Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 17 Oct 2017 11:30:13 -0700
From:      Cy Schubert <Cy.Schubert@komquats.com>
To:        "current@freebsd.org" <current@freebsd.org>,  Allan Jude <allanjude@freebsd.org>
Cc:        "freebsd-current@freebsd.org" <freebsd-current@freebsd.org>
Subject:   RE: cve-2017-13077 - WPA2 security vulni
Message-ID:  <20171017183009.2099060F@spqr.komquats.com>

next in thread | raw e-mail | index | archive | help
I had no problems last night. It associated with one of my netgear APs. I u=
sed /etc/wpa_supplicant.conf.

I am running head and all my ports are built on head (most poudeiere and a =
few by hand).

---
Sent using a tiny phone keyboard. Apologies for any typos and autocorrect.

Cy Schubert
<Cy.Schubert@cschubert.com> or <cy@freebsd.org>

-----Original Message-----
From: David Wolfskill
Sent: 17/10/2017 09:57
To: Allan Jude
Cc: freebsd-current@freebsd.org
Subject: Re: cve-2017-13077 - WPA2 security vulni

On Tue, Oct 17, 2017 at 12:51:23PM -0400, Allan Jude wrote:
> ....
> > Question:  Should one expect a wpa_supplicant-2.6_2 executable built
> > under FreeBSD stable/11 (amd64) to work on the same hardware, but
> > running head?
>=20
> Did you run the version from ports, or did you run the base /etc/rc.d
> script with your rc.conf set to point to the ports binary? This will run
> the command with -c /etc/wpa_supplicant.conf overriding the ports default=
.
>=20
> So this is expected to work in this way.

Ah.  When I installed the port, I was reminded:

| ...
| =3D=3D=3D>   Registering installation for wpa_supplicant-2.6_2
| Installing wpa_supplicant-2.6_2...
| To use the ports version of WPA Supplicant instead of the base, add:
|=20
|     wpa_supplicant_program=3D"/usr/local/sbin/wpa_supplicant"
|=20
| to /etc/rc.conf
|=20
| =3D=3D=3D> SECURITY REPORT:
| ....

So I did that.  I did not do anything to the existing
/etc/rc.d/wpa_supplicant, which had been installed as part of base
FreeBSD.

> ....

Peace,
david
--=20
David H. Wolfskill				david@catwhisker.org
Unsubstantiated claims of "Fake News" are evidence that the claimant lies a=
gain.

See http://www.catwhisker.org/~david/publickey.gpg for my public key.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20171017183009.2099060F>