[pkg-wpa-devel] Bug#668612: Bug#668612: wpasupplicant: ssl bad certificate

[Stefan Lippers-Hollmann]

Hi

On Wednesday 23 May 2012, Stefan Lippers-Hollmann wrote:
[…]
> On Wednesday 23 May 2012, Luis Fernando Llana Díaz wrote:
> > Hi Stefan,
> >   I am sorry, today I am a bit sick..... what I wrote is wrong
> >   What I meant to say is that it worked with the old version that I
> > downloaded from squeeze. But it does NOT work with the version from
> > unstable. I am sorry for the mistake. I can help you debugging this
> > problem because I am really interested in making this work. I have tried
> > with nl80211, but it neither works.
> 
> Like I mentioned in my previous mail, the best option would be to find 
> a system using wpasupplicant >= 0.7.x that is working, ideally Fedora, 
> OpenSuSE, eventually Mandriva/ Mageia - Ubuntu is most likely too 
> similar to Debian. Ideally we could also test to build wpa 1.0 against 
> libssl-dev 0.9.8 XOR gnutls and to rebuild wpasupplicant 0.6.10 against
> libssl 1.0.0, but there are a couple of changes which make this 
> relatively difficult.
> 
> We also can't rule out misconfiguration yet, because I don't see other
> contemporary distros packaging wpasupplicant significantly different…
> Given these bugreports and assuming that other distros are using
> comparable versions of wpasupplicant and openssl, I find it hard t
> believe that it's broken for everyone using (contemporary) linux and
> eduroam.
> 
> Given that no one of us has access to eduroam installs ourselves, nor
> have enough information to recreate an eduroam test environment, we
> have very limited options to debug this particular issue. 
> wpa_supplicant upstream might have more experience to debug this 
> problem with you, but the imho the first attempt should be to find 
> other linux users at your institution who might have some advice about
> configuration problems.

What might also be worth testing, if it installs without further 
problems, would be wpasupplicant 0.7.3-1[1], which was the last version
built against openssl 0.9.8 (like wpasupplicant 0.6.10 was). Getting to
know if this makes a difference might help a lot, although I don't see
an immediate fix for that either.
 
Regards
	Stefan Lippers-Hollmann

[1]	http://snapshot.debian.org/package/wpasupplicant/0.7.3-1/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part.
URL: <http://lists.alioth.debian.org/pipermail/pkg-wpa-devel/attachments/20120523/e469444c/attachment.pgp>