BSD Ports

security/wpa_supplicant-devel 2026.09.22_4 FreeBSD

Supplicant (client) for WPA/802.1x protocols

System
FreeBSD
Repository
FreeBSD ports
Maintainer
[email protected]
Last update
Commit
2aef870d6c
License
BSD3CLAUSE
Categories
security, net
Package size
708.2 KiB, 1973.9 KiB installed

Description

wpa_supplicant is a client (supplicant) with support for WPA and WPA2 (IEEE 802.11i / RSN). It is suitable for both desktop/laptop computers and embedded systems. Supplicant is the IEEE 802.1X/WPA component that is used in the client stations. It implements key negotiation with a WPA Authenticator and it controls the roaming and IEEE 802.11 authentication/ association of the wlan driver.

wpa_supplicant is designed to be a "daemon" program that runs in the background and acts as the backend component controlling the wireless connection. wpa_supplicant supports separate frontend programs and a text-based frontend (wpa_cli) and a GUI (wpa_gui) are included with wpa_supplicant.

In the other systems

The newest version among them is 2026.09.22, as upstream numbers it.

SystemPortVersionVulnerabilitiesStatusMaintainerLast update
FreeBSDsecurity/wpa_supplicant-devel2026.09.22_4 newestnone known-[email protected]2026-09-23
DragonFlysecurity/wpa_supplicant-devel2024.06.20none known-[email protected]-
HardenedBSDsecurity/wpa_supplicant-devel2026.09.22_4 newestno data-[email protected]-
GhostBSDsecurity/wpa_supplicant-devel2026.08.09_4no data-[email protected]-

Install

Binary package:

pkg install wpa_supplicant-devel

From the ports tree:

cd /usr/ports/security/wpa_supplicant-devel/ && make install clean

To depend on this port in another port's Makefile:

RUN_DEPENDS=	wpa_supplicant-devel>0:security/wpa_supplicant-devel

Packages

The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.

Repositoryaarch64amd64armv6armv7i386
FreeBSD:14:latest2026.09.22_42026.09.22_42022.12.202025.06.252026.09.22_4
FreeBSD:14:quarterly2026.09.22_42026.09.22_4n/a2025.06.252026.09.22_4
FreeBSD:15:latest2026.09.22_42026.09.22_4n/a2025.06.252025.06.25
FreeBSD:15:quarterly2026.09.22_42026.09.22_4n/an/an/a
FreeBSD:16:latest2026.09.22_42026.09.22_4n/an/an/a
FreeBSD:16:quarterlyn/an/an/an/an/a

Dependencies

The Makefile names none itself; they come from USES and USE_*.

The full lists below include those, and their dependencies in turn.

Build dependencies 15
Run dependencies 12

No port depends on this one.

Configuration

Options name: security_wpa_supplicant

OptionDefaultDescription
AKAoffAutentication and Key Agreement (UMTS)
AKA_PRIMEoffAKA Prime variant (RFC 5448)
BSDonBSD net80211 interface
DBUSonD-Bus IPC system support
DEBUG_FILEoffSupport for writing debug log to a file
DEBUG_SYSLOGonSend debug messages to syslog instead of stdout
DELAYED_MICoffMitigate TKIP attack, random delay on MIC errors
DOCSoffBuild and/or install documentation
EAPOL_TESToffDevelopment testing
EKEonEncrypted Key Exchange
FASTonFlexible Authentication via Secure Tunneling
GPSKonGeneralized Pre-Shared Key
GTConGeneric Token Card
HS20onHotspot 2.0
HT_OVERRIDESoffDisable HT/HT40, mask MCS rates, etc
IEEE80211ACoffVery High Throughput, AP mode (IEEE 802.11ac)
IEEE80211NoffHigh Throughput, AP mode (IEEE 802.11n)
IEEE80211RonFast BSS Transition (IEEE 802.11r-2008)
IEEE80211WonManagement Frame Protection (IEEE 802.11w)
IEEE8021X_EAPOLonEAP over LAN support
IKEV2onInternet Key Exchange version 2
INTERWORKINGonImprove ext. network interworking (IEEE 802.11u)
IPV6onDevelopment testing IPv6 support
LEAPonLightweight Extensible Authentication Protocol
LIBWPAonlibwpa_client Shared Library
MATCHonInterface match mode
MBOonMulti Band Operation (Enables WNM)
MD5onMD5 hash (deprecated, no key generation)
MSCHAPV2onMicrosoft CHAP version 2 (RFC 2759)
NDISoffWindows NDIS interface
NONEoffThe 'no driver' interface, e.g. WPS ER only
NO_ROAMINGoffDisable roaming
OTPonOne-Time Password
P2PoffPeer-to-Peer support
PASNonPre-Association Security Negotiation
PAXonPassword Authenticated Exchange
PEAPonProtected Extensible Authentication Protocol
PKCS12onPKCS#12 (PFS) support
PRIVSEPoffPrivilege separation
PSKonPre-Shared key
PWDonShared password (RFC 5931)
RSN_PREAUTHon
SAKEonShared-Secret Authentication & Key Establishment
SIMoffSubscriber Identity Module
SIM_SIMULATORoffSIM simulator (Milenage) for EAP-SIM
SMARTCARDonPrivate key on smartcard support
TDLSoffTunneled Direct Link Setup
TESToffDevelopment testing interface
TLSonTransport Layer Security
TLSV12offBuild with TLS v1.2 instead of TLS v1.0
TNConTrusted Network Connect
TTLSonTunneled Transport Layer Security
USIM_SIMULATORoffSIM simulator (Milenage) for EAP-AKA
VHT_OVERRIDESoffDisable VHT, mask MCS rates, etc
WEPonWEP support
WIREDonWired ethernet interface
WNMonWireless Network Monitoring
WPSonWi-Fi Protected Setup
WPS_ERonEnable WPS External Registrar
WPS_NFConNear Field Communication (NFC) configuration
WPS_NOREGoffDisable open network credentials when registrar
WPS_UPNPonUniversal Plug and Play support
USES
cpe gmake pkgconfig:build readline ssl
Service scripts
none

Message after installing

To use the ports version of WPA Supplicant instead of the base, add:

    wpa_supplicant_program="/usr/local/sbin/wpa_supplicant"

to /etc/rc.conf

Files

pkg-plist 5
  • sbin/eapol_test
  • sbin/wpa_supplicant
  • sbin/wpa_passphrase
  • sbin/wpa_cli
  • @sample etc/wpa_supplicant.conf.sample
distinfo 1
FileSizeSHA256
cschuber-hostap-2026.09.22-24c033de8_GH0.tar.gz5.821354e+06a2d3f54d94d827d305d8cccdd4ad84bbe08e9b954b814e621f353bf5cba4de73

Commit history 6

DateCommitCreditsLog message
2aef870d6c Cy Schubert security/wpa_supplicant-devel: Update to latest GH commit
Update to the latest w1.fi commit, proxied through my GH account.
627ec0e586 Pascal Ernster security/wpa_supplicant*: Fix EAPOL_TEST build for non-standard SSL_DEFAULT
The post-build target does not have the same environment variables setup as the do-build target. This results in the eapol_test binary getting compiled against the headers of the TLS library specified in SSL_DEFAULT, but getting linked against the TLS library from the base system regardless of SSL_DEFAULT, causing build failures when SSL_DEFAULT is set to a different TLS library/version than the on from the base system. Fix this by not using the post-build target to build the eapol_test binary, but instead conditionally add the eapol_test target to TARGET_ALL if the EAPOL_TEST option is enabled for the port. Signed-off-by: Pascal Ernster <[email protected]>
6c34779afd Cy Schubert {net,security}/{hostapd*,wpa_supplicant*}: Remove unneeded patch
Upstream has incorporated our patch. We can remove ours now. Fixes: d7e66a13b386, 2b067a2748cc, f37b72501299, f37b72501299
0a5716395c Cy Schubert security/wpa_supplicant-devel: Add missing patch
Add patch missed in d7e66a13b386. Fixes: d7e66a13b386
d7e66a13b3 Cy Schubert security/wpa_supplicant-devel: Update to latest GH commit
Update to the latest w1.fi commit, proxied through my GH account.

The latest 5 of 6 in the history this site was built from.