BSD Ports

security/wpa_supplicant 2.11_1 MidnightBSD

Supplicant (client) for WPA/802.1x protocols

System
MidnightBSD
Repository
mports
Maintainer
[email protected]
Last update
Commit
2f48ba41c2
License
bsd3
Categories
security, net

Description

wpa_supplicant is a client (supplicant) with support for WPA and WPA2 (IEEE 802.11i / RSN). It is suitable for both desktop/laptop computers and embedded systems. Supplicant is the IEEE 802.1X/WPA component that is used in the client stations. It implements key negotiation with a WPA Authenticator and it controls the roaming and IEEE 802.11 authentication/ association of the wlan driver.

wpa_supplicant is designed to be a "daemon" program that runs in the background and acts as the backend component controlling the wireless connection. wpa_supplicant supports separate frontend programs and a text-based frontend (wpa_cli) and a GUI (wpa_gui) are included with wpa_supplicant.

In the other systems

The newest version among them is 2.12, as upstream numbers it.

SystemPortVersionVulnerabilitiesStatusMaintainerLast update
MidnightBSDsecurity/wpa_supplicant2.11_1 behind since 2026-08-10no data-[email protected]2026-08-07
FreeBSDsecurity/wpa_supplicant2.12_1 newestnone known-[email protected]2026-08-18
OpenBSDsecurity/wpa_supplicant2.9p7 behind since 2026-08-10no data-The OpenBSD ports mailing-list <[email protected]>-
NetBSDnet/wpa_supplicant by name2.6nb3 behind since 2026-08-1014 known-[email protected]-
DragonFlysecurity/wpa_supplicant2.10_10 behind since 2026-08-10none known-[email protected]-
HardenedBSDsecurity/wpa_supplicant2.12_1 newestno data-[email protected]-
GhostBSDsecurity/wpa_supplicant2.12_1 newestno data-[email protected]-
OPNsensesecurity/wpa_supplicant2.11_7 behind since 2026-08-10no data-[email protected]-

Compare across BSDs

Install

Binary package:

mport install wpa_supplicant

From mports:

cd /usr/mports/security/wpa_supplicant && make install clean

To depend on this port in another port's Makefile:

RUN_DEPENDS=	wpa_supplicant>0:security/wpa_supplicant

Dependencies

No port depends on this one.

Related ports

The same software or family in MidnightBSD: one homepage, or one name but for a version or a variant.

Configuration

Options name: security_wpa_supplicant

OptionDefaultDescription
AKAoffAutentication and Key Agreement (UMTS)
AKA_PRIMEoffAKA Prime variant (RFC 5448)
BSDonBSD net80211 interface
DEBUG_FILEoffSupport for writing debug log to a file
DEBUG_SYSLOGonSend debug messages to syslog instead of stdout
DELAYED_MICoffMitigate TKIP attack, random delay on MIC errors
DOCSoff
EKEoffEncrypted Key Exchange
FASToffFlexible Authentication via Secure Tunneling
GPSKoffGeneralized Pre-Shared Key
GTConGeneric Token Card
HS20onHotspot 2.0
HT_OVERRIDESoffDisable HT/HT40, mask MCS rates, etc
IEEE80211ACoffVery High Throughput, AP mode (IEEE 802.11ac)
IEEE80211NoffHigh Throughput, AP mode (IEEE 802.11n)
IEEE80211RonFast BSS Transition (IEEE 802.11r-2008)
IEEE80211WoffManagement Frame Protection (IEEE 802.11w)
IKEv2off
INTERWORKINGonImprove ext. network interworking (IEEE 802.11u)
LEAPonLightweight Extensible Authentication Protocol
MD5onMD5 hash (deprecated, no key generation)
MSCHAPv2on
NDISonWindows NDIS interface
NONEoffThe 'no driver' interface, e.g. WPS ER only
NO_ROAMINGoffDisable roaming
OTPonOne-Time Password
P2PoffPeer-to-Peer support
PAXoffPassword Authenticated Exchange
PEAPonProtected Extensible Authentication Protocol
PKCS12onPKCS#12 (PFS) support
PRIVSEPoffPrivilege separation
PSKonPre-Shared key
PWDoffShared password (RFC 5931)
SAKEoffShared-Secret Authentication & Key Establishment
SIMoffSubscriber Identity Module
SMARTCARDonPrivate key on smartcard support
TDLSoffTunneled Direct Link Setup
TESToffDevelopment testing interface
TLSonTransport Layer Security
TLSV12offBuild with TLS v1.2 instead of TLS v1.0
TNCoffTrusted Network Connect
TTLSonTunneled Transport Layer Security
VHT_OVERRIDESoffDisable VHT, mask MCS rates, etc
WIREDonWired ethernet interface
WPSonWi-Fi Protected Setup
WPS_ERoffEnable WPS External Registrar
WPS_NFCoffNear Field Communication (NFC) configuration
WPS_NOREGoffDisable open network credentials when registrar
USES
cpe gmake pkgconfig:build readline ssl
Service scripts
none

Files

pkg-plist 4
  • sbin/wpa_supplicant
  • sbin/wpa_passphrase
  • sbin/wpa_cli
  • @sample etc/wpa_supplicant.conf.sample
distinfo 1
FileSizeSHA256
wpa_supplicant-2.11.tar.gz3.841433e+06912ea06f74e30a8e36fbb68064d6cdff218d8d591db0fc5d75dee6c81ac7fc0a
Master sites 1
  • https://w1.fi/releases/

Commit history 1

DateCommitCreditsLog message
2f48ba41c2 Lucas Holt */*: fix CPE identifiers that resolved to nothing
These ports declared USES=cpe but the resulting vendor/product matched no NVD entry, so mport audit stayed silent for them exactly as if no CPE had been set. Most were cases where CPE_PRODUCT was left to default to PORTNAME, which carries a version suffix or a linux-c7-/linux-rl9- prefix that upstream does not use. Corrected, with the CVE count each now reports at the version currently in the tree: www/linux-chrome google:chrome 1932 security/linux-c7-openssl-devel openssl:openssl 89 lang/linux-rl9-python3 python:python 21 print/linux-c7-cups-libs apple:cups 12 security/wpa_supplicant29 w1.fi:wpa_supplicant 4 editors/kate kde:kate 1 …