Bug 300215 – net-wireless/wpa_supplicant should expose fasteap

• Status: RESOLVED FIXED
• Product: Gentoo Linux

[Description Myk Taylor 2010-01-08 19:58:29 UTC]

FAST-EAP authentication is used by many enterprise wireless routers.  wpa_supplicant has had the ability to provide fasteap authentication for quite some time, but the ebuild has not exposed the functionality.  The only caveat is that if fasteap is used, wpa_supplicant must build using its internal TLS implementation, and not use openssl or gnutls.  I have patched the ebuild to provide a fasteap use flag and enforce the TLS implementation restriction.

Reproducible: Always

Steps to Reproduce:
1. Attempt to connect to a wireless network that requires FAST-EAP authentication

Actual Results:  
/var/log/messages shows an infinite loop of protocol failures

Expected Results:  
successful wireless connection

For reference, here is an example wpa_supplicant.conf block that uses FAST-EAP:

network={
    ssid="my_essid"
    priority=10
    proto=WPA
    key_mgmt=WPA-EAP
    pairwise=TKIP
    group=TKIP
    identity="domain\username"
    password="secretpass"
    phase1="fast_provisioning=1"
}

[Comment 1 Myk Taylor 2010-01-08 20:01:41 UTC]

Created attachment 215703 [details]
wpa_supplicant ebuild that supports fasteap

[Comment 2 Myk Taylor 2010-01-08 20:13:15 UTC]

Created attachment 215705 [details]
patched wpa_supplicant-0.6.9

[Comment 3 Myk Taylor 2010-01-08 20:13:35 UTC]

Created attachment 215707 [details]
patched wpa_supplicant-9999

[Comment 4 Myk Taylor 2010-01-08 20:15:08 UTC]

I did not add a patched version of wpa_supplicant-0.6.4 as I could not get that (rather old) version to compile on my system.  All uploaded ebuilds have been tested.

[Comment 5 Myk Taylor 2010-01-08 20:18:23 UTC]

Created attachment 215708 [details, diff]
patch of changes

unified diff to highlight the few changes I made to the ebuilds

[Comment 6 Myk Taylor 2010-01-08 20:28:19 UTC]

Created attachment 215710 [details]
updated wpa_supplicant-9999

newest git broke the ebuild for an unrelated (to this bug) reason.  The dbus path patch is no longer applicable and now causes errors.  I removed the now-useless epatch line from the ebuild.

[Comment 7 Bjarke Istrup Pedersen (RETIRED) 2010-01-14 15:07:52 UTC]

Fixed, should hit the tree within an hour or two.