Re: cve-2017-13077 - WPA2 security vulni

On 2017-10-17 08:58, David Wolfskill wrote:
> On Mon, Oct 16, 2017 at 11:27:00PM -0700, Cy Schubert wrote:
>> In message <FE754A9E-BE47-4843-AB3A-2619665F1657_at_lastsummer.de>, Franco 
>> Fichtne
>> r writes:
>> ...
>>> wpa_supplicant	2.6_2
>>>
>>> No apparent issues with the ports, preliminary connectivity
>>> checks work as expected.  Started a public CFT over at OPNsense
>>> to gather more feedback.
>>
>> Agreed.
>> ....
> 
> First: Thank you for doing this, Cy.
> 
> I am now (also) running wpa_supplicant-2.6_2 successfully on my laptop
> (when it's running stable/11).
> 
> I did have one mild surprise: I had rebooted my laptop to verify that
> the ports version of wpa_supplicant would work, and as the screen went
> dark, I recalled that I had failed to copy /etc/wpa_supplicant.conf to
> /usr/local/etc -- but my concern proved to be unfounded: the
> wpa_supplicant.conf in /etc/ was used (successfully).
> 
> Question:  Should one expect a wpa_supplicant-2.6_2 executable built
> under FreeBSD stable/11 (amd64) to work on the same hardware, but
> running head?

Did you run the version from ports, or did you run the base /etc/rc.d
script with your rc.conf set to point to the ports binary? This will run
the command with -c /etc/wpa_supplicant.conf overriding the ports default.

So this is expected to work in this way.

> 
> For reasons that are (at best) tangential to this topic, I track,
> build, and smoke-test both stable/11 and head daily, but only build
> the ports (daily) under (the just-built/booted) stable/11 -- depending
> on misc/compat11 to handle things as necessary for head.  This works
> (well, IMO)... except that when I had configured my "head slice"
> to use the ports version of wpa_supplicant, the latter was apparently
> not happy:
> 
> ...
> Oct 17 11:06:13 localhost kernel: wlan0: Ethernet address: 00:24:d6:7a:03:ce
> Oct 17 11:06:13 localhost wpa_supplicant[1279]: Successfully initialized wpa_supplicant
> Oct 17 11:06:14 localhost wpa_supplicant[1279]: ioctl[SIOCS80211, op=98, arg_len=32]: Invalid argument
> Oct 17 11:06:14 localhost wpa_supplicant[1279]: failed to IEEE80211_IOC_DEVCAPS: Invalid argument
> Oct 17 11:06:14 localhost wpa_supplicant[1279]: wlan0: Failed to initialize driver interface
> Oct 17 11:06:14 localhost root: /etc/rc.d/wpa_supplicant: WARNING: failed to start wpa_supplicant
> ....
> 
> The laptop spends the vast bulk of its time running stable/11, so
> the threat is somewhat mitigated....
> 
> Peace,
> david
> 


-- 
Allan Jude