From mboxrd@z Thu Jan 1 00:00:00 1970 From: Peter =?utf-8?q?M=C3=BCller?= To: development@lists.ipfire.org Subject: Re: [PATCH 2/2] wpa_supplicant: Update to 2.10 Date: Fri, 18 Feb 2022 17:53:41 +0000 Message-ID: <37c895a8-9221-c465-c213-2f22dd206f1d@ipfire.org> In-Reply-To: <20220218171336.4024505-2-matthias.fischer@ipfire.org> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============1027736246843249756==" List-Id: --===============1027736246843249756== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Reviewed-by: Peter M=C3=BCller > For details see: > https://w1.fi/cgit/hostap/plain/wpa_supplicant/ChangeLog >=20 > "2022-01-16 - v2.10 > * SAE changes > - improved protection against side channel attacks > [https://w1.fi/security/2022-1/] > - added support for the hash-to-element mechanism (sae_pwe=3D1 or > sae_pwe=3D2); this is currently disabled by default, but will likely > get enabled by default in the future > - fixed PMKSA caching with OKC > - added support for SAE-PK > * EAP-pwd changes > - improved protection against side channel attacks > [https://w1.fi/security/2022-1/] > * fixed P2P provision discovery processing of a specially constructed > invalid frame > [https://w1.fi/security/2021-1/] > * fixed P2P group information processing of a specially constructed > invalid frame > [https://w1.fi/security/2020-2/] > * fixed PMF disconnection protection bypass in AP mode > [https://w1.fi/security/2019-7/] > * added support for using OpenSSL 3.0 > * increased the maximum number of EAP message exchanges (mainly to > support cases with very large certificates) > * fixed various issues in experimental support for EAP-TEAP peer > * added support for DPP release 2 (Wi-Fi Device Provisioning Protocol) > * a number of MKA/MACsec fixes and extensions > * added support for SAE (WPA3-Personal) AP mode configuration > * added P2P support for EDMG (IEEE 802.11ay) channels > * fixed EAP-FAST peer with TLS GCM/CCM ciphers > * improved throughput estimation and BSS selection > * dropped support for libnl 1.1 > * added support for nl80211 control port for EAPOL frame TX/RX > * fixed OWE key derivation with groups 20 and 21; this breaks backwards > compatibility for these groups while the default group 19 remains > backwards compatible > * added support for Beacon protection > * added support for Extended Key ID for pairwise keys > * removed WEP support from the default build (CONFIG_WEP=3Dy can be used > to enable it, if really needed) > * added a build option to remove TKIP support (CONFIG_NO_TKIP=3Dy) > * added support for Transition Disable mechanism to allow the AP to > automatically disable transition mode to improve security > * extended D-Bus interface > * added support for PASN > * added a file-based backend for external password storage to allow > secret information to be moved away from the main configuration file > without requiring external tools > * added EAP-TLS peer support for TLS 1.3 (disabled by default for now) > * added support for SCS, MSCS, DSCP policy > * changed driver interface selection to default to automatic fallback > to other compiled in options > * a large number of other fixes, cleanup, and extensions" >=20 > Signed-off-by: Matthias Fischer > --- > lfs/wpa_supplicant | 15 ++++++++------- > 1 file changed, 8 insertions(+), 7 deletions(-) >=20 > diff --git a/lfs/wpa_supplicant b/lfs/wpa_supplicant > index c64b6aab4..ad9150611 100644 > --- a/lfs/wpa_supplicant > +++ b/lfs/wpa_supplicant > @@ -1,7 +1,7 @@ > #########################################################################= ###### > # = # > # IPFire.org - A linux based firewall = # > -# Copyright (C) 2007-2019 IPFire Team = # > +# Copyright (C) 2007-2022 IPFire Team = # > # = # > # This program is free software: you can redistribute it and/or modify = # > # it under the terms of the GNU General Public License as published by = # > @@ -24,13 +24,14 @@ > =20 > include Config > =20 > -VER =3D 581dfcc > +VER =3D 2.10 > =20 > THISAPP =3D wpa_supplicant-$(VER) > -DL_FILE =3D hostapd-$(VER).tar.gz > +DL_FILE =3D $(THISAPP).tar.gz > DL_FROM =3D $(URL_IPFIRE) > -DIR_APP =3D $(DIR_SRC)/hostap-$(VER) > +DIR_APP =3D $(DIR_SRC)/$(THISAPP) > TARGET =3D $(DIR_INFO)/$(THISAPP) > +PROG =3D wpa_supplicant > =20 > #########################################################################= ###### > # Top-level Rules > @@ -40,7 +41,7 @@ objects =3D $(DL_FILE) > =20 > $(DL_FILE) =3D $(DL_FROM)/$(DL_FILE) > =20 > -$(DL_FILE)_MD5 =3D eed922f2daabe16d74adf2b23455d8bd > +$(DL_FILE)_MD5 =3D d26797fcb002898d4ee989179346e1cc > =20 > install : $(TARGET) > =20 > @@ -73,10 +74,10 @@ $(subst %,%_MD5,$(objects)) : > $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) > @$(PREBUILD) > @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar zxf $(DIR_DL)/$(DL_FILE) > + > cd $(DIR_APP)/wpa_supplicant && cp $(DIR_SRC)/config/wpa_supplicant/conf= ig ./.config > cd $(DIR_APP)/wpa_supplicant && sed -e "s/wpa_cli\ dynamic_eap_methods/w= pa_cli\ #dynamic_eap_methods/" -i Makefile > cd $(DIR_APP)/wpa_supplicant && sed -e "s@/usr/local@/usr(a)g" -i Makefi= le > - cd $(DIR_APP)/wpa_supplicant && make $(MAKETUNING) > - cd $(DIR_APP)/wpa_supplicant && make install > + cd $(DIR_APP)/wpa_supplicant && make && make install > @rm -rf $(DIR_APP) > @$(POSTBUILD) --===============1027736246843249756==--