OpenSSL 3.0 transition might lead to unsupported protocols

Bug #1951624 reported by Simon Chopin
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
wpa (Ubuntu)
Fix Released
High
Unassigned

Bug Description

OpenSSL 3.0, which is planned to land in the archive Very Soon™, has moved quite a few algorithms to its "legacy" provider, which isn't loaded by default. Some of those algorithms are used in various protocols implemented by wpa_supplicant, so it's likely that the package will be broken in this regard.

Sadly, this isn't caught by either the build-time tests nor the autopkgtests.

A first good step would be to patch wpa_supplicant to load the "legacy" provider (and the default one too, cf https://www.openssl.org/docs/manmaster/man7/crypto.html , look for "legacy").

Simon Chopin (schopin)
tags: added: fr-1881
Changed in wpa (Ubuntu):
importance: Undecided → High
tags: added: rls-jj-incoming
Revision history for this message
Sebastien Bacher (seb128) wrote :

Upstream fixed it in https://w1.fi/cgit/hostap/commit/?id=ff2eccbd which is included in the new 2.10 version uploaded to Ubuntu

Changed in wpa (Ubuntu):
status: New → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.