Wiki code for wpa_supplicant

Hide Line numbers
1: == Wireless WPA/WPA2/IEEE802.1X supplicant
2: 
3: =====NOTE: WPA/Personal support has been integrated into OpenSolaris build 64, please refer wpad(1M), dladm(1M) for more details.
4: 
5: This tool is based on the Linux WPA/WPA2/IEEE 802.1X Supplicant project and Sun elected to provide it under the BSD license.
6: 
7: The wpa~_supplicant is the IEEE 802.1X/WPA component that is used on wireless clients and implements key negotiation with WPA Authenticator, controls roaming and IEEE 802.11 authentication/association of the wlan driver. wpa~_supplicant is a daemon that runs in the background and acts as backend component controlling wireless connections. 
8: 
9: Supported WPA/IEEE 802.11i features:
10: * WPA-PSK ("WPA-Personal")
11: * WPA with EAP (e.g., with RADIUS authentication server) ("WPA-Enterprise")
12: * Key management for CCMP, TKIP, WEP104, WEP40
13: * WPA and full IEEE 802.11i/RSN/WPA2
14: * RSN: PMKSA caching, pre-authentication
15: 
16: Supported EAP methods (IEEE 802.1X Supplicant)
17: * EAP-TLS
18: 
19: === Downloads
20: 
21: * [[wpa_supplicant v0.1>>../../downloads/wpa-0.1-pkg.tar.gz]] daemon package
22: * [[ath-0.5>>../../downloads/ath-0.5-pkg.tar.gz]] driver package
23: * [[wificonfig-0.3>>../../downloads/wificonfig-0.3-pkg.tar.gz]] utility package
24: 
25: * wpa_supplicant [[source code>>../../downloads/wpa-0.1-src.tar.gz]]
26: * ath-0.4 driver [[source code>>../../downloads/ath-0.4-src.tar.gz]]
27: 
28: Note that these binary packages only works before OpenSolaris build 64, after that, you should download source code, and build in lastest workspace.
29: 
30: === Installation
31: 
32: Download pre-compiled wpa~_supplicant package and install it
33: 
34: {{{
35:     # wget http://www.opensolaris.org/os/community/laptop/downloads/wpa-0.1-pkg.tar.gz
36:     # gzip -dc wpa-0.1-pkg.tar.gz | tar xvf -
37:     # cd wpa-0.1; pkgadd -d . SUNWwupu
38: }}}
39: 
40: Download pre-compiled ath-0.4 driver package and install it
41: 
42: {{{
43:     # wget http://www.opensolaris.org/os/community/laptop/downloads/ath-0.4-pkg.tar.gz
44:     # gzip -dc ath-0.4-pkg.tar.gz | tar xvf -
45:     # cd ath-0.4; pkgadd -d . SUNWatheros
46: }}}
47: 
48: Download pre-compiled wificonfig-0.3 utility package and install it
49: 
50: {{{
51:     # wget http://www.opensolaris.org/os/community/laptop/downloads/wificonfig-0.3-pkg.tar.gz
52:     # gzip -dc wificonfig-0.3-pkg.tar.gz | tar xvf -
53:     # cd wificonfig-0.3; pkgadd -d . SUNwlanu
54: }}}
55: 
56: Note that Solaris Express already contains SUNWatheros (v0.1) and
57: SUNWwlanu (0.1) packages, so you need to manually remove them first using
58: pkgrm(1M).
59: 
60: === Configuration
61: 
62: The wpa~_supplicant daemon runs in the background, and wificonfig can
63: be used to connect to access points with WPA similarly to how it is done
64: for WEP.
65: 
66: Step 1.  Start wpa~_supplicant daemon:
67: 
68: {{{
69:     # wpa~_supplicant -i ath0
70: }}}
71: 
72: To see debugging information, wpa~_supplicant can be started as a frontend
73: program:
74: 
75: {{{
76:     # wpa~_supplicant -i ath0 -F -dd
77: }}}
78: 
79: Step 2.  Use wificonfig to create new profile.  Note that configuration
80: parameters are case sensitive.  For WPA-PSK mode:
81: 
82: {{{
83:     # wificonfig createprofile home essid=dlink psk=whatever
84: }}}
85: 
86: Additional parameters can be specified (e.g., "proto=WPA key~_mgmt=WPA-PSK pairwise=TKIP"), but they’re not required.
87: 
88: For EAP-TLS mode:
89: 
90: {{{
91:     # wificonfig createprofile office essid=linksys key~_mgmt=WPA-EAP eap=TLS identity=user@sun.com ca~_cert=/etc/inet/WPA/cacert.pem client~_cert=/etc/inet/WPA/client~_cert.pem private~_key=/etc/inet/WPA/client~_key.pem private~_key~_passwd=whatever
92: }}}
93: 
94: Step 3.  Connect to your profile.
95: 
96: {{{
97:     # ifconfig ath0 plumb
98:     # wificonfig -i ath0 connect home
99: }}}
100: 
101: You might want to check the status of the wireless link:
102: 
103: {{{
104:     # wificonfig -i ath0 showstatus
105: }}}
106: 
107: Link status property should say "connected".  If not, try using the -dd option
108: for wpa~_supplicant to get additional debugging information.
109: 
110: Step 4.  Start DHCP client:
111: 
112: {{{
113:     # ifconfig ath0 dhcp
114: }}}
115: 
116: Step 5.  You can connect to another AP at any time using wificonfig:
117: 
118: {{{
119:     # wificonfig -i ath0 disconnect
120:     # wificonfig -i ath0 connect office
121: }}}
122: 
123: === FAQ
124: 
125: 1) I can connect to my access point successfully, but I can’t get an IP
126: address through DHCP.
127: 
128: Due to certain export control restrictions, stardard Solaris encryption kit only supports 128 bit RC4, so you might need to download and install new SUNWcry package.
129: 
130: 2) wpa~_supplicant fails to start with error message °ld.so.1: wpa~_supplicant: fatal : libssl.so.0.9.7: open failed: No such file or directory".
131: 
132: Make sure that openssl 0.9.7 or higher is installed on your system. You can
133: use the following command to determine your openssl version:
134: 
135: {{{
136:     # /usr/sfw/bin/openssl version
137:     OpenSSL 0.9.7d 17 Mar 2004
138: }}}
139: 
140: 3) wpa_supplicant exits with "Failed to enable WPA in the driver error.
141: 
142: Make sure your wireless driver supports WPA. Currently, only Atheros
143: driver v0.4 or higher version supports WPA.  Other drivers with WPA support have not yet been released.
144: 
145: 4) EAP-TLS doesn’t work.
146: 
147: The EAP-TLS mode needs a Radius Server, such as Freeradius. Please contact
148: your network administrator to make sure your Radius Server and your AP are configured correctly and you have a certificate for your machine.
149: 
150: 5) Why doesn’t CCMP encryption work?
151: 
152: The wpa~_supplicant deamon supports both TKIP and CCMP, but Atheros wireless driver v0.4 does not yet support CCMP encryption.
153: 
154: === Notes
155: 
156: This is work in progress.  Please send your questions and comments to laptop-discuss@opensolaris.org mailing list.
OpenSolaris

Top Menu

Wiki code for wpa_supplicant

Search

Collectives

Community Group

Project

User Group

Subsites

Community Group laptop Pages
