Karsten Sperling 8a6ae95526 hostapd: mbedtls EAP-TLS peer 3.6.3+ compatibility ...

Mbed TLS 3.6.3 (and 2.28.10) introduced the requirement to set or
explicitly clear the hostname when verifying a server certificate,
otherwise verification fails with
MBEDTLS_ERR_SSL_CERTIFICATE_VERIFICATION_WITHOUT_HOSTNAME. Clearing the
hostname allows EAP-TLS to work correctly in the peer / supplicant role
on those Mbed TLS versions.

https://mbed-tls.readthedocs.io/en/latest/kb/attacks/ssl_set_hostname/

Signed-off-by: Karsten Sperling <ksperling@apple.com>
Link: https://github.com/openwrt/openwrt/pull/25552
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

2026-10-04 17:52:54 +02:00

..

base-files

base-files: keep kernel and rootfs UBI volume IDs with provisioning

2026-10-01 22:29:55 +02:00

boot

qualcommax: add support for TP-Link RE700X

2026-10-03 20:17:43 +02:00

devel

kselftests-bpf: isolate target userspace compiler flags

2026-09-29 09:29:09 +02:00

firmware

wireless-regdb: update to version 2026.09.03

2026-10-03 22:22:41 +02:00

kernel

kernel: leds-st1202: load the module in preinit

2026-10-04 17:15:03 +02:00

libs

pcre2: enable JIT on riscv64 and loongarch64

2026-10-04 11:39:40 +02:00

network

hostapd: mbedtls EAP-TLS peer 3.6.3+ compatibility

2026-10-04 17:52:54 +02:00

system

rpcd: update to Git HEAD (2026-10-04)

2026-10-04 17:05:52 +02:00

utils

provision: name the create command in the not-found message

2026-09-29 17:29:25 +02:00

Makefile

package: reuse the rootfs if its inputs did not change

2026-09-22 18:18:58 +02:00