Re: [EWG] [LDWG] [FBSD_LDWG] (272902) Laptop Project: Wi-Fi privacy/security: clear-text passwords for WPA-EAP e.g. eduroam

[Graham Perrin]

On 11/01/2025 23:47, Tomek CEDRO wrote:


https://man.freebsd.org/cgi/man.cgi?wpa_passphrase ? :-)


 a PSK is 
not applicable in wpa_gui.

[Bug 283558] devel/libsoup3: update to 3.6.1

[bugzilla-noreply]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=283558

Olivier Duchateau  changed:

   What|Removed |Added

 Attachment #256349|0   |1
is obsolete||

--- Comment #3 from Olivier Duchateau  ---
Created attachment 256649
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=256649&action=edit
Patch to update devel/libsoup3

- Update to 3.6.3
- Add VAPI option
- Add WWW entry

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 283558] devel/libsoup3: update to 3.6.3

[bugzilla-noreply]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=283558

Olivier Duchateau  changed:

   What|Removed |Added

Summary|devel/libsoup3: update to   |devel/libsoup3: update to
   |3.6.1   |3.6.3

-- 
You are receiving this mail because:
You are the assignee for the bug.

Re: [EWG] [LDWG] [FBSD_LDWG] (272902) Laptop Project: Wi-Fi privacy/security: clear-text passwords for WPA-EAP e.g. eduroam

[Chris Moerz]

On Sun, 12 Jan 2025, Graham Perrin wrote:
> On 11/01/2025 23:47, Tomek CEDRO wrote:
>
> > https://man.freebsd.org/cgi/man.cgi?wpa_passphrase ? :-)
>
>  a PSK is not
> applicable in wpa_gui.
>

What would be the expected behavior/implementation in this case?

I believe with regular WPA2, one can simply store the hash value instead
of the password. I suspect that's what we would like to get for eduroam
(TLS-EAP) too?

Supposedly, this should generate a hash value that represents the password
but we would likely have to update our stack to support this?

echo -n password_here | iconv -t utf16le | openssl md4
(source: https://bbs.archlinux.org/viewtopic.php?id=144471)

Alternatively, one could encrypt the password, but then we'd need to enter
a password for decryption every time we want to read in the conf.

chris

Re: [EWG] [LDWG] [FBSD_LDWG] (272902) Laptop Project: Wi-Fi privacy/security: clear-text passwords for WPA-EAP e.g. eduroam

[Graham Perrin]

On 12/01/2025 17:06, Chris Moerz wrote:

…
(source: https://bbs.archlinux.org/viewtopic.php?id=144471)
…


Nice find! Thanks, Chris. It helped me to refocus on what was already in 
the bug report.




… That might be enough for me to close this as not a bug. I'll aim to 
confirm no later than week ending Friday 24th January.

[Bug 283512] x11-toolkits/granite7: update to 7.6.0

[bugzilla-noreply]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=283512

Olivier Duchateau  changed:

   What|Removed |Added

 Blocks||284019


Referenced Bugs:

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=284019
[Bug 284019] multimedia/elementary-videos: update to 8.0.1
-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 281083] devel/glib20 and devel/gobject-introspection: update to 2.82 and 1.82

[bugzilla-noreply]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=281083

--- Comment #21 from commit-h...@freebsd.org ---
A commit in branch main references this bug:

URL:
https://cgit.FreeBSD.org/ports/commit/?id=5cb5e6989951ec3a761dd43597771b414f4492ec

commit 5cb5e6989951ec3a761dd43597771b414f4492ec
Author: Charlie Li 
AuthorDate: 2025-01-12 19:03:35 +
Commit: Charlie Li 
CommitDate: 2025-01-12 19:12:08 +

science/gchemutils: fix build with glib 2.82

PR: 281083

 .../gchemutils/files/patch-libs_gccv_text.cc (new) | 29 ++
 1 file changed, 29 insertions(+)

-- 
You are receiving this mail because:
You are on the CC list for the bug.
You are the assignee for the bug.