Comments (12)
singe
commented on August 20, 2024
Please try again with the hostapd-2.6 branch. If I get enough positive testing I can roll a new release.
…Sent from my phone
On 27 Dec 2016, at 2:31 PM, Andreas Nilsen ***@***.***> wrote:
On both Debian (Jessie), and Kali Rolling one willl now experience issues when compiling hostapd-mana.
I took a quick glance at the output and the bug seems to be related to OpenSSL.
***@***.***:~/gits/mana/hostapd-mana/hostapd# make -j8
CC ../src/ap/utils.c
CC ../src/ap/authsrv.c
CC ../src/ap/wpa_auth_glue.c
CC main.c
CC ../src/ap/ap_drv_ops.c
CC ../src/ap/drv_callbacks.c
CC ../src/ap/eap_user_db.c
CC ../src/ap/ap_config.c
CC ../src/ap/ieee802_11_auth.c
CC ../src/ap/tkip_countermeasures.c
CC ../src/ap/ap_mlme.c
CC ../src/ap/sta_info.c
CC ../src/ap/preauth_auth.c
CC ../src/ap/ieee802_1x.c
CC ../src/ap/wpa_auth_ie.c
CC ../src/ap/hostapd.c
CC ../src/ap/pmksa_cache_auth.c
CC ../src/ap/ieee802_11_shared.c
CC ../src/drivers/drivers.c
CC ../src/utils/wpa_debug.c
CC ../src/utils/wpabuf.c
CC ../src/utils/eloop.c
CC ../src/utils/common.c
CC ../src/utils/ip_addr.c
CC ../src/ap/wpa_auth.c
CC ../src/utils/os_unix.c
CC ../src/ap/beacon.c
CC ../src/common/ieee802_11_common.c
CC config_file.c
CC ../src/eapol_auth/eapol_auth_dump.c
CC ../src/common/wpa_common.c
CC ../src/radius/radius_das.c
CC ../src/eapol_auth/eapol_auth_sm.c
CC ../src/radius/radius_client.c
CC ../src/crypto/md5.c
CC ../src/ap/iapp.c
CC ../src/ap/vlan_init.c
CC ../src/ap/ctrl_iface_ap.c
CC ../src/radius/radius.c
CC ../src/ap/peerkey_auth.c
CC ../src/drivers/driver_wired.c
CC ../src/drivers/netlink.c
CC ../src/drivers/linux_ioctl.c
CC ../src/utils/radiotap.c
CC ../src/drivers/rfkill.c
CC ctrl_iface.c
CC ../src/l2_packet/l2_packet_linux.c
CC ../src/drivers/driver_hostap.c
CC ../src/eap_server/eap_server_md5.c
CC ../src/eap_common/eap_peap_common.c
../src/eap_server/eap_server_ttls.c: In function ‘eap_ttls_process_phase2_pap’:
../src/eap_server/eap_server_ttls.c:520:22: warning: field precision specifier ‘.*’ expects argument of type ‘int’, but argument 5 has type ‘size_t {aka long unsigned int}’ [-Wformat=]
fprintf(f, "%s|%*.*s|%s\n", hdr, 0, sm->identity_len, sm->identity, user_password);
^
CC ../src/eap_server/eap_server_tls.c
CC ../src/eap_server/eap_server_gtc.c
CC ../src/eap_server/eap_server_mschapv2.c
CC ../src/eap_server/eap_server_sim.c
CC ../src/eap_server/eap_server_peap.c
CC ../src/eap_server/eap_server_ttls.c
CC ../src/eap_common/eap_pax_common.c
CC ../src/eap_common/eap_sim_common.c
CC ../src/eap_server/eap_server_aka.c
CC ../src/eap_server/eap_sim_db.c
CC ../src/eap_common/eap_psk_common.c
CC ../src/eap_server/eap_server_pax.c
CC ../src/eap_server/eap_server_psk.c
CC ../src/eap_common/eap_sake_common.c
CC ../src/eap_server/eap_server_sake.c
CC ../src/eap_common/eap_gpsk_common.c
CC ../src/eap_server/eap_server_gpsk.c
CC ../src/eap_common/eap_pwd_common.c
CC ../src/eap_common/eap_fast_common.c
CC ../src/eap_common/eap_eke_common.c
CC ../src/eap_server/eap_server_eke.c
CC ../src/eap_server/eap_server_ikev2.c
CC ../src/eap_server/eap_server_pwd.c
CC ../src/eap_common/eap_ikev2_common.c
CC ../src/eap_common/ikev2_common.c
CC eap_register.c
CC ../src/eap_server/eap_server_fast.c
../src/eap_server/eap_server.c: In function ‘eap_user_get’:
../src/eap_server/eap_server.c:100:49: warning: field precision specifier ‘.*’ expects argument of type ‘int’, but argument 3 has type ‘size_t {aka long unsigned int}’ [-Wformat=]
wpa_printf(MSG_INFO, "MANA (EAP) : identity: %.*s", identity_len, identity);
^
CC ../src/eap_server/eap_server_tnc.c
CC ../src/eap_server/ikev2.c
CC ../src/eap_server/eap_server_methods.c
CC ../src/eap_common/eap_common.c
CC ../src/eap_server/eap_server_identity.c
CC ../src/eap_server/tncs.c
CC ../src/eap_common/chap.c
../src/crypto/crypto_openssl.c: In function ‘openssl_digest_vector’:
../src/crypto/crypto_openssl.c:84:13: error: storage size of ‘ctx’ isn’t known
EVP_MD_CTX ctx;
^~~
../src/crypto/crypto_openssl.c:84:13: warning: unused variable ‘ctx’ [-Wunused-variable]
../src/crypto/crypto_openssl.c: In function ‘rc4_skip’:
../src/crypto/crypto_openssl.c:145:17: error: storage size of ‘ctx’ isn’t known
EVP_CIPHER_CTX ctx;
^~~
../src/crypto/crypto_openssl.c:145:17: warning: unused variable ‘ctx’ [-Wunused-variable]
In file included from /root/gits/mana/hostapd-mana/src/utils/common.h:12:0,
from ../src/crypto/crypto_openssl.c:26:
../src/crypto/crypto_openssl.c: In function ‘aes_encrypt_init’:
../src/crypto/crypto_openssl.c:223:25: error: dereferencing pointer to incomplete type ‘EVP_CIPHER_CTX {aka struct evp_cipher_ctx_st}’
ctx = os_malloc(sizeof(*ctx));
^~
/root/gits/mana/hostapd-mana/src/utils/os.h:478:30: note: in definition of macro ‘os_malloc’
#define os_malloc(s) malloc((s))
^
../src/crypto/crypto_openssl.c: At top level:
../src/crypto/crypto_openssl.c:355:17: error: field ‘enc’ has incomplete type
EVP_CIPHER_CTX enc;
^~~
../src/crypto/crypto_openssl.c:356:17: error: field ‘dec’ has incomplete type
EVP_CIPHER_CTX dec;
^~~
../src/crypto/crypto_openssl.c: In function ‘dh5_init’:
../src/crypto/crypto_openssl.c:482:4: error: dereferencing pointer to incomplete type ‘DH {aka struct dh_st}’
dh->g = BN_new();
^~
../src/crypto/crypto_openssl.c: At top level:
../src/crypto/crypto_openssl.c:600:11: error: field ‘ctx’ has incomplete type
HMAC_CTX ctx;
^~~
../src/crypto/crypto_openssl.c: In function ‘crypto_hash_init’:
../src/crypto/crypto_openssl.c:635:2: warning: implicit declaration of function ‘HMAC_CTX_init’ [-Wimplicit-function-declaration]
HMAC_CTX_init(&ctx->ctx);
^~~~~~~~~~~~~
../src/crypto/crypto_openssl.c: In function ‘crypto_hash_finish’:
../src/crypto/crypto_openssl.c:678:2: warning: implicit declaration of function ‘HMAC_CTX_cleanup’ [-Wimplicit-function-declaration]
HMAC_CTX_cleanup(&ctx->ctx);
^~~~~~~~~~~~~~~~
../src/crypto/crypto_openssl.c: In function ‘hmac_sha1_vector’:
../src/crypto/crypto_openssl.c:710:11: error: storage size of ‘ctx’ isn’t known
HMAC_CTX ctx;
^~~
../src/crypto/crypto_openssl.c:710:11: warning: unused variable ‘ctx’ [-Wunused-variable]
../src/crypto/crypto_openssl.c: In function ‘hmac_sha256_vector’:
../src/crypto/crypto_openssl.c:751:11: error: storage size of ‘ctx’ isn’t known
HMAC_CTX ctx;
^~~
../src/crypto/crypto_openssl.c:751:11: warning: unused variable ‘ctx’ [-Wunused-variable]
Makefile:891: recipe for target '../src/crypto/crypto_openssl.o' failed
make: *** [../src/crypto/crypto_openssl.o] Error 1
make: *** Waiting for unfinished jobs....
CC ../src/crypto/ms_funcs.c
CC ../src/eap_server/eap_server_tls_common.c
CC ../src/crypto/aes-wrap.c
CC ../src/crypto/fips_prf_openssl.c
CC ../src/eap_server/eap_server.c
../src/crypto/tls_openssl.c: In function ‘tls_init’:
../src/crypto/tls_openssl.c:812:2: warning: ‘TLSv1_method’ is deprecated [-Wdeprecated-declarations]
ssl = SSL_CTX_new(TLSv1_method());
^~~
In file included from /usr/include/openssl/ct.h:13:0,
from /usr/include/openssl/ssl.h:61,
from ../src/crypto/tls_openssl.c:19:
/usr/include/openssl/ssl.h:1596:1: note: declared here
DEPRECATEDIN_1_1_0(__owur const SSL_METHOD *TLSv1_method(void)) /* TLSv1.0 */
^
../src/crypto/tls_openssl.c: In function ‘tls_deinit’:
../src/crypto/tls_openssl.c:868:3: warning: ‘ERR_remove_thread_state’ is deprecated [-Wdeprecated-declarations]
ERR_remove_thread_state(NULL);
^~~~~~~~~~~~~~~~~~~~~~~
In file included from /usr/include/openssl/ct.h:13:0,
from /usr/include/openssl/ssl.h:61,
from ../src/crypto/tls_openssl.c:19:
/usr/include/openssl/err.h:246:1: note: declared here
DEPRECATEDIN_1_1_0(void ERR_remove_thread_state(void *))
^
../src/crypto/tls_openssl.c: In function ‘tls_load_ca_der’:
../src/crypto/tls_openssl.c:1540:40: error: dereferencing pointer to incomplete type ‘SSL_CTX {aka struct ssl_ctx_st}’
lookup = X509_STORE_add_lookup(ssl_ctx->cert_store,
^~
../src/crypto/tls_openssl.c: In function ‘tls_connection_get_keys’:
../src/crypto/tls_openssl.c:2532:24: error: dereferencing pointer to incomplete type ‘SSL {aka struct ssl_st}’
if (ssl == NULL || ssl->s3 == NULL || ssl->session == NULL)
^~
../src/crypto/tls_openssl.c: In function ‘tls_connection_set_session_ticket_cb’:
../src/crypto/tls_openssl.c:3534:44: warning: passing argument 2 of ‘SSL_set_session_secret_cb’ from incompatible pointer type [-Wincompatible-pointer-types]
if (SSL_set_session_secret_cb(conn->ssl, tls_sess_sec_cb,
^~~~~~~~~~~~~~~
In file included from ../src/crypto/tls_openssl.c:19:0:
/usr/include/openssl/ssl.h:1799:12: note: expected ‘tls_session_secret_cb_fn {aka int (*)(struct ssl_st *, void *, int *, struct stack_st_SSL_CIPHER *, const struct ssl_cipher_st **, void *)}’ but argument is of type ‘int (*)(SSL *, void *, int *, struct stack_st_SSL_CIPHER *, SSL_CIPHER **, void *) {aka int (*)(struct ssl_st *, void *, int *, struct stack_st_SSL_CIPHER *, struct ssl_cipher_st **, void *)}’
__owur int SSL_set_session_secret_cb(SSL *s,
^~~~~~~~~~~~~~~~~~~~~~~~~
../src/crypto/tls_openssl.c: In function ‘tls_connection_resumed’:
../src/crypto/tls_openssl.c:2819:1: warning: control reaches end of non-void function [-Wreturn-type]
}
^
Makefile:891: recipe for target '../src/crypto/tls_openssl.o' failed
make: *** [../src/crypto/tls_openssl.o] Error 1
CC ../src/drivers/driver_nl80211.c
I also noticed on Kali's package-tracker that OpenSSL got updated on [2016-12-08] from version: 1.0.2j-1 to version 1.1.0c-2.
So over to the "quick fix" / temporary-fix: downgrade OpenSSL manually, by downloading the following files:
libssl1.0.0_1.0.1t-1+deb8u5_amd64.deb
libssl-dev_1.0.1t-1+deb8u5_amd64.deb
openssl_1.0.1t-1+deb8u5_amd64.deb```
—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub, or mute the thread.
from hostapd-mana.
adde88
commented on August 20, 2024
I cannot get the hostapd-2.6 branch to compile. Tested on Ubuntu 14.04 and Kali Rolling (amd64)
Also tested with the old and new version of openssl (1.0.1 / 1.1.0).
It produces errors regarding two functions while trying to compile beacons.o
../src/ap/beacon.c: In function ‘handle_probe_req’:
../src/ap/beacon.c:892:11: error: ‘sta’ undeclared
../src/ap/beacon.c:1152:13: error: invalid storage class for function ‘hostapd_probe_resp_offloads’
static u8 * hostapd_probe_resp_offloads(struct hostapd_data *hapd,
../src/ap/beacon.c:1588:1: error: expected declaration or statement at end of input
I just have to ask out of curiosity, can you get it to compile properly?
If so, what distribution are you using to compile it?
from hostapd-mana.
singe
commented on August 20, 2024
Thanks. This is a stupid bug I introduced during the merge. Will post a fix shortly.
from hostapd-mana.
singe
commented on August 20, 2024
I've fixed the sta bug in the last commit. I'm also building on the latest Kali rolling with openssl 1.10c-2 with no problems. Can you test please?
from hostapd-mana.
adde88
commented on August 20, 2024
I can confirm that it's working now. :)
from hostapd-mana.
marcebdev
commented on August 20, 2024
Im not sure how this is fixed if both mana-toolkit and this, hostapd-mana have not been updated since July 2016 I believe.
Is it only fixed in the Kali repo or something?
from hostapd-mana.
adde88
commented on August 20, 2024
@Deathstroke5467
We were discussing problems when compiling the hostapd-2.6 branch on this github repo. after an update arrived to openssl.
The stuff on the kali apt-repos. are already compiled and should be working.
from hostapd-mana.
singe
commented on August 20, 2024
That's the "stable" branch. hostap-2.6 is the active dev branch right now.
…Sent from my phone
On 11 Apr 2017, at 8:07 PM, Deathstroke5467 ***@***.***> wrote:
Im not sure how this is fixed if both mana-toolkit and this, hostapd-mana have not been updated since July 2016 I believe.
—
You are receiving this because you commented.
Reply to this email directly, view it on GitHub, or mute the thread.
from hostapd-mana.
marcebdev
commented on August 20, 2024
@adde88
Hmm I've been unable to make this work due to a OpenSSL problem (because of OpenSSL1.1.0) I got it to work for with OpenSSL1.0.1 and hosted 2.3. Though this is not ideal as I have to remove, download (downgrade), and update again. I see you are also bringing up hostapd 2.6 and have another closed issue about it, though I'm unsure what this has to do with the OpenSSL bug? I am planning on using this as part of a project perhaps
@singe
The error log is identical to the above (openSSL errors) as far as I can tell. I've tested on both an Raspbian and Debian Jessie. I was only able to get it working with another RPi because it uses a custom image of Raspbian so some packages are older by default. Any apt-get upgrade ends up breaking everything because OpenSSL updates to 1.1.0
Im confused what the hostapd dev 2.6 branch has to do with the whole thing, but I don't believe the OpenSSL1.1.0 issue has been address in any way, and 1.1.0 is shipping default now (has been for a few months), so perhaps this should be reopened?
from hostapd-mana.
adde88
commented on August 20, 2024
He's telling you that development is not being done on the master-branch (hostapd 2.3).
(Except future merges with the dev.-branch i guess)
So if you want that version to compile, you should use openssl1.0.1.
Development is active on the hostapd-2.6 branch, and this version is compatible with openssl1.1.0.
I've never encountered any issues using version 2.6, so just use that when compiling :)
from hostapd-mana.
marcebdev
commented on August 20, 2024
Ah I see it is hostapd 2.3 that is not compatible with openssl1.1.0, though hostapd 2.6 is compatible. It was not clear anywhere that 2.6 must be used on any newer Linux OS versions (which almost all contain openssl 1.1.0).
Where do I copy the files over to compile using hostapd 2.6?
from hostapd-mana.
singe
commented on August 20, 2024
Just checkout the hostapd-2.6 branch.
… On 30 Apr 2017, at 6:58 PM, Deathstroke5467 ***@***.***> wrote:
Ah I see it is hostapd 2.3 that is not compatible with openssl1.1.0, though hostapd 2.6 is compatible. It was not clear anywhere that 2.6 must be used on any newer Linux OS versions (which almost all contain openssl 1.1.0).
Where do I copy the files over to compile using hostapd 2.6?
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub, or mute the thread.
from hostapd-mana.
Related Issues (20)
- Feature request - PEAP/MSCHAPv2 MITM (relaying) HOT 2
- error when using 'make -C hostapd-mana' HOT 2
- Stuck in 'obtaining ip address' when trying to connect to the AP HOT 1
- libssl.so.1.0.0 Not Found HOT 4
- Multiple BSS with Hostapd HOT 3
- [WPA-EAP] client cannot join EAPOL TX: Message too long HOT 1
- client connected but hash not captured HOT 2
- is this possible !!!!!!!!!!!!!!!!?????
- no_probe_resp_if_max_sta = 0 not working
- Feature request: Logging EAP Identity
- ACL Bug: MAC Address Bitmasks Ignored After VLAN ID
- ACL Bug: Bitmasks Break Binary Search
- Segmentation fault using with sycophant HOT 11
- Berate_ap gets stuck on internet sharing method nat. No ap created, kali nethunter
- WPA/2 Pre-shared Key (PSK) Networks HOT 1
- Python 3 support?
- Error Handling Directed Probes HOT 1
- ld returned 1 exit status HOT 3
- . HOT 2
- .
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from hostapd-mana.