forked from pool/wpa_supplicant
Clemens Famulla-Conrad
d3a95bf049
* Wi-Fi Easy Connect - add support for DPP release 3 - allow Configurator parameters to be provided during config exchange * HE/IEEE 802.11ax/Wi-Fi 6 - various fixes * EHT/IEEE 802.11be/Wi-Fi 7 - add preliminary support * SAE: add support for fetching the password from a RADIUS server * support OpenSSL 3.0 API changes * support background radar detection and CAC with some additional drivers * support RADIUS ACL/PSK check during 4-way handshake (wpa_psk_radius=3) * EAP-SIM/AKA: support IMSI privacy * improve 4-way handshake operations - use Secure=1 in message 3 during PTK rekeying * OCV: do not check Frequency Segment 1 Channel Number for 160 MHz cases to avoid interoperability issues * support new SAE AKM suites with variable length keys * support new AKM for 802.1X/EAP with SHA384 * extend PASN support for secure ranging * FT: Use SHA256 to derive PMKID for AKM 00-0F-AC:3 (FT-EAP) - this is based on additional details being added in the IEEE 802.11 standard - the new implementation is not backwards compatible * improved ACS to cover additional channel types/bandwidths * extended Multiple BSSID support * fix beacon protection with FT protocol (incorrect BIGTK was provided) * support unsynchronized service discovery (USD) * add preliminary support for RADIUS/TLS * add support for explicit SSID protection in 4-way handshake (a mitigation for CVE-2023-52424; disabled by default for now, can be enabled with ssid_protection=1) * fix SAE H2E rejected groups validation to avoid downgrade attacks * use stricter validation for some RADIUS messages * a large number of other fixes, cleanup, and extensions - refresh patches: wpa_supplicant-dump-certificate-as-PEM-in-debug-mode.diff wpa_supplicant-sigusr1-changes-debuglevel.patch - drop patches: CVE-2023-52160.patche dbus-Fix-property-DebugShowKeys-and-DebugTimestamp.patch OBS-URL: https://build.opensuse.org/package/show/hardware/wpa_supplicant?expand=0&rev=145
175 lines
6.4 KiB
RPMSpec
175 lines
6.4 KiB
RPMSpec
#
|
|
# spec file for package wpa_supplicant
|
|
#
|
|
# Copyright (c) 2024 SUSE LLC
|
|
#
|
|
# All modifications and additions to the file contributed by third parties
|
|
# remain the property of their copyright owners, unless otherwise agreed
|
|
# upon. The license for this file, and modifications and additions to the
|
|
# file, is the same license as for the pristine package itself (unless the
|
|
# license for the pristine package is not an Open Source License, in which
|
|
# case the license is the MIT License). An "Open Source License" is a
|
|
# license that conforms to the Open Source Definition (Version 1.9)
|
|
# published by the Open Source Initiative.
|
|
|
|
# Please submit bugfixes or comments via https://bugs.opensuse.org/
|
|
#
|
|
|
|
|
|
Name: wpa_supplicant
|
|
Version: 2.11
|
|
Release: 0
|
|
Summary: WPA supplicant implementation
|
|
License: BSD-3-Clause AND GPL-2.0-or-later
|
|
URL: https://w1.fi/wpa_supplicant
|
|
Source0: https://w1.fi/releases/%{name}-%{version}.tar.gz
|
|
Source1: config
|
|
Source2: %{name}.conf
|
|
Source3: fi.epitest.hostap.WPASupplicant.service
|
|
Source4: logrotate.wpa_supplicant
|
|
Source5: fi.w1.wpa_supplicant1.service
|
|
Source6: wpa_supplicant.service
|
|
Source7: wpa_supplicant@.service
|
|
# wpa_supplicant-flush-debug-output.patch won't go upstream as it might
|
|
# change timings
|
|
Patch1: wpa_supplicant-flush-debug-output.patch
|
|
# wpa_supplicant-sigusr1-changes-debuglevel.patch won't go upstream as it
|
|
# is not portable
|
|
Patch2: wpa_supplicant-sigusr1-changes-debuglevel.patch
|
|
Patch3: wpa_supplicant-alloc_size.patch
|
|
Patch5: wpa_supplicant-dump-certificate-as-PEM-in-debug-mode.diff
|
|
BuildRequires: pkgconfig
|
|
BuildRequires: readline-devel
|
|
BuildRequires: systemd-rpm-macros
|
|
BuildRequires: pkgconfig(Qt5Core)
|
|
BuildRequires: pkgconfig(Qt5Gui)
|
|
BuildRequires: pkgconfig(Qt5Widgets)
|
|
BuildRequires: pkgconfig(dbus-1)
|
|
BuildRequires: pkgconfig(libnl-3.0)
|
|
BuildRequires: pkgconfig(openssl)
|
|
Requires: logrotate
|
|
|
|
%description
|
|
wpa_supplicant is an implementation of the WPA Supplicant component,
|
|
i.e., the part that runs in the client stations. It implements key
|
|
negotiation with a WPA Authenticator and it controls the roaming and
|
|
IEEE 802.11 authentication/association of the wlan driver.
|
|
|
|
%package gui
|
|
Summary: WPA supplicant graphical front-end
|
|
Requires: wpa_supplicant
|
|
|
|
%description gui
|
|
This package contains a graphical front-end to wpa_supplicant, an
|
|
implementation of the WPA Supplicant component.
|
|
|
|
%prep
|
|
%setup -q -n wpa_supplicant-%{version}
|
|
cp %{SOURCE1} wpa_supplicant/.config
|
|
%autopatch -p1
|
|
|
|
%build
|
|
cd wpa_supplicant
|
|
CFLAGS="%{optflags}" make V=1 %{?_smp_mflags}
|
|
CFLAGS="%{optflags}" make V=1 %{?_smp_mflags} eapol_test
|
|
cd wpa_gui-qt4
|
|
%qmake5
|
|
make %{?_smp_mflags}
|
|
|
|
%install
|
|
install -d %{buildroot}/%{_sbindir}
|
|
install -m 0755 wpa_supplicant/wpa_cli %{buildroot}%{_sbindir}
|
|
install -m 0755 wpa_supplicant/wpa_passphrase %{buildroot}%{_sbindir}
|
|
install -m 0755 wpa_supplicant/wpa_supplicant %{buildroot}%{_sbindir}
|
|
install -m 0755 wpa_supplicant/eapol_test %{buildroot}%{_sbindir}
|
|
install -d %{buildroot}%{_datadir}/dbus-1/system.d
|
|
install -m 0644 wpa_supplicant/dbus/dbus-wpa_supplicant.conf %{buildroot}%{_datadir}/dbus-1/system.d/wpa_supplicant.conf
|
|
install -d %{buildroot}/%{_sysconfdir}/%{name}
|
|
install -m 0600 %{SOURCE2} %{buildroot}/%{_sysconfdir}/%{name}
|
|
sed 's-@RUNSTATEDIR@-%{_rundir}-g' -i %{buildroot}/%{_sysconfdir}/%{name}/%{name}.conf
|
|
install -d %{buildroot}/%{_datadir}/dbus-1/system-services
|
|
install -m 0644 %{SOURCE3} %{buildroot}/%{_datadir}/dbus-1/system-services
|
|
install -m 0644 %{SOURCE5} %{buildroot}/%{_datadir}/dbus-1/system-services
|
|
%if 0%{?suse_version} > 1500
|
|
install -d %{buildroot}/%{_distconfdir}/logrotate.d/
|
|
install -m 644 %{SOURCE4} %{buildroot}/%{_distconfdir}/logrotate.d/wpa_supplicant
|
|
%else
|
|
install -d %{buildroot}/%{_sysconfdir}/logrotate.d/
|
|
install -m 644 %{SOURCE4} %{buildroot}/%{_sysconfdir}/logrotate.d/wpa_supplicant
|
|
%endif
|
|
install -d %{buildroot}/%{_rundir}/%{name}
|
|
install -d %{buildroot}%{_mandir}/man{5,8}
|
|
install -m 0644 wpa_supplicant/doc/docbook/*.8 %{buildroot}%{_mandir}/man8
|
|
# wpa_supplicant is built without CONFIG_PRIVSEP
|
|
rm %{buildroot}%{_mandir}/man8/wpa_priv.*
|
|
install -m 0644 wpa_supplicant/doc/docbook/*.5 %{buildroot}%{_mandir}/man5
|
|
install -m 755 wpa_supplicant/wpa_gui-qt4/wpa_gui %{buildroot}%{_sbindir}
|
|
install -d %{buildroot}%{_unitdir}
|
|
install -m 0644 %{SOURCE6} %{buildroot}%{_unitdir}
|
|
install -m 0644 %{SOURCE7} %{buildroot}%{_unitdir}
|
|
ln -s service %{buildroot}/%{_sbindir}/rcwpa_supplicant
|
|
# avoid spurious dependency on /usr/bin/python
|
|
chmod -x wpa_supplicant/examples/*.py
|
|
# dbus auto activation boo#966535
|
|
ln -s wpa_supplicant.service %{buildroot}%{_unitdir}/dbus-fi.epitest.hostap.WPASupplicant.service
|
|
ln -s wpa_supplicant.service %{buildroot}%{_unitdir}/dbus-fi.w1.wpa_supplicant1.service
|
|
|
|
%pre
|
|
%service_add_pre wpa_supplicant.service
|
|
%if 0%{?suse_version} > 1500
|
|
# Prepare for migration to /usr/etc; save any old .rpmsave
|
|
for i in logrotate.d/wpa_supplicant ; do
|
|
test -f %{_sysconfdir}/${i}.rpmsave && mv -v %{_sysconfdir}/${i}.rpmsave %{_sysconfdir}/${i}.rpmsave.old ||:
|
|
done
|
|
%endif
|
|
|
|
%if 0%{?suse_version} > 1500
|
|
%posttrans
|
|
# Migration to /usr/etc, restore just created .rpmsave
|
|
for i in logrotate.d/wpa_supplicant ; do
|
|
test -f %{_sysconfdir}/${i}.rpmsave && mv -v %{_sysconfdir}/${i}.rpmsave %{_sysconfdir}/${i} ||:
|
|
done
|
|
%endif
|
|
|
|
%post
|
|
%service_add_post wpa_supplicant.service
|
|
|
|
%preun
|
|
%service_del_preun wpa_supplicant.service
|
|
|
|
%postun
|
|
%service_del_postun wpa_supplicant.service
|
|
|
|
%files
|
|
%license COPYING
|
|
%doc wpa_supplicant/ChangeLog README wpa_supplicant/todo.txt wpa_supplicant/examples wpa_supplicant/wpa_supplicant.conf
|
|
%{_sbindir}/eapol_test
|
|
%{_sbindir}/rcwpa_supplicant
|
|
%{_sbindir}/wpa_cli
|
|
%{_sbindir}/wpa_passphrase
|
|
%{_sbindir}/wpa_supplicant
|
|
%{_datadir}/dbus-1/system.d/%{name}.conf
|
|
%{_datadir}/dbus-1/system-services
|
|
%config %{_sysconfdir}/%{name}/%{name}.conf
|
|
%if 0%{?suse_version} > 1500
|
|
%{_distconfdir}/logrotate.d/wpa_supplicant
|
|
%else
|
|
%config(noreplace) %{_sysconfdir}/logrotate.d/wpa_supplicant
|
|
%endif
|
|
%dir %{_rundir}/%{name}
|
|
%ghost %{_rundir}/%{name}
|
|
%{_unitdir}/wpa_supplicant.service
|
|
%{_unitdir}/wpa_supplicant@.service
|
|
%{_unitdir}/dbus-fi.epitest.hostap.WPASupplicant.service
|
|
%{_unitdir}/dbus-fi.w1.wpa_supplicant1.service
|
|
%dir %{_sysconfdir}/%{name}
|
|
%{_mandir}/man8/*
|
|
%exclude %{_mandir}/man8/wpa_gui.*
|
|
%{_mandir}/man5/*
|
|
|
|
%files gui
|
|
%{_sbindir}/wpa_gui
|
|
%{_mandir}/man8/wpa_gui*
|
|
|
|
%changelog
|