Wireless config based on ESSID?

mdj · 03-07-2005, 02:20 PM

Do a find from / for md5.h.

littlemidget · 03-10-2005, 11:10 AM

So, after a lot of back and forth, this is what I now have:

My .config:

Code:

# Uncomment following two lines and fix the paths if you have installed openssl
# in non-default location
CFLAGS += -I/usr/include/ssl/
LIBS += -L/usr/local/openssl/lib

# Enable IEEE 802.1X Supplicant (automatically included if any EAP method is
# included)
CONFIG_IEEE8021X_EAPOL=y

# EAP-FAST
CONFIG_EAP_FAST=y

# Include control interface for external programs, e.g, wpa_cli
CONFIG_CTRL_IFACE=y

# Include interface for using external supplicant (Xsupplicant) for EAP
# authentication
CONFIG_XSUPPLICANT_IFACE=y

'make' gives me this error:

Code:

bluefish:/usr/local/lib/wpa_supplicant-0.3.8# make
cc -MMD -O2 -Wall -g -I../driver/modules -I../utils -I../hostapd -I/usr/include/ssl/ -DEAP_FAST -DIEEE8021X_EAPOL -DEAP_TLS_FUNCS -DCONFIG_CTRL_IFACE -DCONFIG_XSUPPLICANT_IFACE   -c -o tls_openssl.o tls_openssl.c
tls_openssl.c: In function `tls_connection_client_hello_ext':
tls_openssl.c:852: error: structure has no member named `hello_extension'
tls_openssl.c:854: error: structure has no member named `hello_extension'
tls_openssl.c:855: error: structure has no member named `hello_extension_len'
tls_openssl.c:859: error: structure has no member named `hello_extension'
tls_openssl.c:860: error: structure has no member named `hello_extension_len'
tls_openssl.c:863: error: structure has no member named `hello_extension'
tls_openssl.c:864: error: structure has no member named `hello_extension'
tls_openssl.c:867: error: structure has no member named `hello_extension'
tls_openssl.c:872: error: structure has no member named `hello_extension_len'
make: *** [tls_openssl.o] Error 1

Any help?

mdj · 03-10-2005, 03:39 PM

Hm. I'm fresh out of ideas at this point, sorry.

cpd2000cpd · 12-08-2005, 04:54 PM

here you go guys this worked for me let me know if you guys need any help

FC4, IPW2200, WPA and EAP-FAST on T42
For FC5 Before you start you need to remove wpa_supplicant_whatever-fc5.rpm
for FC5, ignore STEPs 1 and 2 and start from Step 3 edited on 4/12/06 3:44 PM

System requirements:
FC4
IPW2200 1.0.6 or later
ieee80211 1.0.6 or later
OpenSSL 0.9.7 or later
WPA_Supplicant 4.7 or later

Kernel 2.6.x or later

Assuming you have 2.6.x or later kernel installed

Step-1

Download openssl package
Download wpa_Supplicant package

ipw2200.sf.net (ipw2200-1.0.8.tgz)
ipw2200.sf.net/firmware.php (pw2200-fw-2.4.tgz)
ieee80211.sf.net (ieee80211-1.1.6.tgz).

Step-2

1. Everything downloads to the desktop, by default. So I just went to the desktop and on each file you download, right-click and go to "extract here"

2. Next, you are going to have to remove all the old ieee files and the ipw2200 drivers. To do so, open up terminal and type this:

#cd /Desktop/ieee80211-1.1.6.tgz_FILES/ieee80211-1.1.6
#./remove-old ***That's a period in front of the / so Period/remove-old***

Also,

#cd /Desktop/ipw2200-1.0.8.tgz_FILES/ipw2200-1.0.8/
#./remove-old

3. Now we're ready to install these new drivers. I don't think order matters but I installed ieee first then the ipw2200 driver..

#cd /Desktop/ieee80211-1.1.6.tgz_FILES/ieee80211-1.1.6
#make
#make install

#cd /Desktop/ipw2200-1.0.8.tgz_FILES/ipw2200-1.0.8/
#make
#make install
#modprobe ipw2200

4. That's it for installing the drivers! Now we need to copy the firmware into the appropiate directory. I did it the noob'y way, Click on Applications --> System Tools --> File Browser, locate your Desktop and then open up the firmware folder. Copy ALL of those files in that folder and then in the Location Bar type in /lib/firmware and paste it all into that.

5. This may not be necessary, but for safe measures, restart your computer. When you're back in, go to Applications --> System Tools --> Network Device Tools.
-Click on Configure
-Click on New
-on the left under "Device Type", click on Wireless and then Forward
-Intel Corporation PRO/Wireless 2200BG (eth1) should be there
-Click Forward, and then just take that tutorial all the way through based on your own network settings.

Step 3

tar -zxvf wpa_supplicant-4.7.tar.gz

tar -zxvf openssl-0.9.7x.tar,gz

cp openssl-tls-extensions.patch into openssl root folder

patch openssl with openssl-tls-extensions.patch

Step 4

Make a sybolic link for perl executable in /usr/local/bin

its time for compiling and installing openssl

in the root of openssl folder

type ./configure

make

make install

Step 5

Installing wpa_supplicant
cd to wpa_supplicant folder
cp defconfig to .config
open .config in a text editor (vi is recommended)

change the path of openssl
from
#CFLAGS += -I/usr/local/openssl/include
#LIBS += -L/usr/local/openssl/lib

to

uncomment and change the path as shown or the path of your openssl installation

CFLAGS += -I/usr/local/ssl/include
LIBS += -L/usr/local/ssl/lib

Uncomment IPW settings

Add a line at the end of EAP config
#EAP-FAST
CONFIG_EAP_FAST=y

Save .config

#make
#make install

Step 6

Now you are ready to test you installation

create a file example “my-eap-fast.conf” with following contents(you can copy paste) and change the SSID, USERNAME, and PASSWORD

# EAP-FAST with WPA (WPA or WPA2)
ctrl_interface=/var/run/wpa_supplicant
network={
ssid="my-ssid"
key_mgmt=WPA-EAP
eap=FAST
anonymous_identity="FAST-000102030405"
identity="username”
password="password"
phase1="fast_provisioning=1"
pac_file="/etc/wpa_supplicant.eap-fast-pac"
}

save the file and exit out of text editor

now start wpa_supplicant

#wpa_supplicant -i eth1 -c/etc/my-eap-fast.conf –dd

(--dd is for debug mode to what is happening) you can run as daemon by adding -B

thats it.

If you want to see the status

#wpa_cli status

should return something similar to see this

Selected interface 'eth1'
bssid=my:ma:ca:dd:re:ss
ssid=my-ssid
pairwise_cipher=TKIP
group_cipher=TKIP
key_mgmt=WPA/IEEE 802.1X/EAP
wpa_state=COMPLETED
ip_address=192.168.1.100
Supplicant PAE state=AUTHENTICATED
suppPortStatus=Authorized
EAP state=SUCCESS
selectedMethod=43 (EAP-FAST)
EAP TLS cipher=RC4-SHA

luca2 · 12-12-2005, 12:44 PM

Hi, I must configure wpa supplicant 0.4.7 with the hostap driver on Mandriva 2005.
I had read your instruction but I have a problem when I run the make command.

Can you help me?

This is the result of the make command:

# make
cc -o wpa_supplicant config.o eloop.o common.o md5.o rc4.o sha1.o config_file.o base64.o l2_packet_linux.o eap_tls.o eap_peap.o eap_ttls.o eap_md5.o eap_mschapv2.o eap_gtc.o eap_otp.o eap_sim.o eap_leap.o eap_psk.o eap_psk_common.o eap_aka.o eap_sim_common.o eap_tlv.o eap_pax.o eap_pax_common.o eapol_sm.o eap.o eap_tls_common.o tls_openssl.o ms_funcs.o crypto.o ctrl_iface.o wpa.o preauth.o aes_wrap.o wpa_supplicant.o events.o main.o drivers.o driver_hostap.o driver_atmel.o driver_ipw.o driver_wired.o driver_wext.o -L/usr/local/ssl/lib -lssl -lcrypto -ldl
tls_openssl.o(.text+0x16b4): In function `tls_connection_set_master_key':
/root/Desktop/wpa_supplicant-0.4.7/tls_openssl.c:1780: undefined reference to `SSL_set_session_secret_cb'
tls_openssl.o(.text+0x17d5): In function `tls_connection_client_hello_ext':
/root/Desktop/wpa_supplicant-0.4.7/tls_openssl.c:1840: undefined reference to `SSL_set_hello_extension'
collect2: ld returned 1 exit status
make: *** [wpa_supplicant] Error 1

cpd2000cpd · 12-12-2005, 02:29 PM

did you apply the patch from the Wpa_supplicant into openssl and compile openssl?

Step 3

tar -zxvf wpa_supplicant-4.7.tar.gz

tar -zxvf openssl-0.9.7x.tar,gz

cp openssl-tls-extensions.patch into openssl root folder

patch openssl with openssl-tls-extensions.patch

Quote:

Originally Posted by luca2

Hi, I must configure wpa supplicant 0.4.7 with the hostap driver on Mandriva 2005.
I had read your instruction but I have a problem when I run the make command.

Can you help me?

This is the result of the make command:

# make
cc -o wpa_supplicant config.o eloop.o common.o md5.o rc4.o sha1.o config_file.o base64.o l2_packet_linux.o eap_tls.o eap_peap.o eap_ttls.o eap_md5.o eap_mschapv2.o eap_gtc.o eap_otp.o eap_sim.o eap_leap.o eap_psk.o eap_psk_common.o eap_aka.o eap_sim_common.o eap_tlv.o eap_pax.o eap_pax_common.o eapol_sm.o eap.o eap_tls_common.o tls_openssl.o ms_funcs.o crypto.o ctrl_iface.o wpa.o preauth.o aes_wrap.o wpa_supplicant.o events.o main.o drivers.o driver_hostap.o driver_atmel.o driver_ipw.o driver_wired.o driver_wext.o -L/usr/local/ssl/lib -lssl -lcrypto -ldl
tls_openssl.o(.text+0x16b4): In function `tls_connection_set_master_key':
/root/Desktop/wpa_supplicant-0.4.7/tls_openssl.c:1780: undefined reference to `SSL_set_session_secret_cb'
tls_openssl.o(.text+0x17d5): In function `tls_connection_client_hello_ext':
/root/Desktop/wpa_supplicant-0.4.7/tls_openssl.c:1840: undefined reference to `SSL_set_hello_extension'
collect2: ld returned 1 exit status
make: *** [wpa_supplicant] Error 1

luca2 · 12-12-2005, 02:44 PM

Quote:

Originally Posted by cpd2000cpd

did you apply the patch from the Wpa_supplicant into openssl and compile openssl?

Step 3

tar -zxvf wpa_supplicant-4.7.tar.gz

tar -zxvf openssl-0.9.7x.tar,gz

cp openssl-tls-extensions.patch into openssl root folder

patch openssl with openssl-tls-extensions.patch

I did it...

Perhaps I resolve the problem by disabling the wpa_passphrase in the MakeFile of the wpa supplicant...

I am in wrong?

cpd2000cpd · 12-12-2005, 04:36 PM

Did it work? were you able use supplicant to connect to networks

cpd2000cpd · 12-12-2005, 06:22 PM

luca2

can you post your .config and paths of you openssl installation, did you get error when compiling OpenSSL, use 0.9.8(thats what I used) looks like in .config you havent added/modify the path to openssl

CFLAGS += -I/usr/local/ssl/include
LIBS += -L/usr/local/ssl/lib

make sure you are adding right path, double check patch.

luca2 · 12-13-2005, 03:22 AM

Quote:

Originally Posted by cpd2000cpd

luca2

can you post your .config and paths of you openssl installation, did you get error when compiling OpenSSL, use 0.9.8(thats what I used) looks like in .config you havent added/modify the path to openssl

CFLAGS += -I/usr/local/ssl/include
LIBS += -L/usr/local/ssl/lib

make sure you are adding right path, double check patch.

I have the right path in my .config:

CFLAGS += -I/usr/local/ssl/include
LIBS += -L/usr/local/ssl/lib

With the OpenSSL 0.9.8 I have many problems, so I decide to use the 0.9.7i (they are fixed...). I have no errors when I compile this OpenSSL

luca2 · 12-13-2005, 05:04 AM

Anyway, I configure the wpa_supplicant.conf in my /etc/ folder.

So, I try to run wpa_supplicant -c/etc/wpa_supplicant.conf -iwlan0 -d
but I receive this message:

------------------------------------------------------------------------------
Initializing interface 'wlan0' conf '/etc/wpa_supplicant.conf' driver 'default' ctrl_interface 'N/A'
Configuration file '/etc/wpa_supplicant.conf' -> '/etc/wpa_supplicant.conf'
Reading configuration file '/etc/wpa_supplicant.conf'
Line 32: Invalid configuration line 'ctrl_interface=/var/run/wpa_supplicant'.
Line 49: Invalid configuration line 'ctrl_interface_group=0'.
eapol_version=1
ap_scan=1
fast_reauth=1
Priority group 10
id=0 ssid='example'
Failed to read configuration file '/etc/wpa_supplicant.conf'.
Failed to add interface wlan0
Cancelling scan request
------------------------------------------------------------------------------

I don't understand why there are this error:
Line 32: Invalid configuration line 'ctrl_interface=/var/run/wpa_supplicant'.
Line 49: Invalid configuration line 'ctrl_interface_group=0'.

I don't change them, they are include by default in the wpa_supplicant.conf...

luca2 · 12-13-2005, 10:12 AM

Quote:

Originally Posted by cpd2000cpd

did you apply the patch from the Wpa_supplicant into openssl and compile openssl?

Step 3

tar -zxvf wpa_supplicant-4.7.tar.gz

tar -zxvf openssl-0.9.7x.tar,gz

cp openssl-tls-extensions.patch into openssl root folder

patch openssl with openssl-tls-extensions.patch

There are some problems, so I have decide to restart all procedures.

Can you tell me how can I patch? Can you tell me the exact command to write in the Konsole?

cpd2000cpd · 12-13-2005, 12:17 PM

1. Copying the patch file
#cp wpa_supplicant-0.4.7/openssl-tls-extensions.patch openssl-0.9.8a/

2. Change directory to
#cd openssl-0.9.8a

3. Patching (make sure you are inside openssl folder)
#patch -p1 -i openssl-tls-extensions.patch

You should see the results like this

patching file include/openssl/ssl.h
patching file include/openssl/tls1.h
patching file ssl/Makefile
patching file ssl/s3_clnt.c
Hunk #1 succeeded at 601 with fuzz 1 (offset -5 lines).
Hunk #2 succeeded at 642 with fuzz 1.
Hunk #3 succeeded at 704 (offset -3 lines).
patching file ssl/s3_srvr.c
Hunk #1 succeeded at 943 (offset -12 lines).
patching file ssl/ssl_err.c
patching file ssl/ssl.h
patching file ssl/ssl_sess.c
patching file ssl/t1_ext.c
patching file ssl/t1_lib.c
Hunk #1 succeeded at 97 (offset -34 lines).
patching file ssl/tls1.h
patching file util/ssleay.num

4. Compiling SSL
#make
#make install

here is description of the patch it is specially written to fix the errors you are getting
|------------------------------------------------------------------------------------------|
|This patch is adding support for TLS hello extensions and externally |
|generated pre-shared key material to OpenSSL 0.9.8. This is |
|based on the patch from Alexey Kobozev <akobozev@cisco.com> |
|(sent to openssl-dev mailing list on Tue, 07 Jun 2005 15:40:58 +0300). |
|------------------------------------------------------------------------------------------|

luca2 · 12-13-2005, 02:31 PM

- I must have the openssl-devel for using this patch?

- It works with the openssl0.9.7?

cpd2000cpd · 12-14-2005, 12:22 AM

You dont need openssl development for this, just follow my steps in order
Yes it does work with 0.9.7

Delete everything start fresh

OK here are the steps
Step1
#mkdir /opt/downloads

Download openssl (ex: /opt/downloads)
Download OpenSSL ver 0.9.7i and save to /opt/downloads
Download WPA_Supplicant and save to /opt/downloads

Step2
#cd /opt/downloads
#tar -zxvf openssl-0.9.7i.tar.gz
#tar -zxvf wpa_supplicant-0.4.7.tar.gz

Step3

#cp wpa_supplicant-0.4.7/openssl-tls-extensions.patch openssl-0.9.7i/
#cd /opt/downloads/openssl-0.9.7i
#patch -p1 -i openssl-tls-extensions.patch
#./configure
#make
#make install

Step4

#cd /opt/downloads/wpa_supplicant-0.4.7
#make
#make install

you should be ready to use it