Arch Linux

finch127

Member

Registered: 2012-06-25

Posts: 4

New OpenSSL Fix

http://www.ubuntu.com/usn/usn-1516-1/
So I read that today and realized I might be able to connect to WPA2 again over wireless. Is there any way we can get this working for Arch? I remember a huge post on the bugtracker about the openssl issue. Could this be a fix?

brebs

Member

Registered: 2007-04-03

Posts: 3,742

Re: New OpenSSL Fix

See Ubuntu package.

lp1018998.patch is already in openssl 1.0.1c, so just apply lp1020621.patch

It's in the debian/patches/ dir of the .debian.tar.gz file

jwhendy

Member

Registered: 2010-04-01

Posts: 621

Re: New OpenSSL Fix

The following did not work for me:

- Install and/or sync ABS

# pacman -S abs
# abs

- Copy openssl somewhere to build (using my dir as an example)

$ cp -r /var/abs/core/openssl ~/installed/abs

- Download openssl_1.0.1-4ubuntu5.3.debian.tar.gz from here (over on the right)

- Untar the file

$ tar -xvzf openssl_1.0.1-4ubuntu5.3.debian.tar.gz

- Copy patch into openssl abs dir (assumes you're in the directory where you un-tarred above)

$ cp debian/patches/lp1020621.patch ~/installed/abs/openssl/

- cd to openssl abs dir and download the source

$ makepkg -o

- Copy patch into src/ dir

cp ./lp1020621.patch src/

- Edit PKGBUILD to patch

nano PKGBUILD

# add this line in build() {
# I added it just before the line `patch -p0 -i $srcdir/ca-dir.patch`
patch -p1 -i $srcdir/lp1020621.patch

- Make and install the package

makepkg -si

- Reboot (just to be sure)...

Do I need to do anything else? Re-install wpa_supplicant, or build it against the patched openssl? This has been the longest running PITA with Linux I've experienced in 6 years. Things are just now, after ~6mos, starting not to work with openssl-1.0.0-h so I can't just downgrade anymore. curl and ssh fail on me now, so I'm kind of stuck sometimes -- I need to be on 1.0.1.c to use curl or ssh, but I need 1.0.0.h for internet in the first place! I'd love any fix, short term, permanent, or straight up hack.

jwhendy

Member

Registered: 2010-04-01

Posts: 621

Re: New OpenSSL Fix

The patch HERE works for me.

- Download patch
- Follow above with respect to ABS, but instead copy wpa_supplicant to some build dir:

$ cp -r /var/abs/core/wpa_supplicant ~/abs

- cd to build dir

$ cd ~/abs/wpa_supplicant

- pull the source

$ makepkg -o

- copy patch to appropriate place

$ cp /path/to/file.patch ./src/wpa_supplicant-1.0/

- edit PKGBUILD

$ nano PKGBUILD
# insert this line in build() { section
patch -p1 -i "$srcdir/wpa_supplicant-1.0/file.patch"

- build/install package

$ makepkg -si

I connected immediately; no need to reboot or restart wicd daemon.