svn commit: r341759 - in head: contrib/wpa contrib/wpa/hostapd contrib/wpa/hs20/client contrib/wpa/src/ap contrib/wpa/src/common contrib/wpa/src/crypto contrib/wpa/src/drivers contrib/wpa/src/eap_c...

[Cy Schubert]

In message <c7e11559-8619-e65a-f71a-f4ea09d8b8b0 at FreeBSD.org>, Jung-uk 
Kim writ
es:
> This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
> --1WzVlQChcwPiBmKooCiYuMNrbS28KVujs
> Content-Type: multipart/mixed; boundary="mK5ijTqRdq36SSbJEKLOKtLDhMyjY2IRB";
>  protected-headers="v1"
> From: Jung-uk Kim <jkim at FreeBSD.org>
> To: Cy Schubert <cy at FreeBSD.org>, src-committers at freebsd.org,
>  svn-src-all at freebsd.org, svn-src-head at freebsd.org
> Message-ID: <c7e11559-8619-e65a-f71a-f4ea09d8b8b0 at FreeBSD.org>
> Subject: Re: svn commit: r341759 - in head: contrib/wpa contrib/wpa/hostapd
>  contrib/wpa/hs20/client contrib/wpa/src/ap contrib/wpa/src/common
>  contrib/wpa/src/crypto contrib/wpa/src/drivers contrib/wpa/src/eap_c...
> References: <201812090645.wB96jnso066329 at repo.freebsd.org>
> In-Reply-To: <201812090645.wB96jnso066329 at repo.freebsd.org>
>
> --mK5ijTqRdq36SSbJEKLOKtLDhMyjY2IRB
> Content-Type: multipart/mixed;
>  boundary="------------875BC694AF1AFD327ADF2704"
> Content-Language: en-US
>
> This is a multi-part message in MIME format.
> --------------875BC694AF1AFD327ADF2704
> Content-Type: text/plain; charset=utf-8
> Content-Transfer-Encoding: quoted-printable
>
> On 18. 12. 9., Cy Schubert wrote:
> > Author: cy
> > Date: Sun Dec  9 06:45:49 2018
> > New Revision: 341759
> > URL: https://svnweb.freebsd.org/changeset/base/341759
> >=20
> > Log:
> >   MFV r341618:
> >  =20
> >   Update wpa 2.6 --> 2.7.
>
> =2E..
>
> This broke my network configuration and I found the following messages
> from /dev/log/message.
>
> =2E.. bge0: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=3D0 method=3D25
> =2E.. bge0: CTRL-EVENT-EAP-METHOD EAP vendor 0 method 25 (PEAP) selected
> =2E.. SSL: SSL3 alert: write (local SSL3 detected an error):fatal:interna=
> l
> error
> =2E.. OpenSSL: openssl_handshake - SSL_connect error:141A90B5:SSL
> routines:ssl_cipher_list_to_bytes:no ciphers available
> =2E.. bge0: CTRL-EVENT-EAP-FAILURE EAP authentication failed
>
> I tracked it down and found default ciphers were not set because
> usr.sbin/wpa/Makefile.inc added an empty string, i.e.,
> -DTLS_DEFAULT_CIPHERS=3D\"\".
>
> With the attached patch, I got my connection back.
>
> Jung-uk Kim

Thanks for that jkim at . It's in r341839 now.


-- 
Cheers,
Cy Schubert <Cy.Schubert at cschubert.com>
FreeBSD UNIX:  <cy at FreeBSD.org>   Web:  http://www.FreeBSD.org

	The need of the many outweighs the greed of the few.