated-encrypted-EAPOL-Key-data.patch
index 1b84f7e86a..633ab58623 100644
---
a/package/network/services/hostapd/patches/0001-WPA-Ignore-unauthenticated-encrypted-EAPOL-Key-data.patch
+++
b/package/network/services/hostapd/patches/0001-WPA-Ignore-unauthenticated-encrypted-EAPOL-Key-data.patch
@@ -21,11 +21,9 @@ Signed-off-by: Mathy Vanhoef
src/rsn_supp/wpa.c | 11 +++
1 file changed, 11 insertions(+)
-diff --git a/src/rsn_supp/wpa.c b/src/rsn_supp/wpa.c
-index 56f3af7..db94a49 100644
--- a/src/rsn_supp/wpa.c
+++ b/src/rsn_supp/wpa.c
-@@ -2215,6 +2215,17 @@ int wpa_sm_rx_eapol(struct wpa_sm *sm, const u8
*src_addr,
+@@ -2208,6 +2208,17 @@ int wpa_sm_rx_eapol(struct wpa_sm *sm, c
if ((sm->proto == WPA_PROTO_RSN || sm->proto == WPA_PROTO_OSEN) &&
(key_info & WPA_KEY_INFO_ENCR_KEY_DATA) && mic_len) {
@@ -43,6 +41,3 @@ index 56f3af7..db94a49 100644
if (wpa_supplicant_decrypt_key_data(sm, key, mic_len,
ver, key_data,
_data_len))
---
-2.7.4
-
diff --git
a/package/network/services/hostapd/patches/040-OWE-Fix-build-error-in-AP-code-without-CONFIG_IEEE80.patch
b/package/network/services/hostapd/patches/040-OWE-Fix-build-error-in-AP-code-without-CONFIG_IEEE80.patch
new file mode 100644
index 00..ae9733110b
--- /dev/null
+++
b/package/network/services/hostapd/patches/040-OWE-Fix-build-error-in-AP-code-without-CONFIG_IEEE80.patch
@@ -0,0 +1,29 @@
+From 410e2dd1d6b645bf5ed3ed55a9a415acbd993532 Mon Sep 17 00:00:00 2001
+From: Chaitanya T K
+Date: Wed, 29 Aug 2018 02:14:33 +0530
+Subject: [PATCH] OWE: Fix build error in AP code without CONFIG_IEEE80211W=y
+
+When CONFIG_OWE is enabled but none of 11R/11W/FILS are enabled hostapd
+(and wpa_supplicant with AP mode support) build failed. Fix this by
+adding OWE to the list of conditions for including the local variables.
+
+Signed-off-by: Chaitanya T K
+---
+ src/ap/drv_callbacks.c | 4 ++--
+ 1 file changed, 2 insertions(+), 2 deletions(-)
+
+--- a/src/ap/drv_callbacks.c
b/src/ap/drv_callbacks.c
+@@ -109,10 +109,10 @@ int hostapd_notif_assoc(struct hostapd_d
+ struct ieee802_11_elems elems;
+ const u8 *ie;
+ size_t ielen;
+-#if defined(CONFIG_IEEE80211R_AP) || defined(CONFIG_IEEE80211W) ||
defined(CONFIG_FILS)
++#if defined(CONFIG_IEEE80211R_AP) || defined(CONFIG_IEEE80211W) ||
defined(CONFIG_FILS) || defined(CONFIG_OWE)
+ u8 buf[sizeof(struct ieee80211_mgmt) + 1024];
+ u8 *p = buf;
+-#endif /* CONFIG_IEEE80211R_AP || CONFIG_IEEE80211W || CONFIG_FILS */
++#endif /* CONFIG_IEEE80211R_AP || CONFIG_IEEE80211W || CONFIG_FILS ||
CONFIG_OWE */
+ u16 reason = WLAN_REASON_UNSPECIFIED;
+ u16 status = WLAN_STATUS_SUCCESS;
+ const u8 *p2p_dev_addr = NULL;
diff --git
a/package/network/services/hostapd/patches/380-disable_ctrl_iface_mib.patch
b/package/network/services/hostapd/patches/380-disable_ctrl_iface_mib.patch
index 12689eab57..cd050fc0c9 100644
--- a/package/network/services/hostapd/patches/380-disable_ctrl_iface_mib.patch
+++ b/package/network/services/hostapd/patches/380-disable_ctrl_iface_mib.patch
@@ -163,7 +163,7 @@
{
--- a/src/rsn_supp/wpa.c
+++ b/src/rsn_supp/wpa.c
-@@ -2295,6 +2295,8 @@ static u32 wpa_key_mgmt_suite(struct wpa
+@@ -2306,6 +2306,8 @@ static u32 wpa_key_mgmt_suite(struct wpa
}
@@ -172,7 +172,7 @@
#define RSN_SUITE "%02x-%02x-%02x-%d"
#define RSN_SUITE_ARG(s) \
((s) >> 24) & 0xff, ((s) >> 16) & 0xff, ((s) >> 8) & 0xff, (s) & 0xff
-@@ -2378,6 +2380,7 @@ int wpa_sm_get_mib(struct wpa_sm *sm, ch
+@@ -2389,6 +2391,7 @@ int wpa_sm_get_mib(struct wpa_sm *sm, ch
return (int) len;
}
diff --git
a/package/network/services/hostapd/patches/381-hostapd_cli_UNKNOWN-COMMAND.patch
b/package/network/services/hostapd/patches/381-hostapd_cli_UNKNOWN-COMMAND.patch
index 81e6588e72..7bac937373 100644
---
a/package/network/services/hostapd/patches/381-hostapd_cli_UNKNOWN-COMMAND.patch
+++
b/package/network/services/hostapd/patches/381-hostapd_cli_UNKNOWN-COMMAND.patch
@@ -1,6 +1,6 @@
--- a/hostapd/hostapd_cli.c
+++ b/hostapd/hostapd_cli.c
-@@ -743,7 +743,7 @@ static int
[OpenWrt-Devel] [RFC 1/6] hostapd: sync config with default configuration
Signed-off-by: Hauke Mehrtens --- .../services/hostapd/files/hostapd-full.config | 8 .../services/hostapd/files/hostapd-mini.config | 8 .../hostapd/files/wpa_supplicant-full.config | 20 +++- .../hostapd/files/wpa_supplicant-mini.config | 20 +++- .../services/hostapd/files/wpa_supplicant-p2p.config | 20 +++- 5 files changed, 41 insertions(+), 35 deletions(-) diff --git a/package/network/services/hostapd/files/hostapd-full.config b/package/network/services/hostapd/files/hostapd-full.config index 355a70b9e1..b4159c2d28 100644 --- a/package/network/services/hostapd/files/hostapd-full.config +++ b/package/network/services/hostapd/files/hostapd-full.config @@ -50,11 +50,7 @@ CONFIG_IAPP=y # WPA2/IEEE 802.11i RSN pre-authentication CONFIG_RSN_PREAUTH=y -# PeerKey handshake for Station to Station Link (IEEE 802.11e DLS) -CONFIG_PEERKEY=y - # IEEE 802.11w (management frame protection) -# Driver support is also needed for IEEE 802.11w. #CONFIG_IEEE80211W=y # Integrated EAP server @@ -374,6 +370,10 @@ CONFIG_TAXONOMY=y # Experimental implementation of draft-harkins-owe-07.txt #CONFIG_OWE=y +# Override default value for the wpa_disable_eapol_key_retries configuration +# parameter. See that parameter in hostapd.conf for more details. +#CFLAGS += -DDEFAULT_WPA_DISABLE_EAPOL_KEY_RETRIES=1 + # uBus IPC/RPC System # Services can connect to the bus and provide methods # that can be called by other services or clients. diff --git a/package/network/services/hostapd/files/hostapd-mini.config b/package/network/services/hostapd/files/hostapd-mini.config index 661983a94b..9057658c16 100644 --- a/package/network/services/hostapd/files/hostapd-mini.config +++ b/package/network/services/hostapd/files/hostapd-mini.config @@ -50,11 +50,7 @@ CONFIG_DRIVER_NL80211=y # WPA2/IEEE 802.11i RSN pre-authentication CONFIG_RSN_PREAUTH=y -# PeerKey handshake for Station to Station Link (IEEE 802.11e DLS) -CONFIG_PEERKEY=y - # IEEE 802.11w (management frame protection) -# Driver support is also needed for IEEE 802.11w. #CONFIG_IEEE80211W=y # Integrated EAP server @@ -374,6 +370,10 @@ CONFIG_TLS=internal # Experimental implementation of draft-harkins-owe-07.txt #CONFIG_OWE=y +# Override default value for the wpa_disable_eapol_key_retries configuration +# parameter. See that parameter in hostapd.conf for more details. +#CFLAGS += -DDEFAULT_WPA_DISABLE_EAPOL_KEY_RETRIES=1 + # uBus IPC/RPC System # Services can connect to the bus and provide methods # that can be called by other services or clients. diff --git a/package/network/services/hostapd/files/wpa_supplicant-full.config b/package/network/services/hostapd/files/wpa_supplicant-full.config index c22e1cca5d..55b31a345b 100644 --- a/package/network/services/hostapd/files/wpa_supplicant-full.config +++ b/package/network/services/hostapd/files/wpa_supplicant-full.config @@ -73,6 +73,12 @@ CONFIG_DRIVER_NL80211=y # Driver interface for wired Ethernet drivers CONFIG_DRIVER_WIRED=y +# Driver interface for MACsec capable Qualcomm Atheros drivers +#CONFIG_DRIVER_MACSEC_QCA=y + +# Driver interface for Linux MACsec drivers +#CONFIG_DRIVER_MACSEC_LINUX=y + # Driver interface for the Broadcom RoboSwitch family #CONFIG_DRIVER_ROBOSWITCH=y @@ -83,8 +89,8 @@ CONFIG_DRIVER_WIRED=y #LIBS += -lsocket -ldlpi -lnsl #LIBS_c += -lsocket -# Enable IEEE 802.1X Supplicant (automatically included if any EAP method is -# included) +# Enable IEEE 802.1X Supplicant (automatically included if any EAP method or +# MACsec is included) CONFIG_IEEE8021X_EAPOL=y # EAP-MD5 @@ -166,6 +172,9 @@ CONFIG_WPS=y # EAP-EKE #CONFIG_EAP_EKE=y +# MACsec +#CONFIG_MACSEC=y + # PKCS#12 (PFX) support (used to read private key and certificate file from # a file that usually has extension .p12 or .pfx) CONFIG_PKCS12=y @@ -288,9 +297,6 @@ CONFIG_BACKEND=file # bridge interfaces (commit 'bridge: respect RFC2863 operational state')'). #CONFIG_NO_LINUX_PACKET_SOCKET_WAR=y -# PeerKey handshake for Station to Station Link (IEEE 802.11e DLS) -CONFIG_PEERKEY=y - # IEEE 802.11w (management frame protection), also known as PMF # Driver support is also needed for IEEE 802.11w. #CONFIG_IEEE80211W=y @@ -378,10 +384,6 @@ CONFIG_INTERNAL_LIBTOMMATH_FAST=y # IEEE Std 802.11r-2008 (Fast BSS Transition) for station mode CONFIG_IEEE80211R=y -# IEEE Std 802.11r-2008 (Fast BSS Transition) for AP mode (implies -# CONFIG_IEEE80211R). -#CONFIG_IEEE80211R_AP=y - # Add support for writing debug log to a file (/tmp/wpa_supplicant-log-#.txt) #CONFIG_DEBUG_FILE=y diff --git a/package/network/services/hostapd/files/wpa_supplicant-mini.config b/package/network/services/hostapd/files/wpa_supplicant-mini.config index 3e088715c8..67c0b323af 100644 --- a/package/network/services/hostapd/files/wpa_supplicant-mini.config +++ b/package/network/services/hostapd/files/wpa_supplicant-mini.config @@ -73,6 +73,12 @@
[OpenWrt-Devel] [RFC 0/6] hostapd: Add WPA3 support
This adds basic support for SAE which is the new WPA3-PSK SAE mode and OWE. For OWE the options to configure the transition mode are still missing. WPA3 Enterprise support is still missing. It would be nice if this gets some testing, currently I only tested it with a Linux client using hostapd, are there any other clients available? This can also be found here: https://git.openwrt.org/?p=openwrt/staging/hauke.git;a=shortlog;h=refs/heads/hostapd I will update the branch more often than these mails. Hauke Mehrtens (6): hostapd: sync config with default configuration hostapd: backport build fix when OWE is activated hostapd: Activate Simultaneous Authentication of Equals (SAE) hostapd: Activate Opportunistic Wireless Encryption (OWE) netifd: Add support for wireless SAE authentication netifd: Add support for wireless OWE authentication .../config/netifd/patches/001-wireless-sae.patch | 26 +++ .../config/netifd/patches/002-wireless-owe.patch | 23 ++ package/network/services/hostapd/Makefile | 4 +- .../services/hostapd/files/hostapd-full.config | 8 ++-- .../services/hostapd/files/hostapd-mini.config | 8 ++-- package/network/services/hostapd/files/hostapd.sh | 51 ++ .../hostapd/files/wpa_supplicant-full.config | 20 + .../hostapd/files/wpa_supplicant-mini.config | 20 + .../hostapd/files/wpa_supplicant-p2p.config| 20 + ...-unauthenticated-encrypted-EAPOL-Key-data.patch | 7 +-- ...ld-error-in-AP-code-without-CONFIG_IEEE80.patch | 29 .../patches/380-disable_ctrl_iface_mib.patch | 4 +- .../patches/381-hostapd_cli_UNKNOWN-COMMAND.patch | 4 +- .../hostapd/patches/700-fix-openssl11.patch| 9 +--- 14 files changed, 170 insertions(+), 63 deletions(-) create mode 100644 package/network/config/netifd/patches/001-wireless-sae.patch create mode 100644 package/network/config/netifd/patches/002-wireless-owe.patch create mode 100644 package/network/services/hostapd/patches/040-OWE-Fix-build-error-in-AP-code-without-CONFIG_IEEE80.patch -- 2.11.0 ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] Bumping ar71xx to 4.14
Hi On 2018-10-05, Koen Vandeputte wrote: > Hi All, > > Regarding bumping ar71xx to 4.14, from my point of view all known issues > seem to be fixed. > Therefore, I'm planning to actually make 4.14 the default for this > target mid next week. > > If you still have issues which would not allow this, please let me know > asap. (and provide a log of the issue please) It's been a while since I last tested it (migrated to ath79 with all my devices meanwhile), but I successfully tested the initial port with these devices: - TP-Link TL-WR941ND v2 (AR9132) - TP-Link TL-WR1043ND v1 (AR9132) - TP-Link TL-WDR3600 (AR9344) - TP-Link TL-WDR4300 (AR9344) The size increase of kernel 4.14 will be very hard for all 4 MB flash devices though, especially for release images with luci preinstalled; not that this would be avoidable or fixable. Given the quite good state of ath79, it might be useful to lift the source-only flag for it soon. Regards Stefan Lippers-Hollmann ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] trying to acheive close to 1 Gbps with 802.11ac 3x3 mimo ath10k Compex wle900vx
If you are running iperf on a weak-ish AP CPU, then that will be a bottleneck. Run iperf on external system through the AP instead. For TCP, use multiple streams, and first test with Ethernet mode to make sure iperf and/or CPU is not the bottleneck before you move to testing the WiFi interfaces. We can get around 900Mbps UDP download throughput on a 'perfect' setup with 3x3 9880 WLE900VX systems and the ath10k-ct firmware. Forcing MCS rate is not a good idea...tune antennas and/or RF environment so that you do not have to force MCS to get highest encoding rate. Thanks, Ben On 10/05/2018 04:17 AM, David Johnson wrote: I'm trying to see what max speed can be achieved My setup is as follow: Board: Compex WPJ 563 Card Compex wle900vx OS: Libremesh running openwrt 18.06 Driver: ath10k_pci :00:00.0: firmware ver 10.2.4-1.0-00033 api 5 features no-p2p,raw-mode,mfp,allows-mesh-bcast crc32 c41417d0 Firmware: firmware-5.bin_10.2.4-1.0-00041 Physical setup Connected 3 6dBi antennas on each side to CH0, CH1, CH2 port to achieve 3x3 mimo. Distance between 2 devices is 2m on a bench. Set power level on each end to 8 dBm to ensure I don't saturate radios Status of radio Node A iwinfo wlan0-mesh info wlan0-mesh ESSID: "speedtest" Access Point: 04:F0:21:3E:DA:A2 Mode: Client Channel: 48 (5.240 GHz) Tx-Power: 8 dBm Link Quality: 70/70 Signal: -33 dBm Noise: -102 dBm Bit Rate: 6.0 MBit/s Encryption: none Type: nl80211 HW Mode(s): 802.11bgnac Hardware: 168C:003C : [Qualcomm Atheros QCA9880] TX power offset: none Frequency offset: none Supports VAPs: yes PHY name: phy0 Status of radio Node B wlan0-mesh ESSID: "speedtest" Access Point: 04:F0:21:3E:DA:A2 Mode: Master Channel: 48 (5.240 GHz) Tx-Power: 8 dBm Link Quality: 65/70 Signal: -45 dBm Noise: -105 dBm Bit Rate: 6.0 MBit/s Encryption: none Type: nl80211 HW Mode(s): 802.11bgnac Hardware: 168C:003C : [Qualcomm Atheros QCA9880] TX power offset: none Frequency offset: none Supports VAPs: yes PHY name: phy0 Ping between radios root@FlatsEast:~# ping 10.69.0.1 PING 10.69.0.1 (10.69.0.1) 56(84) bytes of data. 64 bytes from 10.69.0.1: icmp_req=1 ttl=64 time=1.29 ms 64 bytes from 10.69.0.1: icmp_req=2 ttl=64 time=1.22 ms 64 bytes from 10.69.0.1: icmp_req=3 ttl=64 time=1.22 ms Used iperf to set throughput Client side iperf -c 10.69.0.1 -P 10 -i 5 -t 120 Server side iperf -s Best performance achieved after waiting for TCP to stabalize: 139 Mbps [ 12] 45.0-50.0 sec 11.8 MBytes 19.7 Mbits/sec [ 11] 45.0-50.0 sec 7.12 MBytes 12.0 Mbits/sec [ 9] 45.0-50.0 sec 8.12 MBytes 13.6 Mbits/sec [ 6] 45.0-50.0 sec 7.75 MBytes 13.0 Mbits/sec [ 8] 45.0-50.0 sec 8.00 MBytes 13.4 Mbits/sec [ 4] 45.0-50.0 sec 7.75 MBytes 13.0 Mbits/sec [ 3] 45.0-50.0 sec 7.75 MBytes 13.0 Mbits/sec [ 10] 45.0-50.0 sec 6.62 MBytes 11.1 Mbits/sec [ 7] 45.0-50.0 sec 7.88 MBytes 13.2 Mbits/sec [ 5] 45.0-50.0 sec 9.88 MBytes 16.6 Mbits/sec [SUM] 45.0-50.0 sec 82.6 MBytes 139 Mbits/sec top: Mem: 47064K used, 78232K free, 188K shrd, 3936K buff, 10564K cached CPU: 19% usr 36% sys 0% nic 0% idle 0% io 0% irq 43% sirq Load average: 4.59 3.06 1.90 3/74 25823 PID PPID USER STAT VSZ %VSZ %CPU COMMAND 3 2 root RW 0 0% 32% [ksoftirqd/0] 24511 4419 root S33320 27% 22% iperf -c 10.69.0.1 -P 10 -i 5 -t 120 Any suggestions Regards David -- Ben Greear Candela Technologies Inc http://www.candelatech.com ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] trying to acheive close to 1 Gbps with 802.11ac 3x3 mimo ath10k Compex wle900vx
I better clarify. the polarization planes would be 60deg apart. The vertical antennas would be physically mounted 120deg apart like a 3 blade airplane propeller. ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] trying to acheive close to 1 Gbps with 802.11ac 3x3 mimo ath10k Compex wle900vx
Ditto on channel width, max rate is cut in half with cutting channel width in half. How do you have the antennas oriented? If all are in the same plane or polarization, then attempting to transmit different data on the antennas will directly compete and interfere with all the signals on the same signal polarization. The radio would likely end up sending the same data out all the antennas using lower MCS rates. Orient the antennas, probably need 60deg angles for 3 antennas to minimize the interference between polarization. Align the antennas the same orientation on both ends. Joe AE6XE ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] trying to acheive close to 1 Gbps with 802.11ac 3x3 mimo ath10k Compex wle900vx
A few other parameters I left out Channel:48 Bandwidth: 80 MHz (max allowed for this compex card using Qualcomm-Atheros QCA9880) As this is an indoor lab bench test over 2 metres - I don't think the channel interference should matter much (reported noise is -102 dBm) I tried: iw wlan0-mesh set bitrates vht-mcs-5 3:0-9 (i.e. force to 11ac mode with 3 streams) which sometimes caused the kernel to crash ... logs showed: ath10k_pci :00:00.0: firmware crashed! The ath10k-ct driver didn't crash with this command but it actually made the speed worse On Fri, Oct 5, 2018 at 1:17 PM David Johnson wrote: > > I'm trying to see what max speed can be achieved > > My setup is as follow: > Board: Compex WPJ 563 > Card Compex wle900vx > OS: Libremesh running openwrt 18.06 > Driver: ath10k_pci :00:00.0: firmware ver 10.2.4-1.0-00033 api 5 > features no-p2p,raw-mode,mfp,allows-mesh-bcast crc32 c41417d0 > Firmware: firmware-5.bin_10.2.4-1.0-00041 > > Physical setup > Connected 3 6dBi antennas on each side to CH0, CH1, CH2 port to > achieve 3x3 mimo. Distance between 2 devices is 2m on a bench. Set > power level on each end to 8 dBm to ensure I don't saturate radios > > Status of radio Node A > iwinfo wlan0-mesh info > wlan0-mesh ESSID: "speedtest" > Access Point: 04:F0:21:3E:DA:A2 > Mode: Client Channel: 48 (5.240 GHz) > Tx-Power: 8 dBm Link Quality: 70/70 > Signal: -33 dBm Noise: -102 dBm > Bit Rate: 6.0 MBit/s > Encryption: none > Type: nl80211 HW Mode(s): 802.11bgnac > Hardware: 168C:003C : [Qualcomm Atheros QCA9880] > TX power offset: none > Frequency offset: none > Supports VAPs: yes PHY name: phy0 > > Status of radio Node B > wlan0-mesh ESSID: "speedtest" > Access Point: 04:F0:21:3E:DA:A2 > Mode: Master Channel: 48 (5.240 GHz) > Tx-Power: 8 dBm Link Quality: 65/70 > Signal: -45 dBm Noise: -105 dBm > Bit Rate: 6.0 MBit/s > Encryption: none > Type: nl80211 HW Mode(s): 802.11bgnac > Hardware: 168C:003C : [Qualcomm Atheros QCA9880] > TX power offset: none > Frequency offset: none > Supports VAPs: yes PHY name: phy0 > > > Ping between radios > > root@FlatsEast:~# ping 10.69.0.1 > PING 10.69.0.1 (10.69.0.1) 56(84) bytes of data. > 64 bytes from 10.69.0.1: icmp_req=1 ttl=64 time=1.29 ms > 64 bytes from 10.69.0.1: icmp_req=2 ttl=64 time=1.22 ms > 64 bytes from 10.69.0.1: icmp_req=3 ttl=64 time=1.22 ms > > Used iperf to set throughput > Client side > iperf -c 10.69.0.1 -P 10 -i 5 -t 120 > > Server side > iperf -s > > Best performance achieved after waiting for TCP to stabalize: 139 Mbps > [ 12] 45.0-50.0 sec 11.8 MBytes 19.7 Mbits/sec > [ 11] 45.0-50.0 sec 7.12 MBytes 12.0 Mbits/sec > [ 9] 45.0-50.0 sec 8.12 MBytes 13.6 Mbits/sec > [ 6] 45.0-50.0 sec 7.75 MBytes 13.0 Mbits/sec > [ 8] 45.0-50.0 sec 8.00 MBytes 13.4 Mbits/sec > [ 4] 45.0-50.0 sec 7.75 MBytes 13.0 Mbits/sec > [ 3] 45.0-50.0 sec 7.75 MBytes 13.0 Mbits/sec > [ 10] 45.0-50.0 sec 6.62 MBytes 11.1 Mbits/sec > [ 7] 45.0-50.0 sec 7.88 MBytes 13.2 Mbits/sec > [ 5] 45.0-50.0 sec 9.88 MBytes 16.6 Mbits/sec > [SUM] 45.0-50.0 sec 82.6 MBytes 139 Mbits/sec > > top: > > Mem: 47064K used, 78232K free, 188K shrd, 3936K buff, 10564K cached > CPU: 19% usr 36% sys 0% nic 0% idle 0% io 0% irq 43% sirq > Load average: 4.59 3.06 1.90 3/74 25823 > PID PPID USER STAT VSZ %VSZ %CPU COMMAND > 3 2 root RW 0 0% 32% [ksoftirqd/0] > 24511 4419 root S33320 27% 22% iperf -c 10.69.0.1 -P 10 -i 5 -t 120 > > Any suggestions > > Regards > David > > -- > Dr David Johnson > Director, Ammbr Research Labs South Africa > Part of the AmmbrTech Group > http://www.ammbrtech.com > > Adjunct Senior Lecturer > ICT4D, Computer Science Department > University of Cape Town > https://people.cs.uct.ac.za/~djohnson/ ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] Fwd: RFT: ar71xx/mac80211 update
Hi Koen, I must've missed the git log entry when i pulled...correct rebuilding with the 4.14 kernel was a success. No issues thus far. Everything is working on my WNDR3700v4. Thank you, -paul On 10/4/18 1:56 AM, Koen Vandeputte wrote: > > > On 04-10-18 02:49, Paul Blazejowski wrote: >> Koen, >> >> Please see below, i don't know if John got my mail but i surely missed >> the updated mailing list address last time... >> >> If full console logs are needed, please let me know. >> >> Thank you, >> -paul >> >> > Hi Paul, > > I fixed this a while ago [1] > Could you rebuild/retest please? > > Thanks, > > Koen > > [1] > https://git.openwrt.org/?p=openwrt/openwrt.git;a=commit;h=42f158314e011293ffdaeab5870b19110f4e2e9d > ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] trying to acheive close to 1 Gbps with 802.11ac 3x3 mimo ath10k Compex wle900vx
> Any suggestions What have you tried in terms of channel bandwidth? Is this with 20MHz? 802.11ac goes up to 160 MHz, maybe you should try that. Chan 48 is also pretty low in the spectrum, maybe try some of the higher DFS channels, at least in dense city environments these tend to me much less used by other wifis. - Arne ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/mailman/listinfo/openwrt-devel
[OpenWrt-Devel] trying to acheive close to 1 Gbps with 802.11ac 3x3 mimo ath10k Compex wle900vx
I'm trying to see what max speed can be achieved My setup is as follow: Board: Compex WPJ 563 Card Compex wle900vx OS: Libremesh running openwrt 18.06 Driver: ath10k_pci :00:00.0: firmware ver 10.2.4-1.0-00033 api 5 features no-p2p,raw-mode,mfp,allows-mesh-bcast crc32 c41417d0 Firmware: firmware-5.bin_10.2.4-1.0-00041 Physical setup Connected 3 6dBi antennas on each side to CH0, CH1, CH2 port to achieve 3x3 mimo. Distance between 2 devices is 2m on a bench. Set power level on each end to 8 dBm to ensure I don't saturate radios Status of radio Node A iwinfo wlan0-mesh info wlan0-mesh ESSID: "speedtest" Access Point: 04:F0:21:3E:DA:A2 Mode: Client Channel: 48 (5.240 GHz) Tx-Power: 8 dBm Link Quality: 70/70 Signal: -33 dBm Noise: -102 dBm Bit Rate: 6.0 MBit/s Encryption: none Type: nl80211 HW Mode(s): 802.11bgnac Hardware: 168C:003C : [Qualcomm Atheros QCA9880] TX power offset: none Frequency offset: none Supports VAPs: yes PHY name: phy0 Status of radio Node B wlan0-mesh ESSID: "speedtest" Access Point: 04:F0:21:3E:DA:A2 Mode: Master Channel: 48 (5.240 GHz) Tx-Power: 8 dBm Link Quality: 65/70 Signal: -45 dBm Noise: -105 dBm Bit Rate: 6.0 MBit/s Encryption: none Type: nl80211 HW Mode(s): 802.11bgnac Hardware: 168C:003C : [Qualcomm Atheros QCA9880] TX power offset: none Frequency offset: none Supports VAPs: yes PHY name: phy0 Ping between radios root@FlatsEast:~# ping 10.69.0.1 PING 10.69.0.1 (10.69.0.1) 56(84) bytes of data. 64 bytes from 10.69.0.1: icmp_req=1 ttl=64 time=1.29 ms 64 bytes from 10.69.0.1: icmp_req=2 ttl=64 time=1.22 ms 64 bytes from 10.69.0.1: icmp_req=3 ttl=64 time=1.22 ms Used iperf to set throughput Client side iperf -c 10.69.0.1 -P 10 -i 5 -t 120 Server side iperf -s Best performance achieved after waiting for TCP to stabalize: 139 Mbps [ 12] 45.0-50.0 sec 11.8 MBytes 19.7 Mbits/sec [ 11] 45.0-50.0 sec 7.12 MBytes 12.0 Mbits/sec [ 9] 45.0-50.0 sec 8.12 MBytes 13.6 Mbits/sec [ 6] 45.0-50.0 sec 7.75 MBytes 13.0 Mbits/sec [ 8] 45.0-50.0 sec 8.00 MBytes 13.4 Mbits/sec [ 4] 45.0-50.0 sec 7.75 MBytes 13.0 Mbits/sec [ 3] 45.0-50.0 sec 7.75 MBytes 13.0 Mbits/sec [ 10] 45.0-50.0 sec 6.62 MBytes 11.1 Mbits/sec [ 7] 45.0-50.0 sec 7.88 MBytes 13.2 Mbits/sec [ 5] 45.0-50.0 sec 9.88 MBytes 16.6 Mbits/sec [SUM] 45.0-50.0 sec 82.6 MBytes 139 Mbits/sec top: Mem: 47064K used, 78232K free, 188K shrd, 3936K buff, 10564K cached CPU: 19% usr 36% sys 0% nic 0% idle 0% io 0% irq 43% sirq Load average: 4.59 3.06 1.90 3/74 25823 PID PPID USER STAT VSZ %VSZ %CPU COMMAND 3 2 root RW 0 0% 32% [ksoftirqd/0] 24511 4419 root S33320 27% 22% iperf -c 10.69.0.1 -P 10 -i 5 -t 120 Any suggestions Regards David -- Dr David Johnson Director, Ammbr Research Labs South Africa Part of the AmmbrTech Group http://www.ammbrtech.com Adjunct Senior Lecturer ICT4D, Computer Science Department University of Cape Town https://people.cs.uct.ac.za/~djohnson/ ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] [PATCH] image: ignore usign build errors
On 2018-10-02 22:50, Hauke Mehrtens wrote:
> The tl-wa850re-v2 images from the ar71xx/tiny target are getting too big
> with the default packages. The size check is done before the meta data
> is added so there is no file to add meta data to or to sign. Originally
> errors in Build/append-metadata were getting ignored, but if the signing
> fails the error is not ignored.
> This patch makes make ignore errors in the signing which is the case for
> too big images because then the needed file is not created in the
> previous process.
>
> Fixes: 848b455d2e94 ("image: use ucert to append signature")
> Signed-off-by: Hauke Mehrtens
> ---
> include/image-commands.mk | 2 +-
> 1 file changed, 1 insertion(+), 1 deletion(-)
>
> diff --git a/include/image-commands.mk b/include/image-commands.mk
> index ae01706b14..9f5876bccd 100644
> --- a/include/image-commands.mk
> +++ b/include/image-commands.mk
> @@ -332,7 +332,7 @@ metadata_json = \
>
> define Build/append-metadata
> $(if $(SUPPORTED_DEVICES),-echo $(call
> metadata_json,$(SUPPORTED_DEVICES)) | fwtool -I - $@)
> - [ ! -s "$(BUILD_KEY)" -o ! -s "$(BUILD_KEY).ucert" ] || { \
> + -[ ! -s "$(BUILD_KEY)" -o ! -s "$(BUILD_KEY).ucert" ] || { \
How about this instead?
[ ! -s "$(BUILD_KEY)" -o ! -s "$(BUILD_KEY).ucert" -o ! -s "$@" ] || ...
- Felix
___
openwrt-devel mailing list
openwrt-devel@lists.openwrt.org
https://lists.openwrt.org/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] Bumping ar71xx to 4.14
Citeren Koen Vandeputte : Hi All, Regarding bumping ar71xx to 4.14, from my point of view all known issues seem to be fixed. Therefore, I'm planning to actually make 4.14 the default for this target mid next week. If you still have issues which would not allow this, please let me know asap. (and provide a log of the issue please) Testing it can be done by either: - Checking out master tree, and altering "target/linux/ar71xx/Makefile" --> KERNEL_PATCHVER:=4.9 to KERNEL_PATCHVER:=4.14 - Checking out my staging tree (branch ar71xx_414) which has 4.14 enabled by default. [1] Just installed on a Netgear WNDR4300v1 -> OK. Thanks, Koen [1] https://git.openwrt.org/?p=openwrt/staging/xback.git;a=shortlog;h=refs/heads/ar71xx_414 ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/mailman/listinfo/openwrt-devel ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] router unielec U7628-01 won't boot - step to track down the problem ?
i have written to the builder, and he sends me the breed bin file (and uboot too) , writing breed to flash , the router start with openwrt without problem ... the the problem is how breed and uboot act at startup process ? what are the differences? Il 01/10/18 01:23, davidea ha scritto: i have buied a router from unielec, the second unit , but this time the router , arrived in working perfect condition with the factory firmware (openwrt custom) , when i try to flash the last firmware , won't boot ... i make some test , i hope in the right direction , but now i don't have enough skill to track down the problem. i make a log with the original firmware : https://pastebin.com/Sa2XGiDP after this i write to flash the openwrt 18.06.1 https://pastebin.com/MVsqxpCS the router doesn't boot , all led are off , eth is up but no data come from the router , in the serial consolle if i hit enter , nothings happen then i decide to try the snapshot , from 27 september , https://pastebin.com/wLPNFB9h i obtain [ 1.709386] Unhandled kernel unaligned access[#1]: i try then to make my own snapshot, clone the repo , enable the "target image : ramdisk" , adjust the dtsi to set the serial speed the same as the bootloader compile boot to ram : https://pastebin.com/MzTDc7Ac boot from flash after writing to flash : https://pastebin.com/bGJX4gVR in one of my test (not reported here) i see sometimes , i have an error about root filsystem not set , then i add the filesystem path in the dtsi file , recompile and test boot to ram : https://pastebin.com/rH6s9Dfe boot from flash after writing to flash : https://pastebin.com/FTYuC0k4 if i write to the flash the original bin firmware, all come back ok, the only difference between the two unit is that the first have a breed bootloader this one have u-boot , but the developer , tell me that the firmware they made is the same for both bootloader now: is correct to enable the "target image : ramdisk" to make the test? are they valid as when i flash the firmware? is necessary to set the filesystem path? someone can point me on a more clear (for me) paper about the flash structure , and how it is detected? unfortunately i'm unable to resolve this error, then i need some big help from the comunity , but i can make the test ... if needed the maker grant me the permission to share the bin file , but not the source code about this image ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/mailman/listinfo/openwrt-devel ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/mailman/listinfo/openwrt-devel
[OpenWrt-Devel] Bumping ar71xx to 4.14
Hi All, Regarding bumping ar71xx to 4.14, from my point of view all known issues seem to be fixed. Therefore, I'm planning to actually make 4.14 the default for this target mid next week. If you still have issues which would not allow this, please let me know asap. (and provide a log of the issue please) Testing it can be done by either: - Checking out master tree, and altering "target/linux/ar71xx/Makefile" --> KERNEL_PATCHVER:=4.9 to KERNEL_PATCHVER:=4.14 - Checking out my staging tree (branch ar71xx_414) which has 4.14 enabled by default. [1] Thanks, Koen [1] https://git.openwrt.org/?p=openwrt/staging/xback.git;a=shortlog;h=refs/heads/ar71xx_414 ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/mailman/listinfo/openwrt-devel
