BSD Portssecurity/wpa_supplicant 2.12_1 FreeBSD
Supplicant (client) for WPA/802.1x protocols
- System
- FreeBSD
- Repository
- FreeBSD ports
- Maintainer
- [email protected]
- Last update
- Commit
627ec0e586- License
- BSD3CLAUSE
- Categories
- security, net
- Package size
- 699.5 KiB, 1954.4 KiB installed
Description
wpa_supplicant is a client (supplicant) with support for WPA and WPA2 (IEEE 802.11i / RSN). It is suitable for both desktop/laptop computers and embedded systems. Supplicant is the IEEE 802.1X/WPA component that is used in the client stations. It implements key negotiation with a WPA Authenticator and it controls the roaming and IEEE 802.11 authentication/ association of the wlan driver.
wpa_supplicant is designed to be a "daemon" program that runs in the background and acts as the backend component controlling the wireless connection. wpa_supplicant supports separate frontend programs and a text-based frontend (wpa_cli) and a GUI (wpa_gui) are included with wpa_supplicant.
In the other systems
| System | Port | Version |
|---|---|---|
| FreeBSD | security/wpa_supplicant | 2.12_1 |
| OpenBSD | security/wpa_supplicant | 2.9p7 |
| NetBSD | net/wpa_supplicant | 2.6nb3 |
| DragonFly | security/wpa_supplicant | 2.10_10 |
| MidnightBSD | security/wpa_supplicant | 2.11_1 |
| HardenedBSD | security/wpa_supplicant | 2.12_1 |
| GhostBSD | security/wpa_supplicant | 2.12_1 |
| OPNsense | security/wpa_supplicant | 2.11_7 |
Install
Binary package:
pkg install wpa_supplicantFrom the ports tree:
cd /usr/ports/security/wpa_supplicant/ && make install cleanTo depend on this port in another port's Makefile:
RUN_DEPENDS= wpa_supplicant>0:security/wpa_supplicantPackages
The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.
| Repository | aarch64 | amd64 | armv6 | armv7 | i386 |
|---|---|---|---|---|---|
| FreeBSD:14:latest | 2.12_1 | 2.12_1 | 2.10_6 | 2.11_5 | 2.12_1 |
| FreeBSD:14:quarterly | 2.12_1 | 2.12_1 | n/a | 2.11_5 | 2.12_1 |
| FreeBSD:15:latest | 2.12_1 | 2.12_1 | n/a | 2.11_5 | 2.11_5 |
| FreeBSD:15:quarterly | 2.12_1 | 2.12_1 | n/a | n/a | n/a |
| FreeBSD:16:latest | 2.12_1 | 2.12_1 | n/a | n/a | n/a |
| FreeBSD:16:quarterly | n/a | n/a | n/a | n/a | n/a |
Dependencies
The Makefile names none itself; they come from USES and USE_*.
The full lists below include those, and their dependencies in turn.
Build dependencies 15
Run dependencies 12
No port depends on this one.
Configuration
Options name: security_wpa_supplicant
| Option | Default | Description |
|---|---|---|
| AKA | off | Autentication and Key Agreement (UMTS) |
| AKA_PRIME | off | AKA Prime variant (RFC 5448) |
| BSD | on | BSD net80211 interface |
| DBUS | on | D-Bus IPC system support |
| DEBUG_FILE | off | Support for writing debug log to a file |
| DEBUG_SYSLOG | on | Send debug messages to syslog instead of stdout |
| DELAYED_MIC | off | Mitigate TKIP attack, random delay on MIC errors |
| DOCS | off | Build and/or install documentation |
| EAPOL_TEST | off | Development testing |
| EKE | on | Encrypted Key Exchange |
| FAST | on | Flexible Authentication via Secure Tunneling |
| GPSK | on | Generalized Pre-Shared Key |
| GTC | on | Generic Token Card |
| HS20 | on | Hotspot 2.0 |
| HT_OVERRIDES | off | Disable HT/HT40, mask MCS rates, etc |
| IEEE80211AC | off | Very High Throughput, AP mode (IEEE 802.11ac) |
| IEEE80211N | off | High Throughput, AP mode (IEEE 802.11n) |
| IEEE80211R | on | Fast BSS Transition (IEEE 802.11r-2008) |
| IEEE80211W | on | Management Frame Protection (IEEE 802.11w) |
| IEEE8021X_EAPOL | on | EAP over LAN support |
| IKEV2 | on | Internet Key Exchange version 2 |
| INTERWORKING | on | Improve ext. network interworking (IEEE 802.11u) |
| IPV6 | on | Development testing IPv6 support |
| LEAP | on | Lightweight Extensible Authentication Protocol |
| LIBWPA | on | libwpa_client Shared Library |
| MATCH | on | Interface match mode |
| MBO | on | Multi Band Operation (Enables WNM) |
| MD5 | on | MD5 hash (deprecated, no key generation) |
| MSCHAPV2 | on | Microsoft CHAP version 2 (RFC 2759) |
| NDIS | off | Windows NDIS interface |
| NONE | off | The 'no driver' interface, e.g. WPS ER only |
| NO_ROAMING | off | Disable roaming |
| OTP | on | One-Time Password |
| P2P | off | Peer-to-Peer support |
| PASN | on | Pre-Association Security Negotiation |
| PAX | on | Password Authenticated Exchange |
| PEAP | on | Protected Extensible Authentication Protocol |
| PKCS12 | on | PKCS#12 (PFS) support |
| PRIVSEP | off | Privilege separation |
| PSK | on | Pre-Shared key |
| PWD | on | Shared password (RFC 5931) |
| RSN_PREAUTH | on | |
| SAKE | on | Shared-Secret Authentication & Key Establishment |
| SIM | off | Subscriber Identity Module |
| SIM_SIMULATOR | off | SIM simulator (Milenage) for EAP-SIM |
| SMARTCARD | on | Private key on smartcard support |
| TDLS | off | Tunneled Direct Link Setup |
| TEST | off | Development testing interface |
| TLS | on | Transport Layer Security |
| TLSV12 | off | Build with TLS v1.2 instead of TLS v1.0 |
| TNC | on | Trusted Network Connect |
| TTLS | on | Tunneled Transport Layer Security |
| USIM_SIMULATOR | off | SIM simulator (Milenage) for EAP-AKA |
| VHT_OVERRIDES | off | Disable VHT, mask MCS rates, etc |
| WEP | on | WEP support |
| WIRED | on | Wired ethernet interface |
| WNM | on | Wireless Network Monitoring |
| WPS | on | Wi-Fi Protected Setup |
| WPS_ER | on | Enable WPS External Registrar |
| WPS_NFC | on | Near Field Communication (NFC) configuration |
| WPS_NOREG | off | Disable open network credentials when registrar |
| WPS_UPNP | on | Universal Plug and Play support |
- USES
- cpe gmake pkgconfig:build readline ssl
- Service scripts
- none
Message after installing
To use the ports version of WPA Supplicant instead of the base, add:
wpa_supplicant_program="/usr/local/sbin/wpa_supplicant"
to /etc/rc.conf
Files
pkg-plist 5
- sbin/eapol_test
- sbin/wpa_supplicant
- sbin/wpa_passphrase
- sbin/wpa_cli
- @sample etc/wpa_supplicant.conf.sample
distinfo 1
| File | Size | SHA256 |
|---|---|---|
| wpa_supplicant-2.12.tar.gz | 4.247413e+06 | 08e23937e16d0155e55cab2b51f51fbe10d80a1aa91c4e15442645059b737ef6 |
Master sites 1
- https://w1.fi/releases/
Commit history 3
| Date | Commit | Credits | Log message |
|---|---|---|---|
627ec0e586 |
Pascal Ernster | security/wpa_supplicant*: Fix EAPOL_TEST build for non-standard SSL_DEFAULT The post-build target does not have the same environment variables setup
as the do-build target. This results in the eapol_test binary getting
compiled against the headers of the TLS library specified in
SSL_DEFAULT, but getting linked against the TLS library from the base
system regardless of SSL_DEFAULT, causing build failures when
SSL_DEFAULT is set to a different TLS library/version than the on from
the base system.
Fix this by not using the post-build target to build the eapol_test
binary, but instead conditionally add the eapol_test target to
TARGET_ALL if the EAPOL_TEST option is enabled for the port.
Signed-off-by: Pascal Ernster <[email protected]> |
|
6c34779afd |
Cy Schubert | {net,security}/{hostapd*,wpa_supplicant*}: Remove unneeded patch Upstream has incorporated our patch. We can remove ours now.
Fixes: d7e66a13b386, 2b067a2748cc, f37b72501299, f37b72501299 |
|
28460afd5d |
Cy Schubert | security/wpa_supplicant: Update to 2.12 This includes the following changes:
* support RSN overriding (e.g., WPA3-Personal Compatibility Mode)
* improve BSS transition management support
* EHT/IEEE 802.11be/Wi-Fi 7
- more complete support
- fix message validation issues that could enable DoS attacks
* support Wi-Fi Direct R2
* support Wi-Fi Aware (add synchronized NAN; extend USD support)
* support Proximity Ranging
* support SPP A-MSDU negotiation
* support IEEE 802.11bi functionality
- changing SAE password identifiers
- EPPKE
- IEEE 802.1X/EAP in Authentication frames
- Association frame encryption
- PMKID privacy
* enable layer 2/Wi-Fi multicast filtering for all networks (not
just some Passpoint networks which enabled this before)
* wpa_gui: port to Qt6
* support OpenSSL 3.0 API changes
… |