Re: pkcs11-provider update breaks eduroam

2024-11-30 Thread Michael Catanzaro
On Fri, Nov 29 2024 at 08:09:20 PM -05:00:00, Neal Gompa wrote: Indeed. This stuff should work out of the box. It is unacceptable to break it like this. Looks like it's fixed by pkcs11-provider-0.6-2, which is a sabotage update to turn off pkcs11-provider until the problem can be fixed prope

Re: pkcs11-provider update breaks eduroam

2024-11-29 Thread Neal Gompa
On Fri, Nov 22, 2024 at 11:27 AM Michael Catanzaro wrote: > > On Wed, Nov 20 2024 at 04:03:27 PM +01:00:00, Clemens Lang > wrote: > > That was the case with openssl-pkcs11 (the package that contains the > > OpenSSL PKCS#11 ENGINE) for years. > > The use of PKCS#11 tokens is not very common. I don

Re: pkcs11-provider update breaks eduroam

2024-11-29 Thread Kevin Kofler via devel
Michael Catanzaro wrote: > * We do expect smartcards to work on immutable systems where > installing extra packages is either inconvenient (Silverblue and > Kinoite require overlays) or not possible (future Fedoras, hopefully) Quite a distopian future you paint there! My vision of the future does

Re: pkcs11-provider update breaks eduroam

2024-11-22 Thread Michael Catanzaro
On Wed, Nov 20 2024 at 04:03:27 PM +01:00:00, Clemens Lang wrote: That was the case with openssl-pkcs11 (the package that contains the OpenSSL PKCS#11 ENGINE) for years. The use of PKCS#11 tokens is not very common. I don’t think it’s too much to ask to install an additional package if you want

Re: pkcs11-provider update breaks eduroam

2024-11-21 Thread Dmitry Belyavskiy
Dear Davide, On Thu, Nov 21, 2024 at 1:07 PM Davide Caratti wrote: > hello, > > On Wed, Nov 20, 2024 at 12:48 PM Dmitry Belyavskiy > wrote: > > > > [...] > >> > The idea here was to auto-enable pkcs11-provider when it is > installed, which still makes sense to me. The issue here I think is that

Re: pkcs11-provider update breaks eduroam

2024-11-21 Thread Arthur Bols via devel
On 21/11/2024 13:06, Davide Caratti wrote: yes. The problem is in md4_vector() [1], the legacy provider has a non-NULL pointer and EVP_md4() fetches correctly. However, when pkcs11-provider is installed, EVP_DigestInit_ex() fails. I tried this patch [2] on upstream wpa_supplicant, and it seem to

Re: pkcs11-provider update breaks eduroam

2024-11-21 Thread Davide Caratti
hello, On Wed, Nov 20, 2024 at 12:48 PM Dmitry Belyavskiy wrote: > [...] >> > The idea here was to auto-enable pkcs11-provider when it is installed, >> > which still makes sense to me. The issue here I think is that many people >> > ended up with pkcs11-provider installed because of a recommen

Re: pkcs11-provider update breaks eduroam

2024-11-20 Thread Michael Catanzaro
On Wed, Nov 20 2024 at 11:09:05 AM +01:00:00, Clemens Lang wrote: The idea here was to auto-enable pkcs11-provider when it is installed, which still makes sense to me. The issue here I think is that many people ended up with pkcs11-provider installed because of a recommendation. We should remo

Re: pkcs11-provider update breaks eduroam

2024-11-20 Thread Clemens Lang
Hi Michael, > On 20. Nov 2024, at 15:52, Michael Catanzaro wrote: > > On Wed, Nov 20 2024 at 11:09:05 AM +01:00:00, Clemens Lang > wrote: >> The idea here was to auto-enable pkcs11-provider when it is installed, which >> still makes sense to me. The issue here I think is that many people ende

Re: pkcs11-provider update breaks eduroam

2024-11-20 Thread Davide Caratti
hi, (adding Vlad to the loop) On Wed, Nov 20, 2024 at 3:43 PM Davide Caratti wrote: > > hi, > > (Also, I tried reproducing locally on f41 > with NetworkManager-ci and << simwifi_ttls_mschapv2_eap >> test, but > did not see any failure... @Arthur, can you share an example > configuration for ed

Re: pkcs11-provider update breaks eduroam

2024-11-20 Thread Davide Caratti
hi, On Wed, Nov 20, 2024 at 12:48 PM Dmitry Belyavskiy wrote: > [...] >> I'm trying a setup right now, to understand what's happening. >> wpa_supplicant does not need pkcs11-provider *at the moment*, because >> it uses engine API for pkcs11 (and that is going to be a problem in >> the future for

Re: pkcs11-provider update breaks eduroam

2024-11-20 Thread Dmitry Belyavskiy
On Wed, Nov 20, 2024 at 11:38 AM Davide Caratti wrote: > hi, > > On Wed, Nov 20, 2024 at 11:09 AM Clemens Lang wrote: > > > > Hi, > > > > > On 19. Nov 2024, at 17:47, Arthur Bols wrote: > > > > > > A few days ago pkcs11-provider-0.5-3.fc41 update was pushed to Fedora > 41. Unfortunately, this u

Re: pkcs11-provider update breaks eduroam

2024-11-20 Thread Davide Caratti
hi, On Wed, Nov 20, 2024 at 11:09 AM Clemens Lang wrote: > > Hi, > > > On 19. Nov 2024, at 17:47, Arthur Bols wrote: > > > > A few days ago pkcs11-provider-0.5-3.fc41 update was pushed to Fedora 41. > > Unfortunately, this update breaks eduroam and possibly many other > > WPA2-Enterprise wifi

Re: pkcs11-provider update breaks eduroam

2024-11-20 Thread Clemens Lang
Hi, > On 19. Nov 2024, at 17:47, Arthur Bols wrote: > > A few days ago pkcs11-provider-0.5-3.fc41 update was pushed to Fedora 41. > Unfortunately, this update breaks eduroam and possibly many other > WPA2-Enterprise wifi networks. There are multiple threads on Fedora > Discussion, mainly [0],