| 1 |
commit: de359f9d291ad818476330e855828c0fb79ba482 |
| 2 |
Author: Rick Farina <zerochaos <AT> gentoo <DOT> org> |
| 3 |
AuthorDate: Fri Aug 26 16:30:12 2022 +0000 |
| 4 |
Commit: Rick Farina <zerochaos <AT> gentoo <DOT> org> |
| 5 |
CommitDate: Fri Aug 26 16:32:07 2022 +0000 |
| 6 |
URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=de359f9d |
| 7 |
|
| 8 |
net-wireless/wpa_supplicant: add deprecated ewarns |
| 9 |
|
| 10 |
Per discussion in #gentoo-dev, hopefully ease tkip/wep users to finding |
| 11 |
the new use flags by adding einfo/ewarn for when wep/tkip use flags are |
| 12 |
disabled. In the 5 months it has been disabled there have been a few |
| 13 |
complaints, but not nearly enough to lower the security of all users by |
| 14 |
defaulting broken encryption/authentication to on. |
| 15 |
Signed-off-by: Rick Farina <zerochaos <AT> gentoo.org> |
| 16 |
|
| 17 |
net-wireless/wpa_supplicant/wpa_supplicant-2.10-r1.ebuild | 14 ++++++++++++++ |
| 18 |
net-wireless/wpa_supplicant/wpa_supplicant-9999.ebuild | 14 ++++++++++++++ |
| 19 |
2 files changed, 28 insertions(+) |
| 20 |
|
| 21 |
diff --git a/net-wireless/wpa_supplicant/wpa_supplicant-2.10-r1.ebuild b/net-wireless/wpa_supplicant/wpa_supplicant-2.10-r1.ebuild |
| 22 |
index b7a623182f1f..cb80b33748c2 100644 |
| 23 |
--- a/net-wireless/wpa_supplicant/wpa_supplicant-2.10-r1.ebuild |
| 24 |
+++ b/net-wireless/wpa_supplicant/wpa_supplicant-2.10-r1.ebuild |
| 25 |
@@ -477,6 +477,20 @@ pkg_postinst() { |
| 26 |
ewarn "WARNING: your old configuration file ${EROOT}/etc/wpa_supplicant.conf" |
| 27 |
ewarn "needs to be moved to ${EROOT}/etc/wpa_supplicant/wpa_supplicant.conf" |
| 28 |
fi |
| 29 |
+ if ! use wep; then |
| 30 |
+ einfo "WARNING: You are building with WEP support disabled, which is recommended since" |
| 31 |
+ einfo "this protocol is deprecated and insecure. If you still need to connect to" |
| 32 |
+ einfo "WEP-enabled networks, you may turn this flag back on. With this flag off," |
| 33 |
+ einfo "WEP-enabled networks will not even show up as available." |
| 34 |
+ einfo "If your network is missing you may wish to USE=wep" |
| 35 |
+ fi |
| 36 |
+ if ! use tkip; then |
| 37 |
+ ewarn "WARNING: You are building with TKIP support disabled, which is recommended since" |
| 38 |
+ ewarn "this protocol is deprecated and insecure. If you still need to connect to" |
| 39 |
+ ewarn "TKIP-enabled networks, you may turn this flag back on. With this flag off," |
| 40 |
+ ewarn "TKIP-enabled networks, including mixed mode TKIP/AES-CCMP will not even show up" |
| 41 |
+ ewarn "as available. If your network is missing you may wish to USE=tkip" |
| 42 |
+ fi |
| 43 |
|
| 44 |
# Mea culpa, feel free to remove that after some time --mgorny. |
| 45 |
local fn |
| 46 |
|
| 47 |
diff --git a/net-wireless/wpa_supplicant/wpa_supplicant-9999.ebuild b/net-wireless/wpa_supplicant/wpa_supplicant-9999.ebuild |
| 48 |
index abd50f99a8df..276c74b2dc41 100644 |
| 49 |
--- a/net-wireless/wpa_supplicant/wpa_supplicant-9999.ebuild |
| 50 |
+++ b/net-wireless/wpa_supplicant/wpa_supplicant-9999.ebuild |
| 51 |
@@ -477,6 +477,20 @@ pkg_postinst() { |
| 52 |
ewarn "WARNING: your old configuration file ${EROOT}/etc/wpa_supplicant.conf" |
| 53 |
ewarn "needs to be moved to ${EROOT}/etc/wpa_supplicant/wpa_supplicant.conf" |
| 54 |
fi |
| 55 |
+ if ! use wep; then |
| 56 |
+ einfo "WARNING: You are building with WEP support disabled, which is recommended since" |
| 57 |
+ einfo "this protocol is deprecated and insecure. If you still need to connect to" |
| 58 |
+ einfo "WEP-enabled networks, you may turn this flag back on. With this flag off," |
| 59 |
+ einfo "WEP-enabled networks will not even show up as available." |
| 60 |
+ einfo "If your network is missing you may wish to USE=wep" |
| 61 |
+ fi |
| 62 |
+ if ! use tkip; then |
| 63 |
+ ewarn "WARNING: You are building with TKIP support disabled, which is recommended since" |
| 64 |
+ ewarn "this protocol is deprecated and insecure. If you still need to connect to" |
| 65 |
+ ewarn "TKIP-enabled networks, you may turn this flag back on. With this flag off," |
| 66 |
+ ewarn "TKIP-enabled networks, including mixed mode TKIP/AES-CCMP will not even show up" |
| 67 |
+ ewarn "as available. If your network is missing you may wish to USE=tkip" |
| 68 |
+ fi |
| 69 |
|
| 70 |
# Mea culpa, feel free to remove that after some time --mgorny. |
| 71 |
local fn |
Archives