[Pkg-openssl-devel] Bug#883025: Bug#883025: Breaks wpa_supplicant on WPA-Enterprise networks

[Josh Triplett]

On Wed, Nov 29, 2017 at 12:05:35AM +0100, Kurt Roeckx wrote:
> On Tue, Nov 28, 2017 at 02:12:07PM -0800, Josh Triplett wrote:
> > Package: libssl1.1
> > Version: 1.1.0g-2
> > Severity: important
> > Tags: upstream
> > 
> > See https://github.com/openssl/openssl/issues/3594 ; current OpenSSL
> > breaks compatibility with the hook mechanism that wpa_supplicant used to
> > provide the passphrase for PEM keys. The net result is this:
> 
> My understanding from reading that bug is that wpa supplicant
> would fix it?

wpasupplicant can't necessarily fix this upstream, because the fix would
break on older OpenSSL. However, Debian could potentially patch
wpasupplicant if we're only ever going to build against the newer
OpenSSL.