1
0

173 Commits

Author SHA256 Message Date
Dominique Leuenberger
837091b653 Accepting request 986870 from hardware
OBS-URL: https://build.opensuse.org/request/show/986870
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/wpa_supplicant?expand=0&rev=92
2022-07-08 12:01:31 +00:00
20be233a72 Accepting request 986868 from home:cfconrad:branches:hardware
- Add dbus-Fix-property-DebugShowKeys-and-DebugTimestamp.patch
  (bsc#1201219)

OBS-URL: https://build.opensuse.org/request/show/986868
OBS-URL: https://build.opensuse.org/package/show/hardware/wpa_supplicant?expand=0&rev=137
2022-07-05 13:43:43 +00:00
870f6d03c9 OBS-URL: https://build.opensuse.org/package/show/hardware/wpa_supplicant?expand=0&rev=136 2022-06-21 12:00:58 +00:00
50bb343a0c Accepting request 984114 from home:gmbr3:Active
no %config for /usr (amend last)

OBS-URL: https://build.opensuse.org/request/show/984114
OBS-URL: https://build.opensuse.org/package/show/hardware/wpa_supplicant?expand=0&rev=135
2022-06-21 11:57:23 +00:00
288b9b5587 Accepting request 984149 from home:cfconrad:branches:hardware
- Remove Revert-DBus-Add-sae-to-interface-key_mgmt-capabilities.patch
  Fixed in NetworkManager (glfo#NetworkManager/NetworkManager#a0988868). 
  Wifi cards, wich do not support PMF/BIP ciphers, should not use 
  SAE as key management. (bsc#1195312)

OBS-URL: https://build.opensuse.org/request/show/984149
OBS-URL: https://build.opensuse.org/package/show/hardware/wpa_supplicant?expand=0&rev=134
2022-06-21 11:49:06 +00:00
797db382fd Accepting request 984102 from home:schubi2
- Moved logrotate files from user specif directory /etc/logrotate.d
  to vendor specif directory /usr/etc/logrotate.d.

OBS-URL: https://build.opensuse.org/request/show/984102
OBS-URL: https://build.opensuse.org/package/show/hardware/wpa_supplicant?expand=0&rev=133
2022-06-21 08:00:55 +00:00
a0ad97358e Accepting request 981333 from home:gmbr3:Active
- Move the dbus-1 system.d file to /usr (bsc#1200342)

OBS-URL: https://build.opensuse.org/request/show/981333
OBS-URL: https://build.opensuse.org/package/show/hardware/wpa_supplicant?expand=0&rev=132
2022-06-09 07:48:21 +00:00
Dominique Leuenberger
626ccc04fb Accepting request 952645 from hardware
OBS-URL: https://build.opensuse.org/request/show/952645
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/wpa_supplicant?expand=0&rev=91
2022-02-10 22:11:30 +00:00
4664420d0a Accepting request 952644 from home:dirkmueller:Factory
- Apply Revert-DBus-Add-sae-to-interface-key_mgmt-capabilities.patch
  to fix connect with AVM FB, if WPA3 transition mode is activated,
  e.g. Wifi -> Security: is WPA2 + WPA3, alt. switch to WPA2 (CCMP)
  (bsc#1195312)

- drop restore-old-dbus-interface.patch, wicked has been
  switching to the new dbus interface in version 0.6.66.
- drop wpa_supplicant-getrandom.patch : glibc has been updated
  so the getrandom() wrapper is now there
- config:
  * enable QCA vendor extensions to nl80211
  * enable EAP-EKE
  * Support HT overrides
  * WPA3-Enterprise 
  * TLS v1.1 and TLS v1.2
  * Fast Session Transfer (FST)
  * Automatic Channel Selection
  * Multi Band Operation
  * Fast Initial Link Setup
  * Mesh Networking (IEEE 802.11s)

- config: 
  * Reenable Fast BSS Transition (likely fixing bsc#1195312)
  * Enable OCV, security feature that prevents MITM
    multi-channel attacks
  * Enable OWE for better hotspot support

OBS-URL: https://build.opensuse.org/request/show/952644
OBS-URL: https://build.opensuse.org/package/show/hardware/wpa_supplicant?expand=0&rev=131
2022-02-08 10:24:23 +00:00
Dominique Leuenberger
5dc06d5e03 Accepting request 948420 from hardware
OBS-URL: https://build.opensuse.org/request/show/948420
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/wpa_supplicant?expand=0&rev=90
2022-01-26 20:26:39 +00:00
a7a45f374a Accepting request 948384 from home:dirkmueller:Factory
- update to 2.10.0:
  * SAE changes
    - improved protection against side channel attacks
      [https://w1.fi/security/2022-1/]
    - added support for the hash-to-element mechanism (sae_pwe=1 or
      sae_pwe=2); this is currently disabled by default, but will likely
      get enabled by default in the future
    - fixed PMKSA caching with OKC
    - added support for SAE-PK
  * EAP-pwd changes
    - improved protection against side channel attacks
    [https://w1.fi/security/2022-1/]
  * fixed P2P provision discovery processing of a specially constructed
    invalid frame
    [https://w1.fi/security/2021-1/]
  * fixed P2P group information processing of a specially constructed
    invalid frame
    [https://w1.fi/security/2020-2/]
  * fixed PMF disconnection protection bypass in AP mode
    [https://w1.fi/security/2019-7/]
  * added support for using OpenSSL 3.0
  * increased the maximum number of EAP message exchanges (mainly to
    support cases with very large certificates)
  * fixed various issues in experimental support for EAP-TEAP peer
  * added support for DPP release 2 (Wi-Fi Device Provisioning Protocol)
  * a number of MKA/MACsec fixes and extensions
  * added support for SAE (WPA3-Personal) AP mode configuration
  * added P2P support for EDMG (IEEE 802.11ay) channels
  * fixed EAP-FAST peer with TLS GCM/CCM ciphers
  * improved throughput estimation and BSS selection

OBS-URL: https://build.opensuse.org/request/show/948384
OBS-URL: https://build.opensuse.org/package/show/hardware/wpa_supplicant?expand=0&rev=130
2022-01-24 14:43:51 +00:00
Dominique Leuenberger
1ab7f86383 Accepting request 945257 from hardware
OBS-URL: https://build.opensuse.org/request/show/945257
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/wpa_supplicant?expand=0&rev=89
2022-01-10 23:01:41 +00:00
41deaf30e9 Accepting request 945228 from home:jsegitz:branches:systemdhardening:hardware
- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * wpa_supplicant.service

OBS-URL: https://build.opensuse.org/request/show/945228
OBS-URL: https://build.opensuse.org/package/show/hardware/wpa_supplicant?expand=0&rev=129
2022-01-10 10:18:03 +00:00
Richard Brown
102e733879 Accepting request 883362 from hardware
OBS-URL: https://build.opensuse.org/request/show/883362
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/wpa_supplicant?expand=0&rev=88
2021-04-10 13:26:27 +00:00
4adb0ea4de Accepting request 883361 from home:cfconrad:branches:hardware
- Add CVE-2021-30004.patch -- forging attacks may occur because
  AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c
  (bsc#1184348)

OBS-URL: https://build.opensuse.org/request/show/883361
OBS-URL: https://build.opensuse.org/package/show/hardware/wpa_supplicant?expand=0&rev=127
2021-04-06 15:47:56 +00:00
Dominique Leuenberger
59e2dcec17 Accepting request 878125 from hardware
- Fix systemd device ready dependencies in wpa_supplicant@.service file.
  (see: https://forums.opensuse.org/showthread.php/547186-wpa_supplicant-service-fails-on-boot-succeeds-on-restart?p=2982844#post2982844)

OBS-URL: https://build.opensuse.org/request/show/878125
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/wpa_supplicant?expand=0&rev=87
2021-03-12 12:30:17 +00:00
Dominique Leuenberger
f1ed444be5 Accepting request 875681 from hardware
OBS-URL: https://build.opensuse.org/request/show/875681
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/wpa_supplicant?expand=0&rev=86
2021-03-10 07:48:06 +00:00
e1f02c1fff - Fix systemd device ready dependencies in wpa_supplicant@.service file.
(see: https://forums.opensuse.org/showthread.php/547186-wpa_supplicant-service-fails-on-boot-succeeds-on-restart?p=2982844#post2982844)

OBS-URL: https://build.opensuse.org/package/show/hardware/wpa_supplicant?expand=0&rev=124
2021-03-03 15:36:52 +00:00
f57df46bf0 Accepting request 848179 from home:awerlang:branches:openSUSE:Factory
When passing the -i argument to wpa_supplicant, the device needs to be available and ready. This fulfills the dependencies.

See: https://forums.opensuse.org/showthread.php/547186-wpa_supplicant-service-fails-on-boot-succeeds-on-restart?p=2982844#post2982844

OBS-URL: https://build.opensuse.org/request/show/848179
OBS-URL: https://build.opensuse.org/package/show/hardware/wpa_supplicant?expand=0&rev=123
2021-03-03 15:20:49 +00:00
941d4fb988 Accepting request 875680 from home:cfconrad:branches:hardware
- Add CVE-2021-27803.patch -- P2P provision discovery processing vulnerability
  (bsc#1182805)

OBS-URL: https://build.opensuse.org/request/show/875680
OBS-URL: https://build.opensuse.org/package/show/hardware/wpa_supplicant?expand=0&rev=122
2021-02-27 23:26:49 +00:00
Dominique Leuenberger
fc08349070 Accepting request 869590 from hardware
OBS-URL: https://build.opensuse.org/request/show/869590
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/wpa_supplicant?expand=0&rev=85
2021-02-11 11:46:54 +00:00
e4b9de02a1 Accepting request 869589 from home:cfconrad:branches:hardware
- Add CVE-2021-0326.patch -- P2P group information processing vulnerability 
  (bsc#1181777)

OBS-URL: https://build.opensuse.org/request/show/869589
OBS-URL: https://build.opensuse.org/package/show/hardware/wpa_supplicant?expand=0&rev=120
2021-02-04 22:38:02 +00:00
Dominique Leuenberger
cc048c0f59 Accepting request 844881 from hardware
OBS-URL: https://build.opensuse.org/request/show/844881
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/wpa_supplicant?expand=0&rev=84
2020-11-02 08:40:26 +00:00
4a7547fe47 Accepting request 844873 from home:cfconrad:branches:hardware
Add bsc references to changelog.
Remove trailing white-space in wpa_supplicant.service file.

Reason: We are going to submit this hardware/wpa_supplicant to SLE-12 and SLE-15. This is a preparation for the submission.

OBS-URL: https://build.opensuse.org/request/show/844873
OBS-URL: https://build.opensuse.org/package/show/hardware/wpa_supplicant?expand=0&rev=118
2020-10-29 13:43:58 +00:00
Dominique Leuenberger
07560bc1a6 Accepting request 844643 from hardware
OBS-URL: https://build.opensuse.org/request/show/844643
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/wpa_supplicant?expand=0&rev=83
2020-10-29 08:21:41 +00:00
5ade233f96 Accepting request 844642 from home:cfconrad:branches:hardware
Add missing CVE references to changelog

OBS-URL: https://build.opensuse.org/request/show/844642
OBS-URL: https://build.opensuse.org/package/show/hardware/wpa_supplicant?expand=0&rev=116
2020-10-28 16:26:39 +00:00
Dominique Leuenberger
6745ba0f93 Accepting request 841440 from hardware
OBS-URL: https://build.opensuse.org/request/show/841440
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/wpa_supplicant?expand=0&rev=82
2020-10-13 13:32:46 +00:00
53ebe937fe Accepting request 841374 from home:JonathanKang:branches:hardware
add missing changelog entry comparing with SUSE:SLE-15:Update/wpa_supplicant

OBS-URL: https://build.opensuse.org/request/show/841374
OBS-URL: https://build.opensuse.org/package/show/hardware/wpa_supplicant?expand=0&rev=114
2020-10-13 08:56:10 +00:00
Dominique Leuenberger
ce315d5d06 Accepting request 839970 from hardware
OBS-URL: https://build.opensuse.org/request/show/839970
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/wpa_supplicant?expand=0&rev=81
2020-10-08 11:09:48 +00:00
35d1871565 Accepting request 839844 from home:sp1rit:testing
- Add wpa_supplicant-p2p_iname_size.diff -- Limit P2P_DEVICE name to appropriate ifname size
  (https://patchwork.ozlabs.org/project/hostap/patch/20200825062902.124600-1-benjamin@sipsolutions.net/)

OBS-URL: https://build.opensuse.org/request/show/839844
OBS-URL: https://build.opensuse.org/package/show/hardware/wpa_supplicant?expand=0&rev=112
2020-10-07 08:35:57 +00:00
Dominique Leuenberger
5b8a0cf006 Accepting request 836233 from hardware
OBS-URL: https://build.opensuse.org/request/show/836233
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/wpa_supplicant?expand=0&rev=80
2020-09-25 14:21:07 +00:00
f63f8abb35 Accepting request 836232 from home:cfconrad:branches:hardware
Just use make %{?_smp_mflags} everywhere.

OBS-URL: https://build.opensuse.org/request/show/836232
OBS-URL: https://build.opensuse.org/package/show/hardware/wpa_supplicant?expand=0&rev=110
2020-09-23 07:50:18 +00:00
8c6d01227d Accepting request 836103 from home:cfconrad:branches:hardware
- Fix spec file for SLE12,  use `make %{?_smp_mflags}` if `%make_build` isn't available

OBS-URL: https://build.opensuse.org/request/show/836103
OBS-URL: https://build.opensuse.org/package/show/hardware/wpa_supplicant?expand=0&rev=109
2020-09-22 13:58:46 +00:00
091145ab3c Accepting request 836014 from home:JonathanKang:branches:hardware
- Enable SAE support(jsc#SLE-14992).

OBS-URL: https://build.opensuse.org/request/show/836014
OBS-URL: https://build.opensuse.org/package/show/hardware/wpa_supplicant?expand=0&rev=108
2020-09-22 11:22:29 +00:00
Dominique Leuenberger
f3f5f1884e Accepting request 797131 from hardware
- Add CVE-2019-16275.patch -- AP mode PMF disconnection protection bypass
  (bsc#1150934)

OBS-URL: https://build.opensuse.org/request/show/797131
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/wpa_supplicant?expand=0&rev=79
2020-04-27 21:30:40 +00:00
ca77b227b2 - Mention CVE-2019-16275.patch file in changelog
OBS-URL: https://build.opensuse.org/package/show/hardware/wpa_supplicant?expand=0&rev=106
2020-04-24 11:14:03 +00:00
c1f7bb5b81 Accepting request 797068 from home:cfconrad:branches:hardware
- Add patch for CVE-2019-16275 -- AP mode PMF disconnection protection bypass
  (bsc#1150934)

OBS-URL: https://build.opensuse.org/request/show/797068
OBS-URL: https://build.opensuse.org/package/show/hardware/wpa_supplicant?expand=0&rev=105
2020-04-24 08:53:30 +00:00
Dominique Leuenberger
51b9758396 Accepting request 796019 from hardware
OBS-URL: https://build.opensuse.org/request/show/796019
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/wpa_supplicant?expand=0&rev=78
2020-04-23 16:29:10 +00:00
f39821cc83 Accepting request 796014 from home:bmwiedemann
Add restore-old-dbus-interface.patch to fix wicked wlan (boo#1156920)
- Restore fi.epitest.hostap.WPASupplicant.service (bsc#1167331)

OBS-URL: https://build.opensuse.org/request/show/796014
OBS-URL: https://build.opensuse.org/package/show/hardware/wpa_supplicant?expand=0&rev=103
2020-04-21 09:49:29 +00:00
Dominique Leuenberger
2049ed9eaf Accepting request 789823 from hardware
OBS-URL: https://build.opensuse.org/request/show/789823
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/wpa_supplicant?expand=0&rev=77
2020-04-04 10:18:07 +00:00
3e51878eb7 Accepting request 789822 from home:cfconrad:branches:hardware
Change changelog

OBS-URL: https://build.opensuse.org/request/show/789822
OBS-URL: https://build.opensuse.org/package/show/hardware/wpa_supplicant?expand=0&rev=101
2020-03-30 15:15:50 +00:00
08b959e307 Accepting request 788906 from home:cfconrad:branches:hardware
- Delete obsolete fi.epitest.hostap.WPASupplicant.service (bsc#1167331)

OBS-URL: https://build.opensuse.org/request/show/788906
OBS-URL: https://build.opensuse.org/package/show/hardware/wpa_supplicant?expand=0&rev=100
2020-03-27 08:30:43 +00:00
ef6a9184d6 Accepting request 788471 from home:13ilya:branches:hardware
- Changed wpa_supplicant.service file for wicked. (boo#1166933)

OBS-URL: https://build.opensuse.org/request/show/788471
OBS-URL: https://build.opensuse.org/package/show/hardware/wpa_supplicant?expand=0&rev=99
2020-03-26 16:10:08 +00:00
Dominique Leuenberger
c399e0d733 Accepting request 745943 from hardware
OBS-URL: https://build.opensuse.org/request/show/745943
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/wpa_supplicant?expand=0&rev=76
2019-11-11 11:57:37 +00:00
Tomáš Chvátal
097b103e9e Accepting request 745147 from home:scarabeus_iv:branches:hardware
- Update to 2.9 release:
   * SAE changes
     - disable use of groups using Brainpool curves
     - improved protection against side channel attacks
     [https://w1.fi/security/2019-6/]
   * EAP-pwd changes
     - disable use of groups using Brainpool curves
     - allow the set of groups to be configured (eap_pwd_groups)
     - improved protection against side channel attacks
     [https://w1.fi/security/2019-6/]
   * fixed FT-EAP initial mobility domain association using PMKSA caching
     (disabled by default for backwards compatibility; can be enabled
     with ft_eap_pmksa_caching=1)
   * fixed a regression in OpenSSL 1.1+ engine loading
   * added validation of RSNE in (Re)Association Response frames
   * fixed DPP bootstrapping URI parser of channel list
   * extended EAP-SIM/AKA fast re-authentication to allow use with FILS
   * extended ca_cert_blob to support PEM format
   * improved robustness of P2P Action frame scheduling
   * added support for EAP-SIM/AKA using anonymous@realm identity
   * fixed Hotspot 2.0 credential selection based on roaming consortium
     to ignore credentials without a specific EAP method
   * added experimental support for EAP-TEAP peer (RFC 7170)
   * added experimental support for EAP-TLS peer with TLS v1.3
   * fixed a regression in WMM parameter configuration for a TDLS peer
   * fixed a regression in operation with drivers that offload 802.1X
     4-way handshake
   * fixed an ECDH operation corner case with OpenSSL
   * SAE changes
     - added support for SAE Password Identifier

OBS-URL: https://build.opensuse.org/request/show/745147
OBS-URL: https://build.opensuse.org/package/show/hardware/wpa_supplicant?expand=0&rev=97
2019-11-06 11:42:31 +00:00
Dominique Leuenberger
890dcf38d2 Accepting request 719803 from hardware
- Refresh spec-file via spec-cleaner and manual optimizations.
  * Change URL and Source0 to actual project homepage.
  * Remove macro %{?systemd_requires} and rm (not needed).
  * Add %autopatch macro.
  * Add %make_build macro.
- Chenged patch wpa_supplicant-flush-debug-output.patch (to -p1).
- Changed service-files for start after network (systemd-networkd).

OBS-URL: https://build.opensuse.org/request/show/719803
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/wpa_supplicant?expand=0&rev=75
2019-08-05 08:29:21 +00:00
Karol Babioch
76b2d2e9d4 Accepting request 719580 from home:13ilya
- Refresh spec-file via spec-cleaner and manual optimizations.
  * Change URL and Source0 to actual project homepage.
  * Remove macro %{?systemd_requires} and rm (not needed).
  * Add %autopatch macro.
  * Add %make_build macro.
- Chenged patch wpa_supplicant-flush-debug-output.patch (to -p1).
- Changed service-files for start after network (systemd-networkd).

OBS-URL: https://build.opensuse.org/request/show/719580
OBS-URL: https://build.opensuse.org/package/show/hardware/wpa_supplicant?expand=0&rev=95
2019-07-29 13:10:56 +00:00
Dominique Leuenberger
a1b77f6c80 Accepting request 653718 from hardware
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/653718
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/wpa_supplicant?expand=0&rev=74
2018-12-10 11:25:58 +00:00
Karol Babioch
d5648d5394 - Refresh spec-file: add %license tag.
OBS-URL: https://build.opensuse.org/package/show/hardware/wpa_supplicant?expand=0&rev=93
2018-11-02 13:28:04 +00:00
Karol Babioch
39f5664865 osc copypac from project:hardware package:wpa_supplicant revision:90
OBS-URL: https://build.opensuse.org/package/show/hardware/wpa_supplicant?expand=0&rev=92
2018-11-02 13:22:42 +00:00