Wpa supplicant

# 允许 “wheel” 组中的用户控制 wpa_supplicant
ctrl_interface=DIR=/var/run/wpa_supplicant GROUP=wheel

# 使 wpa_gui / wpa_cli 对此文件可写
update_config=1

ctrl_interface=/var/run/wpa_supplicant
eapol_version=1
ap_scan=0
fast_reauth=1

network={
	key_mgmt=IEEE8021X
	eap=TLS
	identity="COMPUTERAACT$@DOMAIN"
	ca_cert="/etc/wpa_supplicant/ca.pem"
	client_cert="/etc/wpa_supplicant/COMPUTERACCT.pem"
	private_key="/etc/wpa_supplicant/COMPUTERAACT.key"
	private_key_passwd="secret_password"
	eapol_flags=0
}

wpa_supplicant_args="-ieth0 -Dwired -c/etc/wpa_supplicant/wpa_supplicant_wired.conf -M -c/etc/wpa_supplicant/wpa_supplicant.conf"

wpa_cli v2.8
Copyright (c) 2004-2019, Jouni Malinen <j@w1.fi> and contributors

This software may be distributed under the terms of the BSD license.
See README for more details.

Selected interface 'p2p-dev-wlan0'

Interactive mode

> interface eth0
Connected to interface 'eth0.
> status
bssid=00:00:00:00:00:00
freq=0
ssid=
id=0
mode=station
pairwise_cipher=NONE
group_cipher=NONE
key_mgmt=IEEE 802.1X (no WPA)
wpa_state=COMPLETED
ip_address=10.10.10.100
p2p_device_address=bb:bb:bb:bb:bb:bb
address=aa:aa:aa:aa:aa:aa
Supplicant PAE state=AUTHENTICATED
suppPortStatus=Authorized
EAP state=SUCCESS
selectedMethod=13 (EAP-TLS)
eap_tls_version=TLSv1
EAP TLS cipher=ECDHE-RSA-AES256-SHA
...

wpa_supplicant_args="-B -M -c/etc/wpa_supplicant/wpa_supplicant.conf"

wpa_supplicant_args="-ieth0 -Dwired -c/etc/wpa_supplicant/wpa_supplicant_wired.conf -B -M -c/etc/wpa_supplicant/wpa_supplicant.conf"

wpa_supplicant_args="-D wext"

modules_wlan0="wpa_supplicant"
config_wlan0="dhcp"

wpa_cli v2.5
 Copyright (c) 2004-2015, Jouni Malinen <j@w1.fi> and contributors

 This software may be distributed under the terms of the BSD license.
 See README for more details.

 Selected interface 'wlan0'

 Interactive mode

 > scan
 OK
 > scan_results
 bssid / frequency / signal level / flags / ssid
 01:23:45:67:89:ab       2437    0       [WPA-PSK-CCMP+TKIP][WPA2-PSK-CCMP+TKIP][ESS]    hotel-free-wifi
 > add_network
 0
 > set_network 0 ssid "hotel-free-wifi"
 OK
 > set_network 0 psk "password"
 OK
 > enable_network 0
 OK
 <3>CTRL-EVENT-SCAN-RESULTS 
 <3>WPS-AP-AVAILABLE 
 <3>Trying to associate with 01:23:45:67:89:ab (SSID='hotel-free-wifi' freq=2437 MHz)
 <3>Associated with 01:23:45:67:89:ab
 <3>WPA: Key negotiation completed with 01:23:45:67:89:ab [PTK=CCMP GTK=TKIP]
 <3>CTRL-EVENT-CONNECTED - Connection to 01:23:45:67:89:ab completed [id=0 id_str=]
 > save_config 
 OK
 > quit

ctrl_interface=DIR=/var/run/wpa_supplicant GROUP=wheel
#ap_scan=0
#update_config=1

network={
        ssid="YourSSID"
        psk="your-secret-key"
        scan_ssid=1
        proto=RSN
        key_mgmt=WPA-PSK
        group=CCMP TKIP
        pairwise=CCMP TKIP
        priority=5
}

ctrl_interface=DIR=/var/run/wpa_supplicant GROUP=wheel
ap_scan=1

network={
        bssid=00:50:17:31:1a:11
        ssid="YourSSID"
        psk="your-secret-key"
        scan_ssid=1
        proto=RSN
        key_mgmt=WPA-PSK
        group=CCMP TKIP
        pairwise=CCMP TKIP
        priority=5
}

network={
        key_mgmt=NONE
        priority=-999
}

wpa_supplicant v2.2
random: Trying to read entropy from /dev/random
Successfully initialized wpa_supplicant
Initializing interface 'wlp8s0' conf '/etc/wpa_supplicant/wpa_supplicant.conf' driver 'nl80211' ctrl_interface '/var/run/wpa_supplicant' bridge 'N/A'
Configuration file '/etc/wpa_supplicant/wpa_supplicant.conf' -> '/etc/wpa_supplicant/wpa_supplicant.conf'
Reading configuration file '/etc/wpa_supplicant/wpa_supplicant.conf'
ctrl_interface='DIR=/var/run/wpa_supplicant GROUP=wheel'
update_config=1
Line: 6 - start of a new network block

modules_wlan0="wpa_supplicant"
wpa_supplicant_wlan0="-Dnl80211 -d -f /var/log/wpa_supplicant.log"
config_wlan0="dhcp"

`ap`	Add support for access point mode
`bindist`	Flag to enable or disable options for prebuilt (GRP) packages (eg. due to licensing issues)
`broadcom-sta`	Flag to help users disable features not supported by broadcom-sta driver
`dbus`	Enable dbus support for anything that needs it (gpsd, gnomemeeting, etc)
`eap-sim`	Add support for EAP-SIM authentication algorithm
`eapol-test`	Build and install eapol_test binary
`fasteap`	Add support for FAST-EAP authentication algorithm
`fils`	Add support for Fast Initial Link Setup (802.11ai)
`hs2-0`	Add support for 802.11u and Passpoint for HotSpot 2.0
`libressl`	Use dev-libs/libressl instead of dev-libs/openssl when applicable (see also the ssl useflag)
`macsec`	Add support for wired macsec
`mbo`	Add support Multiband Operation
`mesh`	Add support for mesh mode
`p2p`	Add support for Wi-Fi Direct mode
`privsep`	Enable wpa_priv privledge separation binary
`ps3`	Add support for ps3 hypervisor driven gelic wifi
`qt5`	Add support for the Qt 5 application and UI framework
`readline`	Enable support for libreadline, a GNU line-editing library that almost everyone wants
`selinux`	!!internal use only!! Security Enhanced Linux support, this must be set by the selinux profile or breakage will occur
`smartcard`	Add support for smartcards
`tdls`	Add support for Tunneled Direct Link Setup (802.11z)
`uncommon-eap-types`	Add support for GPSK, SAKE, GPSK_SHA256, IKEV2 and EKE
`wimax`	Add support for Wimax EAP-PEER authentication algorithm
`wps`	Add support for Wi-Fi Protected Setup

Wpa supplicant

Contents

安装

USE 标记

USE flags for net-wireless/wpa_supplicant IEEE 802.1X/WPA supplicant for secure wireless transfers

Emerge

配置

文件

全局

Setup wired 802.1X

Setup the network manager

设置为 dhcpcd 的网络管理器

在Gentoo 中设置 net.* 脚本

使用

使用 wpa_gui

使用 wpa_cli

使用 wpa_passphrase

手动编辑

WPA2 with wpa_supplicant

自动连接到任何不安全的网络

故障排除

检索已知 bug

以调试模式运行 wpa_supplicant

启用日志

在 Gentoo 中启用 net.* 脚本日志

参考

另请参阅

外部资源