From 61ce85943880ee4aa353fba10815d4212400b3cf Mon Sep 17 00:00:00 2001 From: Sindhu Karri Date: Tue, 23 Jun 2026 12:21:28 +0530 Subject: [PATCH] wpa_supplicant: enable WPA3 (SAE), PMF, and OWE Enable CONFIG_SAE, CONFIG_IEEE80211W, and CONFIG_OWE so that wpa_supplicant can negotiate WPA3-Personal, Protected Management Frames, and Opportunistic Wireless Encryption. This unblocks netplan-generated configurations that specify key-mgmt=sae and aligns Azure Linux with Fedora/Debian/Ubuntu defaults. Remove the obsolete CONFIG_PEERKEY symbol, which was removed from upstream wpa_supplicant in 2.10. No new BuildRequires or Requires; all new features use the already-linked OpenSSL. Source0 unchanged, signatures.json untouched. ADO #62728349 --- SPECS/wpa_supplicant/wpa_supplicant.spec | 11 +++++++++-- 1 file changed, 9 insertions(+), 2 deletions(-) diff --git a/SPECS/wpa_supplicant/wpa_supplicant.spec b/SPECS/wpa_supplicant/wpa_supplicant.spec index 5ad8a555f26..ef233a3f8fe 100644 --- a/SPECS/wpa_supplicant/wpa_supplicant.spec +++ b/SPECS/wpa_supplicant/wpa_supplicant.spec @@ -1,7 +1,7 @@ Summary: WPA client Name: wpa_supplicant Version: 2.10 -Release: 3%{?dist} +Release: 4%{?dist} License: BSD Vendor: Microsoft Corporation Distribution: Azure Linux @@ -40,11 +40,13 @@ CONFIG_EAP_PEAP=y CONFIG_EAP_TLS=y CONFIG_EAP_TTLS=y CONFIG_IEEE8021X_EAPOL=y +CONFIG_IEEE80211W=y CONFIG_IPV6=y CONFIG_LIBNL32=y -CONFIG_PEERKEY=y +CONFIG_OWE=y CONFIG_PKCS12=y CONFIG_READLINE=y +CONFIG_SAE=y CFLAGS += -I/usr/include/libnl3 EOF @@ -97,6 +99,11 @@ EOF %{_sysconfdir}/wpa_supplicant/wpa_supplicant-wlan0.conf %changelog +* Tue Jun 23 2026 Sindhu Karri - 2.10-4 +- Enable WPA3-Personal (SAE), Protected Management Frames (IEEE80211W), + and Opportunistic Wireless Encryption (OWE) in build config. +- Remove obsolete CONFIG_PEERKEY (removed upstream in 2.10). + * Wed Mar 26 2025 Kanishk-Bansal - 2.10-3 - Patch CVE-2025-24912