Skip to content

Commit

Permalink
interfaces: mitigate KRACKAttacks by using ports if available
Browse files Browse the repository at this point in the history
Also see: https://www.krackattacks.com/

(cherry picked from commit 5eacb95)
(cherry picked from commit 5c3021d)
  • Loading branch information
fichtner committed Oct 17, 2017
1 parent b1b84c9 commit f0ad55d
Showing 1 changed file with 5 additions and 5 deletions.
10 changes: 5 additions & 5 deletions src/etc/inc/interfaces.inc
Original file line number Diff line number Diff line change
Expand Up @@ -2066,11 +2066,11 @@ function interface_wireless_configure($if, &$wl, &$wlcfg)
fwrite($fd_set, "# wireless configuration script.\n\n");

/* set values for /path/program */
$hostapd = "/usr/sbin/hostapd";
$wpa_supplicant = "/usr/sbin/wpa_supplicant";
$ifconfig = "/sbin/ifconfig";
$sysctl = "/sbin/sysctl";
$killall = "/usr/bin/killall";
$wpa_supplicant = '/usr/local/sbin/wpa_supplicant';
$hostapd = '/usr/local/sbin/hostapd';
$killall = '/usr/bin/killall';
$ifconfig = '/sbin/ifconfig';
$sysctl = '/sbin/sysctl';

/* Set all wireless ifconfig variables (split up to get rid of needed checking) */

Expand Down

2 comments on commit f0ad55d

@squadramunter
Copy link

@squadramunter squadramunter commented on f0ad55d Oct 20, 2017

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hey I tried this patch but I like to see that you can chance the hostapd config file. Because I am using a tp-link USB wireless adapter. Now I guess it's using the wrong driver on the hostapd.conf file. Can you tell me where to find it? The strange thing is when I use wpa2 with AES and TKIP that it shows an open wifi netwerk. And on Android that network is not visible.

@fichtner
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

See https://forum.opnsense.org/index.php?topic=6183.msg26150#msg26150

We did not touch / alter config file generation. We only switched the used binaries.

Please sign in to comment.