FS#1560 - [wpa_supplicant]: wireless connection does not work
Description:
Wireless connection does not work
Additional info:
* package version(s)
- wpa_supplicant 2:2.9-1
- libressl 3.2.2-1
* config and/or log files etc.
Successfully initialized wpa_supplicant OpenSSL: Failed to set cipher string 'DEFAULT@SECLEVEL=1' SSL: Failed to initialize TLS context. Failed to initialize EAPOL state machines. nl80211: deinit ifname=wlp0s18f2u1 disabled_11b_rates=0
Steps to reproduce:
$ wpa_supplicant -B -i device-name -c <(wpa_passphrase “ssid” “psk”)
Closed by tobias
27.07.2021 21:37
Reason for closing: Fixed
Additional comments about closing:
27.07.2021 21:37
Reason for closing: Fixed
Additional comments about closing:
Implemented rework for package
"wpa_supplicant"
Loading...
Available keyboard shortcuts
- Alt + ⇧ Shift + l Login Dialog / Logout
- Alt + ⇧ Shift + a Add new task
- Alt + ⇧ Shift + m My searches
- Alt + ⇧ Shift + t focus taskid search
Tasklist
- o open selected task
- j move cursor down
- k move cursor up
Task Details
- n Next task
- p Previous task
- Alt + ⇧ Shift + e ↵ Enter Edit this task
- Alt + ⇧ Shift + w watch task
- Alt + ⇧ Shift + y Close Task
Task Editing
- Alt + ⇧ Shift + s save task
Found a first solution, as I compared the compilation-configuration with other systems (Void Linux, Alpine Linux, Gentoo). I deactivated the following line:
CONFIG_TLS_DEFAULT_CIPHERS="DEFAULT@SECLEVEL=1"
After another compilation wpa_supplicant is now functional as normal, but I'm quite unsure if this could be the final solution.
More from OpenBSD and ports-tree for wpa_supplicant, searching especially for the "default ciphers": https://github.com/openbsd/ports/tree/master/security/wpa_supplicant
When searching this line is especially mentioned from Debian, but we should be aware that Hyperbola and Debian are not for every part comparable - as Debian is using OpenSSL and Hyperbola keep up with LibreSSL, as more or less only system based on GNU/Linux (GNU/Linux-libre). All others have returned back to OpenSSL, reading more here: https://github.com/void-linux/void-packages/issues/20935
In general I think staying at LibreSSL is a good decision. So we should tryout different configurations also!