Re: wpa-supplicant & EAP-TLS

[Gary Thomas <gary@mlbassoc.com>]

On 2012-08-14 08:13, Koen Kooi wrote:
>
> Op 14 aug. 2012, om 15:59 heeft Henning Heinold <heinold@inf.fu-berlin.de> het volgende geschreven:
>
>> On Tue, Aug 14, 2012 at 05:52:32AM -0600, Gary Thomas wrote:
>>> On 2012-08-14 05:46, Phil Blundell wrote:
>>>> On Tue, 2012-08-14 at 05:44 -0600, Gary Thomas wrote:
>>>>> Does anyone know why the recipe for wpa_supplicant is using gnutls
>>>>> and not the default OpenSSH for TLS services?  It seems that gnutls
>>>>> is somehow broken and EAP-TLS does not work with this configuration.
>>>>> Changing wpa_supplicant to use the OpenSSH libraries makes EAP-TLS
>>>>> work fine.
>>>>>
>>>>> Would a patch to make this change be entertained?  or should I just
>>>>> keep it in my own layer?
>>>>
>>>> I don't think a patch to just flip the default would be a good idea.  A
>>>> patch to make it be a DISTRO_FEATURE, on the other hand, would be
>>>> excellent.
>>>
>>> Thanks, I'll see about working one up.
>>
>> Btw. You mean openssl not openssh, which uses openssl too.
>>
>> And a problem with using openssl for wpa_supplicant was license incompatibilities.
>
> I think wpa_supplicant has the openssl exception in its license nowadays, but it's best to double check

I don't see anything explicit on this topic.  That said, the latest version
(1.0) is dual licensed GPL and BSD and the OpenSSL license is BSD compatible
from what I can tell.

-- 
------------------------------------------------------------
Gary Thomas                 |  Consulting for the
MLB Associates              |    Embedded world
------------------------------------------------------------