Difuse/luci
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

luci-mod-admin-full: wifi: expose "wpa_disable_eapol_key_retries" option

Browse source 
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
This commit is contained in:
Jo-Philipp Wich 2017-10-17 22:19:08 +02:00
parent 27fbdada6c
commit 48ed00e5b9
1 changed files with 11 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
modules/luci-mod-admin-full/luasrc/model/cbi/admin_network/wifi.lua
View file

@ -1018,6 +1018,17 @@ if hwtype == "mac80211" then
retry_timeout.placeholder = "201" retry_timeout.placeholder = "201"
retry_timeout.rmempty = true retry_timeout.rmempty = true
end end
local key_retries = s:taboption("encryption", Flag, "wpa_disable_eapol_key_retries",
translate("Enable key reinstallation (KRACK) countermeasures"),
translate("Works around key reinstallation attacks on the client side by disabling retransmission of EAPOL-Key frames that are used to install keys. This workaround might cause interoperability issues and reduced robustness of key negotiation especially in environments with heavy traffic load."))
key_retries:depends({mode="ap", encryption="wpa2"})
key_retries:depends({mode="ap", encryption="psk2"})
key_retries:depends({mode="ap", encryption="psk-mixed"})
key_retries:depends({mode="ap-wds", encryption="wpa2"})
key_retries:depends({mode="ap-wds", encryption="psk2"})
key_retries:depends({mode="ap-wds", encryption="psk-mixed"})
end end
if hwtype == "mac80211" or hwtype == "prism2" then if hwtype == "mac80211" or hwtype == "prism2" then