BSD Ports

security/wpa_supplicant29 2.9_13 MidnightBSD

Supplicant (client) for WPA/802.1x protocols

System
MidnightBSD
Repository
mports
Maintainer
[email protected]
Last update
Commit
2f48ba41c2
License
bsd3
Categories
security, net

Description

wpa_supplicant is a client (supplicant) with support for WPA and WPA2 (IEEE 802.11i / RSN). It is suitable for both desktop/laptop computers and embedded systems. Supplicant is the IEEE 802.1X/WPA component that is used in the client stations. It implements key negotiation with a WPA Authenticator and it controls the roaming and IEEE 802.11 authentication/ association of the wlan driver.

wpa_supplicant is designed to be a "daemon" program that runs in the background and acts as the backend component controlling the wireless connection. wpa_supplicant supports separate frontend programs and a text-based frontend (wpa_cli) and a GUI (wpa_gui) are included with wpa_supplicant.

In the other systems

The newest version among them is 2.9, as upstream numbers it.

SystemPortVersionVulnerabilitiesStatusMaintainerLast update
MidnightBSDsecurity/wpa_supplicant292.9_13 newestno data-[email protected]2026-08-07
DragonFlysecurity/wpa_supplicant292.9_12 newestnone known-[email protected]-
GhostBSDsecurity/wpa_supplicant292.9_12 newestnone known-[email protected]-

Install

Binary package:

mport install wpa_supplicant29

From mports:

cd /usr/mports/security/wpa_supplicant29 && make install clean

To depend on this port in another port's Makefile:

RUN_DEPENDS=	wpa_supplicant29>0:security/wpa_supplicant29

Dependencies

No port depends on this one.

Related ports

The same software or family in MidnightBSD: one homepage, or one name but for a version or a variant.

Configuration

Options name: security_wpa_supplicant

OptionDefaultDescription
AKAoffAutentication and Key Agreement (UMTS)
AKA_PRIMEoffAKA Prime variant (RFC 5448)
BSDonBSD net80211 interface
DBUSon
DEBUG_FILEoffSupport for writing debug log to a file
DEBUG_SYSLOGonSend debug messages to syslog instead of stdout
DELAYED_MICoffMitigate TKIP attack, random delay on MIC errors
DOCSoff
EAPOL_TESToffDevelopment testing
EKEonEncrypted Key Exchange
FASTonFlexible Authentication via Secure Tunneling
GPSKonGeneralized Pre-Shared Key
GTConGeneric Token Card
HS20onHotspot 2.0
HT_OVERRIDESoffDisable HT/HT40, mask MCS rates, etc
IEEE80211ACoffVery High Throughput, AP mode (IEEE 802.11ac)
IEEE80211NoffHigh Throughput, AP mode (IEEE 802.11n)
IEEE80211RonFast BSS Transition (IEEE 802.11r-2008)
IEEE80211WonManagement Frame Protection (IEEE 802.11w)
IEEE8021X_EAPOLonEAP over LAN support
IKEV2onInternet Key Exchange version 2
INTERWORKINGonImprove ext. network interworking (IEEE 802.11u)
LEAPonLightweight Extensible Authentication Protocol
MATCHonInterface match mode
MD5onMD5 hash (deprecated, no key generation)
MSCHAPV2onMicrosoft CHAP version 2 (RFC 2759)
NDISoffWindows NDIS interface
NONEoffThe 'no driver' interface, e.g. WPS ER only
NO_ROAMINGoffDisable roaming
OTPonOne-Time Password
P2PoffPeer-to-Peer support
PAXonPassword Authenticated Exchange
PEAPonProtected Extensible Authentication Protocol
PKCS12onPKCS#12 (PFS) support
PRIVSEPoffPrivilege separation
PSKonPre-Shared key
PWDonShared password (RFC 5931)
SAKEonShared-Secret Authentication & Key Establishment
SIMoffSubscriber Identity Module
SIM_SIMULATORoffSIM simulator (Milenage) for EAP-SIM
SMARTCARDonPrivate key on smartcard support
TDLSoffTunneled Direct Link Setup
TESToffDevelopment testing interface
TLSonTransport Layer Security
TLSV12offBuild with TLS v1.2 instead of TLS v1.0
TNConTrusted Network Connect
TTLSonTunneled Transport Layer Security
USIM_SIMULATORoffSIM simulator (Milenage) for EAP-AKA
VHT_OVERRIDESoffDisable VHT, mask MCS rates, etc
WIREDonWired ethernet interface
WPSonWi-Fi Protected Setup
WPS_ERonEnable WPS External Registrar
WPS_NFConNear Field Communication (NFC) configuration
WPS_NOREGoffDisable open network credentials when registrar
WPS_UPNPonUniversal Plug and Play support
USES
cpe gmake pkgconfig:build readline ssl
Service scripts
none

Files

pkg-plist 5
  • sbin/eapol_test
  • sbin/wpa_supplicant
  • sbin/wpa_passphrase
  • sbin/wpa_cli
  • @sample etc/wpa_supplicant.conf.sample
distinfo 5
FileSizeSHA256
wpa_supplicant-2.9.tar.gz3.231785e+06fcbdee7b4a64bea8177973299c8c824419c413ec2e3a95db63dd6a5dc3541f17
0001-WPS-UPnP-Do-not-allow-event-subscriptions-with-URLs-.patch59092d9a5b9d616f1b4aa4a22b967cee866e2f69b798b0b46803a7928c8559842bd7
0002-WPS-UPnP-Fix-event-message-generation-using-a-long-U.patch228449feb35a5276279b465f6836d6fa2c6b34d94dc979e8b840d1918865c04260de
0003-WPS-UPnP-Handle-HTTP-initiation-failures-for-events-.patch1553a8212a2d89a5bab2824d22b6047e7740553df163114fcec94832bfa9c5c5d78a
0001-P2P-Fix-a-corner-case-in-peer-addition-based-on-PD-R.patch17517f40cfec5faf5e927ea9028ab9392cd118685bde7229ad24210caf0a8f6e9611
Master sites 1
  • https://w1.fi/releases/

Commit history 1

DateCommitCreditsLog message
2f48ba41c2 Lucas Holt */*: fix CPE identifiers that resolved to nothing
These ports declared USES=cpe but the resulting vendor/product matched no NVD entry, so mport audit stayed silent for them exactly as if no CPE had been set. Most were cases where CPE_PRODUCT was left to default to PORTNAME, which carries a version suffix or a linux-c7-/linux-rl9- prefix that upstream does not use. Corrected, with the CVE count each now reports at the version currently in the tree: www/linux-chrome google:chrome 1932 security/linux-c7-openssl-devel openssl:openssl 89 lang/linux-rl9-python3 python:python 21 print/linux-c7-cups-libs apple:cups 12 security/wpa_supplicant29 w1.fi:wpa_supplicant 4 editors/kate kde:kate 1 …