You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
782 lines
31 KiB
782 lines
31 KiB
%define rcver %{nil} |
|
%define snapshot %{nil} |
|
|
|
%global _hardened_build 1 |
|
|
|
Summary: WPA/WPA2/IEEE 802.1X Supplicant |
|
Name: wpa_supplicant |
|
Epoch: 1 |
|
Version: 2.6 |
|
Release: 12%{?dist} |
|
License: BSD |
|
Group: System Environment/Base |
|
Source0: http://w1.fi/releases/%{name}-%{version}%{rcver}%{snapshot}.tar.gz |
|
Source1: build-config |
|
Source2: %{name}.conf |
|
Source3: %{name}.service |
|
Source4: %{name}.sysconfig |
|
Source6: %{name}.logrotate |
|
Source7: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/plain/include/uapi/linux/if_macsec.h?h=v4.10#/if_macsec.h |
|
Source8: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/plain/include/uapi/linux/if_link.h?h=v4.10#/if_link.h |
|
|
|
%define build_gui 1 |
|
%if 0%{?rhel} >= 1 |
|
%define build_gui 0 |
|
%endif |
|
|
|
# RHEL-7 doesn't define _rundir macro yet |
|
# Fedora 15 onwards uses /run as _rundir |
|
%if 0%{!?_rundir:1} |
|
%define _rundir /run |
|
%endif |
|
|
|
# distro specific customization and not suitable for upstream, |
|
# works around busted drivers |
|
Patch0: wpa_supplicant-assoc-timeout.patch |
|
# ensures that debug output gets flushed immediately to help diagnose driver |
|
# bugs, not suitable for upstream |
|
Patch1: wpa_supplicant-flush-debug-output.patch |
|
# disto specific customization for log paths, not suitable for upstream |
|
Patch2: wpa_supplicant-dbus-service-file-args.patch |
|
# quiet an annoying and frequent syslog message |
|
Patch3: wpa_supplicant-quiet-scan-results-message.patch |
|
# distro specific customization for Qt4 build tools, not suitable for upstream |
|
Patch6: wpa_supplicant-gui-qt4.patch |
|
# Less aggressive roaming; signal strength is wildly variable |
|
Patch8: rh837402-less-aggressive-roaming.patch |
|
# backport of macsec series |
|
Patch9: macsec-0001-mka-Move-structs-transmit-receive-_-sa-sc-to-a-commo.patch |
|
Patch10: macsec-0002-mka-Pass-full-structures-down-to-macsec-drivers-pack.patch |
|
Patch11: macsec-0003-mka-Pass-full-structures-down-to-macsec-drivers-tran.patch |
|
Patch12: macsec-0004-mka-Pass-full-structures-down-to-macsec-drivers-rece.patch |
|
Patch13: macsec-0005-mka-Pass-full-structures-down-to-macsec-drivers-tran.patch |
|
Patch14: macsec-0006-mka-Pass-full-structures-down-to-macsec-drivers-rece.patch |
|
Patch15: macsec-0007-mka-Add-driver-op-to-get-macsec-capabilities.patch |
|
Patch16: macsec-0008-mka-Remove-channel-hacks-from-the-stack-and-the-macs.patch |
|
Patch17: macsec-0009-mka-Sync-structs-definitions-with-IEEE-Std-802.1X-20.patch |
|
Patch18: macsec-0010-mka-Add-support-for-removing-SAs.patch |
|
Patch19: macsec-0011-mka-Implement-reference-counting-on-data_key.patch |
|
Patch20: macsec-0012-mka-Fix-getting-capabilities-from-the-driver.patch |
|
Patch21: macsec-0013-wpa_supplicant-Allow-pre-shared-CAK-CKN-pair-for-MKA.patch |
|
Patch22: macsec-0014-mka-Disable-peer-detection-timeout-for-PSK-mode.patch |
|
Patch23: macsec-0015-wpa_supplicant-Add-macsec_integ_only-setting-for-MKA.patch |
|
Patch24: macsec-0016-mka-Add-enable_encrypt-op-and-call-it-from-CP-state-.patch |
|
Patch25: macsec-0017-wpa_supplicant-Allow-configuring-the-MACsec-port-for.patch |
|
Patch26: macsec-0018-drivers-Move-common-definitions-for-wired-drivers-ou.patch |
|
Patch27: macsec-0019-drivers-Move-wired_multicast_membership-to-a-common-.patch |
|
Patch28: macsec-0020-drivers-Move-driver_wired_multi-to-a-common-file.patch |
|
Patch29: macsec-0021-drivers-Move-driver_wired_get_ifflags-to-a-common-fi.patch |
|
Patch30: macsec-0022-drivers-Move-driver_wired_set_ifflags-to-a-common-fi.patch |
|
Patch31: macsec-0023-drivers-Move-driver_wired_get_ifstatus-to-a-common-f.patch |
|
Patch32: macsec-0024-drivers-Move-driver_wired_init_common-to-a-common-fi.patch |
|
Patch33: macsec-0025-drivers-Move-driver_wired_deinit_common-to-a-common-.patch |
|
Patch34: macsec-0026-drivers-Move-driver_wired_get_capa-to-a-common-file.patch |
|
Patch35: macsec-0027-drivers-Move-driver_wired_get_bssid-to-a-common-file.patch |
|
Patch36: macsec-0028-drivers-Move-driver_wired_get_ssid-to-a-common-file.patch |
|
Patch37: macsec-0029-macsec_linux-Add-a-driver-for-macsec-on-Linux-kernel.patch |
|
Patch38: macsec-0030-mka-Remove-references-to-macsec_qca-from-wpa_supplic.patch |
|
Patch39: macsec-0031-PAE-Make-KaY-specific-details-available-via-control-.patch |
|
Patch40: macsec-0032-mka-Make-MKA-actor-priority-configurable.patch |
|
Patch41: macsec-0033-mka-Fix-an-incorrect-update-of-participant-to_use_sa.patch |
|
Patch42: macsec-0034-mka-Some-bug-fixes-for-MACsec-in-PSK-mode.patch |
|
Patch43: macsec-0035-mka-Send-MKPDUs-forever-if-mode-is-PSK.patch |
|
# upstream patch not in 2.6 |
|
Patch44: rh1447073-nl80211-Fix-race-condition-in-detecting-MAC-change.patch |
|
Patch45: rh1440646-macsec_linux-Fix-NULL-pointer-dereference-on-error-c.patch |
|
Patch46: rh1489919-mka-Add-error-handling-for-secy_init_macsec-calls.patch |
|
Patch47: rh1495527-0001-hostapd-Avoid-key-reinstallation-in-FT-handshake.patch |
|
Patch48: rh1495527-0002-Prevent-reinstallation-of-an-already-in-use-group-ke.patch |
|
Patch49: rh1495527-0003-Extend-protection-of-GTK-IGTK-reinstallation-of-WNM-.patch |
|
Patch50: rh1495527-0004-Prevent-installation-of-an-all-zero-TK.patch |
|
Patch51: rh1495527-0005-Fix-PTK-rekeying-to-generate-a-new-ANonce.patch |
|
Patch52: rh1495527-0006-TDLS-Reject-TPK-TK-reconfiguration.patch |
|
Patch53: rh1495527-0007-WNM-Ignore-WNM-Sleep-Mode-Response-without-pending-r.patch |
|
Patch54: rh1495527-0008-FT-Do-not-allow-multiple-Reassociation-Response-fram.patch |
|
Patch55: rh1531254-common-Avoid-conflict-with-__bitwise-macro-from-linu.patch |
|
Patch56: rh1434434-wpa_supplicant-Don-t-reply-to-EAPOL-if-pkt_type-is-P.patch |
|
Patch57: rh1490885-fix-auth-failure-when-the-mac-is-updated-externally.patch |
|
Patch58: rh1500442-wpa_supplicant-Fix-memory-leaks-in-ieee802_1x_create.patch |
|
Patch59: rh1619553-0001-WPA-Ignore-unauthenticated-encrypted-EAPOL-Key-data.patch |
|
|
|
URL: http://w1.fi/wpa_supplicant/ |
|
|
|
%if %{build_gui} |
|
BuildRequires: qt-devel >= 4.0 |
|
%endif |
|
BuildRequires: openssl-devel |
|
BuildRequires: readline-devel |
|
BuildRequires: dbus-devel |
|
BuildRequires: libnl3-devel |
|
BuildRequires: systemd-units |
|
BuildRequires: docbook-utils |
|
Requires(post): systemd-sysv |
|
Requires(post): systemd-units |
|
Requires(preun): systemd-units |
|
Requires(postun): systemd-units |
|
|
|
%description |
|
wpa_supplicant is a WPA Supplicant for Linux, BSD and Windows with support |
|
for WPA and WPA2 (IEEE 802.11i / RSN). Supplicant is the IEEE 802.1X/WPA |
|
component that is used in the client stations. It implements key negotiation |
|
with a WPA Authenticator and it controls the roaming and IEEE 802.11 |
|
authentication/association of the wlan driver. |
|
|
|
%if %{build_gui} |
|
|
|
%package gui |
|
Summary: Graphical User Interface for %{name} |
|
Group: Applications/System |
|
|
|
%description gui |
|
Graphical User Interface for wpa_supplicant written using QT |
|
|
|
%endif |
|
|
|
%prep |
|
%setup -q -n %{name}-%{version}%{rcver} |
|
|
|
mkdir -p src/linux |
|
cp %{SOURCE7} src/linux/if_macsec.h |
|
cp %{SOURCE8} src/linux/if_link.h |
|
|
|
%patch0 -p1 -b .assoc-timeout |
|
%patch1 -p1 -b .flush-debug-output |
|
%patch2 -p1 -b .dbus-service-file |
|
%patch3 -p1 -b .quiet-scan-results-msg |
|
%patch6 -p1 -b .qt4 |
|
%patch8 -p1 -b .rh837402-less-aggressive-roaming |
|
%patch9 -p1 -b .macsec-0001 |
|
%patch10 -p1 -b .macsec-0002 |
|
%patch11 -p1 -b .macsec-0003 |
|
%patch12 -p1 -b .macsec-0004 |
|
%patch13 -p1 -b .macsec-0005 |
|
%patch14 -p1 -b .macsec-0006 |
|
%patch15 -p1 -b .macsec-0007 |
|
%patch16 -p1 -b .macsec-0008 |
|
%patch17 -p1 -b .macsec-0009 |
|
%patch18 -p1 -b .macsec-0010 |
|
%patch19 -p1 -b .macsec-0011 |
|
%patch20 -p1 -b .macsec-0012 |
|
%patch21 -p1 -b .macsec-0013 |
|
%patch22 -p1 -b .macsec-0014 |
|
%patch23 -p1 -b .macsec-0015 |
|
%patch24 -p1 -b .macsec-0016 |
|
%patch25 -p1 -b .macsec-0017 |
|
%patch26 -p1 -b .macsec-0018 |
|
%patch27 -p1 -b .macsec-0019 |
|
%patch28 -p1 -b .macsec-0020 |
|
%patch29 -p1 -b .macsec-0021 |
|
%patch30 -p1 -b .macsec-0022 |
|
%patch31 -p1 -b .macsec-0023 |
|
%patch32 -p1 -b .macsec-0024 |
|
%patch33 -p1 -b .macsec-0025 |
|
%patch34 -p1 -b .macsec-0026 |
|
%patch35 -p1 -b .macsec-0027 |
|
%patch36 -p1 -b .macsec-0028 |
|
%patch37 -p1 -b .macsec-0029 |
|
%patch38 -p1 -b .macsec-0030 |
|
%patch39 -p1 -b .macsec-0031 |
|
%patch40 -p1 -b .macsec-0032 |
|
%patch41 -p1 -b .macsec-0033 |
|
%patch42 -p1 -b .macsec-0034 |
|
%patch43 -p1 -b .macsec-0035 |
|
%patch44 -p1 -b .rh1447073-detect-mac-change |
|
%patch45 -p1 -b .rh1440646-macsec-segfault |
|
%patch46 -p1 -b .rh1489919-macsec-eapol-segfault |
|
%patch47 -p1 -b .rh1495527-0001 |
|
%patch48 -p1 -b .rh1495527-0002 |
|
%patch49 -p1 -b .rh1495527-0003 |
|
%patch50 -p1 -b .rh1495527-0004 |
|
%patch51 -p1 -b .rh1495527-0005 |
|
%patch52 -p1 -b .rh1495527-0006 |
|
%patch53 -p1 -b .rh1495527-0007 |
|
%patch54 -p1 -b .rh1495527-0008 |
|
%patch55 -p1 -b .rh1531254-fix-bitwise-redefined |
|
%patch56 -p1 -b .rh1434434-fix-pkt_otherhost |
|
%patch57 -p1 -b .rh1490885-mac-changed-event |
|
%patch58 -p1 -b .rh1500442-macsec-memleak |
|
%patch59 -p1 -b .rh1619553-ignore-unauth-eapol |
|
|
|
%build |
|
pushd wpa_supplicant |
|
cp %{SOURCE1} .config |
|
CFLAGS="${CFLAGS:-%optflags} -fPIE -DPIE" ; export CFLAGS ; |
|
CXXFLAGS="${CXXFLAGS:-%optflags} -fPIE -DPIE" ; export CXXFLAGS ; |
|
LDFLAGS="${LDFLAGS:-%optflags} -pie -Wl,-z,now,-z,relro" ; export LDFLAGS ; |
|
# yes, BINDIR=_sbindir |
|
BINDIR="%{_sbindir}" ; export BINDIR ; |
|
LIBDIR="%{_libdir}" ; export LIBDIR ; |
|
make %{_smp_mflags} V=1 |
|
%if %{build_gui} |
|
QTDIR=%{_libdir}/qt4 make wpa_gui-qt4 %{_smp_mflags} |
|
%endif |
|
make eapol_test V=1 |
|
popd |
|
|
|
pushd wpa_supplicant/doc/docbook |
|
make man V=1 |
|
popd |
|
|
|
%install |
|
# init scripts |
|
install -D -m 0644 %{SOURCE3} %{buildroot}/%{_unitdir}/%{name}.service |
|
install -D -m 0644 %{SOURCE4} %{buildroot}/%{_sysconfdir}/sysconfig/%{name} |
|
install -D -m 0644 %{SOURCE6} %{buildroot}/%{_sysconfdir}/logrotate.d/%{name} |
|
|
|
# config |
|
install -D -m 0600 %{SOURCE2} %{buildroot}/%{_sysconfdir}/%{name}/%{name}.conf |
|
|
|
# binary |
|
install -d %{buildroot}/%{_sbindir} |
|
install -m 0755 %{name}/wpa_passphrase %{buildroot}/%{_sbindir} |
|
install -m 0755 %{name}/wpa_cli %{buildroot}/%{_sbindir} |
|
install -m 0755 %{name}/wpa_supplicant %{buildroot}/%{_sbindir} |
|
install -m 0755 %{name}/eapol_test %{buildroot}/%{_sbindir} |
|
install -D -m 0644 %{name}/dbus/dbus-wpa_supplicant.conf %{buildroot}/%{_sysconfdir}/dbus-1/system.d/wpa_supplicant.conf |
|
install -D -m 0644 %{name}/dbus/fi.w1.wpa_supplicant1.service %{buildroot}/%{_datadir}/dbus-1/system-services/fi.w1.wpa_supplicant1.service |
|
install -D -m 0644 %{name}/dbus/fi.epitest.hostap.WPASupplicant.service %{buildroot}/%{_datadir}/dbus-1/system-services/fi.epitest.hostap.WPASupplicant.service |
|
|
|
%if %{build_gui} |
|
# gui |
|
install -d %{buildroot}/%{_bindir} |
|
install -m 0755 %{name}/wpa_gui-qt4/wpa_gui %{buildroot}/%{_bindir} |
|
%endif |
|
|
|
install -d -m 0755 %{buildroot}%{_rundir}/%{name} |
|
|
|
# man pages |
|
install -d %{buildroot}%{_mandir}/man{5,8} |
|
install -m 0644 %{name}/doc/docbook/*.8 %{buildroot}%{_mandir}/man8 |
|
install -m 0644 %{name}/doc/docbook/*.5 %{buildroot}%{_mandir}/man5 |
|
|
|
# some cleanup in docs and examples |
|
rm -f %{name}/doc/.cvsignore |
|
rm -rf %{name}/doc/docbook |
|
chmod -R 0644 %{name}/examples/*.py |
|
|
|
%post |
|
if [ $1 -eq 1 ] ; then |
|
# Initial installation |
|
/bin/systemctl daemon-reload >/dev/null 2>&1 || : |
|
fi |
|
|
|
%preun |
|
if [ $1 -eq 0 ] ; then |
|
# Package removal, not upgrade |
|
/bin/systemctl --no-reload disable wpa_supplicant.service > /dev/null 2>&1 || : |
|
/bin/systemctl stop wpa_supplicant.service > /dev/null 2>&1 || : |
|
fi |
|
|
|
%triggerun -- wpa_supplicant < 0.7.3-10 |
|
# Save the current service runlevel info |
|
# User must manually run systemd-sysv-convert --apply wpa_supplicant |
|
# to migrate them to systemd targets |
|
/usr/bin/systemd-sysv-convert --save wpa_supplicant >/dev/null 2>&1 ||: |
|
|
|
# Run these because the SysV package being removed won't do them |
|
/sbin/chkconfig --del wpa_supplicant >/dev/null 2>&1 || : |
|
/bin/systemctl try-restart wpa_supplicant.service >/dev/null 2>&1 || : |
|
|
|
|
|
%files |
|
%license COPYING |
|
%doc %{name}/ChangeLog README %{name}/eap_testing.txt %{name}/todo.txt %{name}/wpa_supplicant.conf %{name}/examples |
|
%config(noreplace) %{_sysconfdir}/%{name}/%{name}.conf |
|
%config(noreplace) %{_sysconfdir}/sysconfig/%{name} |
|
%config(noreplace) %{_sysconfdir}/logrotate.d/%{name} |
|
%{_unitdir}/%{name}.service |
|
%{_sysconfdir}/dbus-1/system.d/%{name}.conf |
|
%{_datadir}/dbus-1/system-services/fi.epitest.hostap.WPASupplicant.service |
|
%{_datadir}/dbus-1/system-services/fi.w1.wpa_supplicant1.service |
|
%{_sbindir}/wpa_passphrase |
|
%{_sbindir}/wpa_supplicant |
|
%{_sbindir}/wpa_cli |
|
%{_sbindir}/eapol_test |
|
%ghost %attr(755,root,root) %verify(not owner group) %{_rundir}/%{name} |
|
%dir %{_sysconfdir}/%{name} |
|
%{_mandir}/man8/* |
|
%{_mandir}/man5/* |
|
|
|
%if %{build_gui} |
|
%files gui |
|
%{_bindir}/wpa_gui |
|
%endif |
|
|
|
%changelog |
|
* Tue Aug 28 2018 Davide Caratti <dcaratti@redhat.com> - 1:2.6-12 |
|
- Ignore unauthenticated encrypted EAPOL-Key data (CVE-2018-14526) |
|
|
|
* Fri Jun 1 2018 Davide Caratti <dcaratti@redhat.com> - 1:2.6-11 |
|
- Better handling of /run/wpa_supplicant (rh #1507919) |
|
|
|
* Fri May 18 2018 Davide Caratti <dcaratti@redhat.com> - 1:2.6-10 |
|
- Fix memory leak when macsec MKA/PSK is used (rh #1500442) |
|
- Fix authentication failure when the MAC is updated externally (rh #1490885) |
|
- Let the kernel discard EAPOL if packet type is PACKET_OTHERHOST (rh #1434434) |
|
- Don't restart wpa_supplicant.service on package upgrade (rh #1505404) |
|
- Don't own a directory in /run/ (rh #1507919) |
|
|
|
* Mon Jan 8 2018 Davide Caratti <dcaratti@redhat.com> - 1:2.6-9 |
|
- Fix RPMDiff failures on ppc (rh #1532320) |
|
|
|
* Fri Jan 5 2018 Davide Caratti <dcaratti@redhat.com> - 1:2.6-8 |
|
- Fix build issue on kernel-alt (rh #1531254) |
|
|
|
* Wed Oct 18 2017 Davide Caratti <dcaratti@redhat.com> - 1:2.6-7 |
|
- avoid key reinstallation (CVE-2017-13077, CVE-2017-13078, CVE-2017-13079, |
|
CVE-2017-13080, CVE-2017-13081, CVE-2017-13082, CVE-2017-13086, |
|
CVE-2017-13087, CVE-2017-13088) |
|
|
|
* Thu Oct 05 2017 Davide Caratti <dcaratti@redhat.com> - 1:2.6-6 |
|
- Fix segmentation fault on EAPOL RX if macsec.ko is not loaded (rh #1489919) |
|
|
|
* Wed May 17 2017 Davide Caratti <dcaratti@redhat.com> - 1:2.6-5 |
|
- macsec: Fix segmentation fault in case macsec.ko is not loaded (rh #1440646) |
|
- nl80211: Fix race condition in detecting MAC change (rh #1447073) |
|
|
|
* Mon Apr 3 2017 Lubomir Rintel <lrintel@redhat.com> - 1:2.6-4 |
|
- Include MACsec headers (rh #1438007) |
|
|
|
* Fri Mar 10 2017 Davide Caratti <dcaratti@redhat.com> - 1:2.6-3 |
|
- Fix coverity failures (rh #1430407) |
|
|
|
* Tue Mar 7 2017 Davide Caratti <dcaratti@redhat.com> - 1:2.6-2 |
|
- Backport support for IEEE 802.1AE MACsec (rh #1338005) |
|
|
|
* Fri Feb 10 2017 Davide Caratti <dcaratti@redhat.com> - 1:2.6-1 |
|
- Update to 2.6 (rh #1404793) |
|
|
|
* Fri Dec 16 2016 Davide Caratti <dcaratti@redhat.com> - 1:2.0-22 |
|
- bump revision for RHEL7.4 rebuild |
|
|
|
* Tue Aug 9 2016 Davide Caratti <dcaratti@redhat.com> - 1:2.0-21 |
|
- fix wpa_supplicant.sysconfig to avoid duplicate -u and -f arguments (rh #1351388) |
|
|
|
* Mon Mar 21 2016 Lubomir Rintel <lrintel@redhat.com> - 1:2.0-20 |
|
- D-Bus: Don't do <deny send_interface="..." /> in dbus service file (rh #1319796) |
|
|
|
* Mon Jan 11 2016 Lubomir Rintel <lrintel@redhat.com> - 1:2.0-19 |
|
- nl80211: resubscribe to netlink events when cfg80211 gets re-added (rh #1085473) |
|
|
|
* Tue Dec 1 2015 Jiří Klimeš <jklimes@redhat.com> - 1:2.0-18 |
|
- spec: do not install wpa_supplicant.service as executable (rh #1286965) |
|
|
|
* Wed May 20 2015 Jiří Klimeš <jklimes@redhat.com> - 1:2.0-17 |
|
- AP WMM: Fix integer underflow in WMM Action frame parser (rh #1221178) (rh #1222016) |
|
|
|
* Tue Apr 28 2015 Dan Winship <danw@redhat.com> - 1:2.0-16 |
|
- P2P: Validate SSID element length before copying it (CVE-2015-1863) |
|
|
|
* Wed Jan 14 2015 <danw@redhat.com> - 1:2.0-15 |
|
- Add domain_match config option from upstream (rh #1178263) |
|
- Include peer certificate in EAP events for use by clients |
|
|
|
* Wed Oct 22 2014 Dan Williams <dcbw@redhat.com> - 1:2.0-14 |
|
- Use os_exec() for action script execution (CVE-2014-3686) |
|
|
|
* Mon Jul 14 2014 Thomas Haller <thaller@redhat.com - 1:2.0-13 |
|
- cleanup spec file and remove obsolete libeap parts (rh #1085240) |
|
|
|
* Fri Jan 24 2014 Daniel Mach <dmach@redhat.com> - 1:2.0-12 |
|
- Mass rebuild 2014-01-24 |
|
|
|
* Mon Jan 20 2014 Dan Williams <dcbw@redhat.com> - 1:2.0-11 |
|
- Add eapol_test manpage (rh #948453) |
|
|
|
* Fri Dec 27 2013 Daniel Mach <dmach@redhat.com> - 1:2.0-10 |
|
- Mass rebuild 2013-12-27 |
|
|
|
* Mon Dec 16 2013 Dan Williams <dcbw@redhat.com> - 1:2.0-9 |
|
- Don't disconnect when PMKSA cache gets too large (rh #1032758) (rh #1016707) |
|
|
|
* Mon Dec 16 2013 Dan Winship <danw@redhat.com> - 1:2.0-8 |
|
- Fill in some gaps in the man pages (rh #948453) |
|
|
|
* Wed Jul 10 2013 Dan Williams <dcbw@redhat.com> - 1:2.0-6 |
|
- Enable full RELRO/PIE/PIC for wpa_supplicant and libeap |
|
- Fix changelog dates |
|
|
|
* Wed Jul 10 2013 Dan Williams <dcbw@redhat.com> - 1:2.0-5 |
|
- Build and package eapol_test (rh #638218) |
|
|
|
* Wed Jul 10 2013 Dan Williams <dcbw@redhat.com> - 1:2.0-4 |
|
- Disable WiMAX libeap hack for RHEL |
|
|
|
* Wed May 15 2013 Dan Williams <dcbw@redhat.com> - 1:2.0-3 |
|
- Enable HT (802.11n) for AP mode |
|
|
|
* Tue May 7 2013 Dan Williams <dcbw@redhat.com> - 1:2.0-2 |
|
- Use hardened build macros and ensure they apply to libeap too |
|
|
|
* Mon May 6 2013 Dan Williams <dcbw@redhat.com> - 1:2.0-1 |
|
- Update to 2.0 |
|
- Be less aggressive when roaming due to signal strength changes (rh #837402) |
|
|
|
* Mon Apr 1 2013 Dan Williams <dcbw@redhat.com> - 1:1.1-1 |
|
- Update to 1.1 |
|
- Be less aggressive when roaming due to signal strength changes |
|
|
|
* Fri Feb 15 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.0-4 |
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild |
|
|
|
* Sun Jan 20 2013 Dan Horák <dan@danny.cz> - 1:1.0-3 |
|
- rebuilt again for fixed soname in libnl3 |
|
|
|
* Sun Jan 20 2013 Kalev Lember <kalevlember@gmail.com> - 1:1.0-2 |
|
- Rebuilt for libnl3 |
|
|
|
* Wed Aug 29 2012 Dan Williams <dcbw@redhat.com> - 1:1.0-1 |
|
- Enable lightweight AP mode support |
|
- Enable P2P (WiFi Direct) support |
|
- Enable RSN IBSS/AdHoc support |
|
|
|
* Sun Jul 22 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.0-0.5 |
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild |
|
|
|
* Tue May 1 2012 Dan Williams <dcbw@redhat.com> - 1:1.0-0.4 |
|
- Update to wpa_supplicant 1.0-rc3 |
|
- Fix systemd target dependencies (rh #815091) |
|
|
|
* Fri Mar 2 2012 Dan Williams <dcbw@redhat.com> - 1:1.0-0.3 |
|
- Update to latest 1.0 git snapshot |
|
- Rebuild against libnl3 |
|
|
|
* Thu Feb 2 2012 Dan Williams <dcbw@redhat.com> - 1:1.0-0.2 |
|
- Fix driver fallback for non nl80211-based drivers (rh #783712) |
|
|
|
* Tue Jan 10 2012 Dan Williams <dcbw@redhat.com> - 1:1.0-0.1 |
|
- Update to 1.0-rc1 + git |
|
|
|
* Fri Sep 9 2011 Tom Callaway <spot@fedoraproject.org> - 1:0.7.3-11 |
|
- add missing systemd scriptlets |
|
|
|
* Thu Sep 8 2011 Tom Callaway <spot@fedoraproject.org> - 1:0.7.3-10 |
|
- convert to systemd |
|
|
|
* Wed Jul 27 2011 Dan Williams <dcbw@redhat.com> - 1:0.7.3-9 |
|
- Fix various crashes with D-Bus interface (rh #678625) (rh #725517) |
|
|
|
* Tue May 3 2011 Dan Williams <dcbw@redhat.com> - 1:0.7.3-8 |
|
- Don't crash when trying to access invalid properties via D-Bus (rh #678625) |
|
|
|
* Mon May 2 2011 Dan Williams <dcbw@redhat.com> - 1:0.7.3-7 |
|
- Make examples read-only to avoid erroneous python dependency (rh #687952) |
|
|
|
* Tue Apr 19 2011 Bill Nottingham <notting@redhat.com> - 1:0.7.3-6 |
|
- Fix EAP patch to only apply when building libeap |
|
|
|
* Fri Mar 25 2011 Bill Nottingham <notting@redhat.com> - 1:0.7.3-5 |
|
- Add libeap/libeap-devel subpackge for WiMAX usage |
|
|
|
* Mon Feb 07 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:0.7.3-4 |
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild |
|
|
|
* Tue Jan 11 2011 Dan Williams <dcbw@redhat.com> - 1:0.7.3-3 |
|
- Enable EAP-TNC (rh #659038) |
|
|
|
* Wed Dec 15 2010 Dan Williams <dcbw@redhat.com> - 1:0.7.3-2 |
|
- Enable the bgscan_simple plugin |
|
|
|
* Wed Dec 8 2010 Dan Williams <dcbw@redhat.com> - 1:0.7.3-1 |
|
- Update to 0.7.3 |
|
- Drop upstreamed and backported patches |
|
- Drop support for Qt3 |
|
|
|
* Thu Oct 7 2010 Peter Lemenkov <lemenkov@gmail.com> - 1:0.6.8-11 |
|
- Added comments to some patches (see rhbz #226544#c17) |
|
- Shortened %%install section a bit |
|
|
|
* Thu May 13 2010 Dan Williams <dcbw@redhat.com> - 1:0.6.8-10 |
|
- Remove prereq on chkconfig |
|
- Build GUI with qt4 for rawhide (rh #537105) |
|
|
|
* Thu May 6 2010 Dan Williams <dcbw@redhat.com> - 1:0.6.8-9 |
|
- Fix crash when interfaces are removed (like suspend/resume) (rh #589507) |
|
|
|
* Wed Jan 6 2010 Dan Williams <dcbw@redhat.com> - 1:0.6.8-8 |
|
- Fix handling of newer PKCS#12 files (rh #541924) |
|
|
|
* Sun Nov 29 2009 Dan Williams <dcbw@redhat.com> - 1:0.6.8-7 |
|
- Fix supplicant initscript return value (rh #521807) |
|
- Fix race when connecting to WPA-Enterprise/802.1x-enabled access points (rh #508509) |
|
- Don't double-scan when attempting to associate |
|
|
|
* Fri Aug 21 2009 Tomas Mraz <tmraz@redhat.com> - 1:0.6.8-6 |
|
- rebuilt with new openssl |
|
|
|
* Mon Jul 27 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:0.6.8-5 |
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild |
|
|
|
* Wed May 13 2009 Dan Williams <dcbw@redhat.com> - 1:0.6.8-4 |
|
- Let D-Bus clients know when the supplicant is scanning |
|
|
|
* Tue May 12 2009 Dan Williams <dcbw@redhat.com> - 1:0.6.8-3 |
|
- Ensure the supplicant starts and ends with clean driver state |
|
- Handle driver disconnect spammage by forcibly clearing SSID |
|
- Don't switch access points unless the current association is dire (rh #493745) |
|
|
|
* Tue May 12 2009 Dan Williams <dcbw@redhat.com> - 1:0.6.8-2 |
|
- Avoid creating bogus Ad-Hoc networks when forcing the driver to disconnect (rh #497771) |
|
|
|
* Mon Mar 9 2009 Dan Williams <dcbw@redhat.com> - 1:0.6.8-1 |
|
- Update to latest upstream release |
|
|
|
* Wed Feb 25 2009 Colin Walters <walters@verbum.org> - 1:0.6.7-4 |
|
- Add patch from upstream to suppress unrequested replies, this |
|
quiets a dbus warning. |
|
|
|
* Fri Feb 6 2009 Dan Williams <dcbw@redhat.com> - 1:0.6.7-3 |
|
- Fix scan result retrieval in very dense wifi environments |
|
|
|
* Fri Feb 6 2009 Dan Williams <dcbw@redhat.com> - 1:0.6.7-2 |
|
- Ensure that drivers don't retry association when they aren't supposed to |
|
|
|
* Fri Jan 30 2009 Dan Williams <dcbw@redhat.com> - 1:0.6.7-1 |
|
- Fix PEAP connections to Windows Server 2008 authenticators (rh #465022) |
|
- Stop supplicant on uninstall (rh #447843) |
|
- Suppress scan results message in logs (rh #466601) |
|
|
|
* Sun Jan 18 2009 Tomas Mraz <tmraz@redhat.com> - 1:0.6.4-3 |
|
- rebuild with new openssl |
|
|
|
* Wed Oct 15 2008 Dan Williams <dcbw@redhat.com> - 1:0.6.4-2 |
|
- Handle encryption keys correctly when switching 802.11 modes (rh #459399) |
|
- Better scanning behavior on resume from suspend/hibernate |
|
- Better interaction with newer kernels and drivers |
|
|
|
* Wed Aug 27 2008 Dan Williams <dcbw@redhat.com> - 1:0.6.4-1 |
|
- Update to 0.6.4 |
|
- Remove 'hostap', 'madwifi', and 'prism54' drivers; use standard 'wext' instead |
|
- Drop upstreamed patches |
|
|
|
* Tue Jun 10 2008 Dan Williams <dcbw@redhat.com> - 1:0.6.3-6 |
|
- Fix 802.11a frequency bug |
|
- Always schedule specific SSID scans to help find hidden APs |
|
- Properly switch between modes on mac80211 drivers |
|
- Give adhoc connections more time to assocate |
|
|
|
* Mon Mar 10 2008 Christopher Aillon <caillon@redhat.com> - 1:0.6.3-5 |
|
- BuildRequires qt3-devel |
|
|
|
* Sat Mar 8 2008 Dan Williams <dcbw@redhat.com> - 1:0.6.3-4 |
|
- Fix log file path in service config file |
|
|
|
* Thu Mar 6 2008 Dan Williams <dcbw@redhat.com> - 1:0.6.3-3 |
|
- Don't start the supplicant by default when installed (rh #436380) |
|
|
|
* Tue Mar 4 2008 Dan Williams <dcbw@redhat.com> - 1:0.6.3-2 |
|
- Fix a potential use-after-free in the D-Bus byte array demarshalling code |
|
|
|
* Mon Mar 3 2008 Dan Williams <dcbw@redhat.com> - 1:0.6.3-1 |
|
- Update to latest development release; remove upstreamed patches |
|
|
|
* Fri Feb 22 2008 Dan Williams <dcbw@redhat.com> 1:0.5.7-23 |
|
- Fix gcc 4.3 rebuild issues |
|
|
|
* Mon Feb 18 2008 Fedora Release Engineering <rel-eng@fedoraproject.org> - 1:0.5.7-22 |
|
- Autorebuild for GCC 4.3 |
|
|
|
* Tue Dec 25 2007 Dan Williams <dcbw@redhat.com> - 0.5.7-21 |
|
- Backport 'frequency' option for Ad-Hoc network configs |
|
|
|
* Mon Dec 24 2007 Dan Williams <dcbw@redhat.com> - 0.5.7-20 |
|
- Fix LSB initscript header to ensure 'messagebus' is started first (rh #244029) |
|
|
|
* Thu Dec 6 2007 Dan Williams <dcbw@redhat.com> - 1:0.5.7-19 |
|
- Fix two leaks when signalling state and scan results (rh #408141) |
|
- Add logrotate config file (rh #404181) |
|
- Add new LSB initscript header to initscript with correct deps (rh #244029) |
|
- Move other runtime arguments to /etc/sysconfig/wpa_supplicant |
|
- Start after messagebus service (rh #385191) |
|
- Fix initscript 'condrestart' command (rh #217281) |
|
|
|
* Tue Dec 4 2007 Matthias Clasen <mclasen@redhat.com> - 1:0.5.7-18 |
|
- Rebuild against new openssl |
|
|
|
* Tue Dec 4 2007 Ville Skyttä <ville.skytta at iki.fi> - 1:0.5.7-17 |
|
- Group: Application/System -> Applications/System in -gui. |
|
|
|
* Tue Nov 13 2007 Dan Williams <dcbw@redhat.com> - 0.5.7-16 |
|
- Add IW_ENCODE_TEMP patch for airo driver and Dynamic WEP |
|
- Fix error in wpa_supplicant-0.5.7-ignore-dup-ca-cert-addition.patch that |
|
caused the last error to not be printed |
|
- Fix wpa_supplicant-0.5.7-ignore-dup-ca-cert-addition.patch to ignore |
|
duplicate cert additions for all certs and keys |
|
- Change license to BSD due to linkage against OpenSSL since there is no |
|
OpenSSL exception in the GPLv2 license text that upstream ships |
|
|
|
* Sun Oct 28 2007 Dan Williams <dcbw@redhat.com> - 0.5.7-15 |
|
- Fix Dynamic WEP associations with mac80211-based drivers |
|
|
|
* Sun Oct 28 2007 Dan Williams <dcbw@redhat.com> - 0.5.7-14 |
|
- Don't error an association on duplicate CA cert additions |
|
|
|
* Wed Oct 24 2007 Dan Williams <dcbw@redhat.com> - 0.5.7-13 |
|
- Correctly set the length of blobs added via the D-Bus interface |
|
|
|
* Wed Oct 24 2007 Dan Williams <dcbw@redhat.com> - 0.5.7-12 |
|
- Fix conversion of byte arrays to strings by ensuring the buffer is NULL |
|
terminated after conversion |
|
|
|
* Sat Oct 20 2007 Dan Williams <dcbw@redhat.com> - 0.5.7-11 |
|
- Add BLOB support to the D-Bus interface |
|
- Fix D-Bus interface permissions so that only root can use the wpa_supplicant |
|
D-Bus interface |
|
|
|
* Tue Oct 9 2007 Dan Williams <dcbw@redhat.com> - 0.5.7-10 |
|
- Don't segfault with dbus control interface enabled and invalid network |
|
interface (rh #310531) |
|
|
|
* Tue Sep 25 2007 Dan Williams <dcbw@redhat.com> - 0.5.7-9 |
|
- Always allow explicit wireless scans triggered from a control interface |
|
|
|
* Thu Sep 20 2007 Dan Williams <dcbw@redhat.com> - 0.5.7-8 |
|
- Change system bus activation file name to work around D-Bus bug that fails |
|
to launch services unless their .service file is named the same as the |
|
service itself |
|
|
|
* Fri Aug 24 2007 Dan Williams <dcbw@redhat.com> - 0.5.7-7 |
|
- Make SIGUSR1 change debug level on-the-fly; useful in combination with |
|
the -f switch to log output to /var/log/wpa_supplicant.log |
|
- Stop stripping binaries on install so we get debuginfo packages |
|
- Remove service start requirement for interfaces & devices from sysconfig file, |
|
since wpa_supplicant's D-Bus interface is now turned on |
|
|
|
* Fri Aug 17 2007 Dan Williams <dcbw@redhat.com> - 0.5.7-6 |
|
- Fix compilation with RPM_OPT_FLAGS (rh #249951) |
|
- Make debug output to logfile a runtime option |
|
|
|
* Fri Aug 17 2007 Christopher Aillon <caillon@redhat.com> - 0.5.7-5 |
|
- Update the license tag |
|
|
|
* Tue Jun 19 2007 Dan Williams <dcbw@redhat.com> - 0.5.7-4 |
|
- Fix initscripts to use -Dwext by default, be more verbose on startup |
|
(rh #244511) |
|
|
|
* Mon Jun 4 2007 Dan Williams <dcbw@redhat.com> - 0.5.7-3 |
|
- Fix buffer overflow by removing syslog patch (#rh242455) |
|
|
|
* Mon Apr 9 2007 Dan Williams <dcbw@redhat.com> - 0.5.7-2 |
|
- Add patch to send output to syslog |
|
|
|
* Thu Mar 15 2007 Dan Williams <dcbw@redhat.com> - 0.5.7-1 |
|
- Update to 0.5.7 stable release |
|
|
|
* Fri Oct 27 2006 Dan Williams <dcbw@redhat.com> - 0.4.9-1 |
|
- Update to 0.4.9 for WE-21 fixes, remove upstreamed patches |
|
- Don't package doc/ because they aren't actually wpa_supplicant user documentation, |
|
and becuase it pulls in perl |
|
|
|
* Wed Jul 12 2006 Jesse Keating <jkeating@redhat.com> - 0.4.8-10.1 |
|
- rebuild |
|
|
|
* Thu Apr 27 2006 Dan Williams <dcbw@redhat.com> - 0.4.8-10 |
|
- Add fix for madwifi and WEP (wpa_supplicant/hostap bud #140) (#rh190075#) |
|
- Fix up madwifi-ng private ioctl()s for r1331 and later |
|
- Update madwifi headers to r1475 |
|
|
|
* Tue Apr 25 2006 Dan Williams <dcbw@redhat.com> - 0.4.8-9 |
|
- Enable Wired driver, PKCS12, and Smartcard options (#rh189805#) |
|
|
|
* Tue Apr 11 2006 Dan Williams <dcbw@redhat.com> - 0.4.8-8 |
|
- Fix control interface key obfuscation a bit |
|
|
|
* Sun Apr 2 2006 Dan Williams <dcbw@redhat.com> - 0.4.8-7 |
|
- Work around older & incorrect drivers that return null-terminated SSIDs |
|
|
|
* Mon Mar 27 2006 Dan Williams <dcbw@redhat.com> - 0.4.8-6 |
|
- Add patch to make orinoco happy with WEP keys |
|
- Enable Prism54-specific driver |
|
- Disable ipw-specific driver; ipw2x00 should be using WEXT instead |
|
|
|
* Fri Mar 3 2006 Dan Williams <dcbw@redhat.com> - 0.4.8-5 |
|
- Increase association timeout, mainly for drivers that don't |
|
fully support WPA ioctls yet |
|
|
|
* Fri Mar 3 2006 Dan Williams <dcbw@redhat.com> - 0.4.8-4 |
|
- Add additional BuildRequires #rh181914# |
|
- Add prereq on chkconfig #rh182905# #rh182906# |
|
- Own /var/run/wpa_supplicant and /etc/wpa_supplicant #rh183696# |
|
|
|
* Wed Mar 1 2006 Dan Williams <dcbw@redhat.com> - 0.4.8-3 |
|
- Install wpa_passphrase too #rh183480# |
|
|
|
* Mon Feb 27 2006 Dan Williams <dcbw@redhat.com> - 0.4.8-2 |
|
- Don't expose private data on the control interface unless requested |
|
|
|
* Fri Feb 24 2006 Dan Williams <dcbw@redhat.com> - 0.4.8-1 |
|
- Downgrade to 0.4.8 stable release rather than a dev release |
|
|
|
* Sun Feb 12 2006 Dan Williams <dcbw@redhat.com> - 0.5.1-3 |
|
- Documentation cleanup (Terje Rosten <terje.rosten@ntnu.no>) |
|
|
|
* Sun Feb 12 2006 Dan Williams <dcbw@redhat.com> - 0.5.1-2 |
|
- Move initscript to /etc/rc.d/init.d |
|
|
|
* Fri Feb 10 2006 Jesse Keating <jkeating@redhat.com> - 0.5.1-1.2 |
|
- bump again for double-long bug on ppc(64) |
|
|
|
* Tue Feb 07 2006 Jesse Keating <jkeating@redhat.com> - 0.5.1-1.1 |
|
- rebuilt for new gcc4.1 snapshot and glibc changes |
|
|
|
* Sun Feb 5 2006 Dan Williams <dcbw@redhat.com> 0.5.1-1 |
|
- Update to 0.5.1 |
|
- Add WE auth fallback to actually work with older drivers |
|
|
|
* Thu Jan 26 2006 Dan Williams <dcbw@redhat.com> 0.4.7-2 |
|
- Bring package into Fedora Core |
|
- Add ap_scan control interface patch |
|
- Enable madwifi-ng driver |
|
|
|
* Sun Jan 15 2006 Douglas E. Warner <silfreed@silfreed.net> 0.4.7-1 |
|
- upgrade to 0.4.7 |
|
- added package w/ wpa_gui in it |
|
|
|
* Mon Nov 14 2005 Douglas E. Warner <silfreed@silfreed.net> 0.4.6-1 |
|
- upgrade to 0.4.6 |
|
- adding ctrl interface changes recommended |
|
by Hugo Paredes <hugo.paredes@e-know.org> |
|
|
|
* Sun Oct 9 2005 Douglas E. Warner <silfreed@silfreed.net> 0.4.5-1 |
|
- upgrade to 0.4.5 |
|
- updated config file wpa_supplicant is built with |
|
especially, the ipw2100 driver changed to just ipw |
|
and enabled a bunch more EAP |
|
- disabled dist tag |
|
|
|
* Thu Jun 30 2005 Douglas E. Warner <silfreed@silfreed.net> 0.4.2-3 |
|
- fix typo in init script |
|
|
|
* Thu Jun 30 2005 Douglas E. Warner <silfreed@silfreed.net> 0.4.2-2 |
|
- fixing init script using fedora-extras' template |
|
- removing chkconfig default startup |
|
|
|
* Tue Jun 21 2005 Douglas E. Warner <silfreed@silfreed.net> 0.4.2-1 |
|
- upgrade to 0.4.2 |
|
- new sample conf file that will use any unrestricted AP |
|
- make sysconfig config entry |
|
- new BuildRoot for Fedora Extras |
|
- adding dist tag to Release |
|
|
|
* Fri May 06 2005 Douglas E. Warner <silfreed@silfreed.net> 0.3.8-1 |
|
- upgrade to 0.3.8 |
|
|
|
* Thu Feb 10 2005 Douglas E. Warner <silfreed@silfreed.net> 0.3.6-2 |
|
- compile ipw driver in |
|
|
|
* Wed Feb 09 2005 Douglas E. Warner <silfreed@silfreed.net> 0.3.6-1 |
|
- upgrade to 0.3.6 |
|
|
|
* Thu Dec 23 2004 Douglas E. Warner <silfreed@silfreed.net> 0.2.5-4 |
|
- fixing init script |
|
|
|
* Mon Dec 20 2004 Douglas E. Warner <silfreed@silfreed.net> 0.2.5-3 |
|
- fixing init script |
|
- adding post/preun items to add/remove via chkconfig |
|
|
|
* Mon Dec 20 2004 Douglas E. Warner <silfreed@silfreed.net> 0.2.5-2 |
|
- adding sysV scripts |
|
|
|
* Mon Dec 20 2004 Douglas E. Warner <silfreed@silfreed.net> 0.2.5-1 |
|
- Initial RPM release. |
|
|
|
|