Hey there,
The issue has been reported downstream, it's a problem for legacy setups
but those don't seem rare from the users feedback
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1011121
https://bugs.launchpad.net/ubuntu/+source/wpa/+bug/1958267
https://bugzilla.redhat.com/show_bug.cgi?id=2069239
The authentification fails
> OpenSSL: openssl_handshake - SSL_connect error:0A0C0103:SSL
routines::internal error
Clemens Lang explained the issue
'these servers only offer TLS 1.1 or older, which uses MD5-SHA1 as
digest in its signature algorithm. Due to recent collision attacks on
SHA1, this no longer meets OpenSSL default level of security of 80 bits
(see https://sha-mbles.github.io/ <https://sha-mbles.github.io/>, which
reduced the chosen-prefix collision to 63.4 bits).
Fedora fixes the problem with those patches in openssl
https://src.fedoraproject.org/rpms/openssl/blob/f36/f/0049-Allow-disabling-of-SHA1-signatures.patch
https://src.fedoraproject.org/rpms/openssl/blob/f36/f/0052-Allow-SHA1-in-seclevel-1-if-rh-allow-sha1-signatures.patch
There is an open discussion upstream about adding the option in
https://github.com/openssl/openssl/issues/17662
Since it's likely to take time for the openssl change to be agreed on,
land and reach distribution I was wondering if wpa could do something to
help in those cases? Would it be possible to maybe default to SECLEVEL=0
for TLS <= 1.1 connections when building with openssl3?
Cheers,
Sebastien Bacher
_______________________________________________
Hostap mailing list
Hostap@xxxxxxxxxxxxxxxxxxx
http://lists.infradead.org/mailman/listinfo/hostap
