{"action":"created","issue":{"url":"https://api.github.com/repos/NixOS/nixpkgs/issues/8332","labels_url":"https://api.github.com/repos/NixOS/nixpkgs/issues/8332/labels{/name}","comments_url":"https://api.github.com/repos/NixOS/nixpkgs/issues/8332/comments","events_url":"https://api.github.com/repos/NixOS/nixpkgs/issues/8332/events","html_url":"https://github.com/NixOS/nixpkgs/issues/8332","id":88243217,"number":8332,"title":"Cannot connect with updated wpa_supplicant","user":{"login":"ttuegel","id":563054,"avatar_url":"https://avatars.githubusercontent.com/u/563054?v=3","gravatar_id":"","url":"https://api.github.com/users/ttuegel","html_url":"https://github.com/ttuegel","followers_url":"https://api.github.com/users/ttuegel/followers","following_url":"https://api.github.com/users/ttuegel/following{/other_user}","gists_url":"https://api.github.com/users/ttuegel/gists{/gist_id}","starred_url":"https://api.github.com/users/ttuegel/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ttuegel/subscriptions","organizations_url":"https://api.github.com/users/ttuegel/orgs","repos_url":"https://api.github.com/users/ttuegel/repos","events_url":"https://api.github.com/users/ttuegel/events{/privacy}","received_events_url":"https://api.github.com/users/ttuegel/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/NixOS/nixpkgs/labels/bug","name":"bug","color":"fc2929"}],"state":"closed","locked":false,"assignee":null,"milestone":{"url":"https://api.github.com/repos/NixOS/nixpkgs/milestones/6","html_url":"https://github.com/NixOS/nixpkgs/milestones/15.09","labels_url":"https://api.github.com/repos/NixOS/nixpkgs/milestones/6/labels","id":895513,"number":6,"title":"15.09","description":"","creator":{"login":"domenkozar","id":126339,"avatar_url":"https://avatars.githubusercontent.com/u/126339?v=3","gravatar_id":"","url":"https://api.github.com/users/domenkozar","html_url":"https://github.com/domenkozar","followers_url":"https://api.github.com/users/domenkozar/followers","following_url":"https://api.github.com/users/domenkozar/following{/other_user}","gists_url":"https://api.github.com/users/domenkozar/gists{/gist_id}","starred_url":"https://api.github.com/users/domenkozar/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/domenkozar/subscriptions","organizations_url":"https://api.github.com/users/domenkozar/orgs","repos_url":"https://api.github.com/users/domenkozar/repos","events_url":"https://api.github.com/users/domenkozar/events{/privacy}","received_events_url":"https://api.github.com/users/domenkozar/received_events","type":"User","site_admin":false},"open_issues":12,"closed_issues":88,"state":"open","created_at":"2014-12-08T10:44:19Z","updated_at":"2015-11-05T10:50:23Z","due_on":"2015-09-29T22:00:00Z","closed_at":null},"comments":40,"created_at":"2015-06-14T20:25:17Z","updated_at":"2015-11-07T15:52:01Z","closed_at":"2015-11-05T10:50:23Z","body":"As I previously reported, with no satisfactory response from the package maintainers:\r\n\r\nAs reported on the [hostapd mailing list](http://lists.shmoo.com/pipermail/hostap/2015-April/032685.html), wpa_supplicant-2.4 cannot connect to enterprise wireless networks, particularly ones with Cisco equipment. Because the wpa_supplicant developers are refusing to do anything about it, [at least one distribution](http://lists.shmoo.com/pipermail/hostap/2015-May/032748.html) has downgraded to wpa_supplicant-2.3. There is a workaround (see previous link), but it requires users to edit their configurations (which is disruptive) and NetworkManager users (who use wpa_supplicant transitively) cannot do that.\r\n\r\nThis breaks network connectivity for (at least) NetworkManager users who connect to a Cisco wireless network. I think we can agree, that level of breakage is not acceptable in a stable release. The options I see are (in order of increasing security and effort):\r\n\r\n1. Downgrade wpa_supplicant,\r\n2. Keep wpa_supplicant-2.4, but disable TLS 1.2 by default, or\r\n3. Patch NetworkManager to disable TLS 1.2 in wpa_supplicant by default."},"comment":{"url":"https://api.github.com/repos/NixOS/nixpkgs/issues/comments/154718160","html_url":"https://github.com/NixOS/nixpkgs/issues/8332#issuecomment-154718160","issue_url":"https://api.github.com/repos/NixOS/nixpkgs/issues/8332","id":154718160,"user":{"login":"vcunat","id":1785925,"avatar_url":"https://avatars.githubusercontent.com/u/1785925?v=3","gravatar_id":"","url":"https://api.github.com/users/vcunat","html_url":"https://github.com/vcunat","followers_url":"https://api.github.com/users/vcunat/followers","following_url":"https://api.github.com/users/vcunat/following{/other_user}","gists_url":"https://api.github.com/users/vcunat/gists{/gist_id}","starred_url":"https://api.github.com/users/vcunat/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/vcunat/subscriptions","organizations_url":"https://api.github.com/users/vcunat/orgs","repos_url":"https://api.github.com/users/vcunat/repos","events_url":"https://api.github.com/users/vcunat/events{/privacy}","received_events_url":"https://api.github.com/users/vcunat/received_events","type":"User","site_admin":false},"created_at":"2015-11-07T15:52:01Z","updated_at":"2015-11-07T15:52:01Z","body":"It's a short-term work around the broken radius installed on many places. I expect that to be all fixed in a few months or sooner."}}