Patch Detail
get:
Show a patch.
patch:
Update a patch.
put:
Update a patch.
GET /api/patches/2194502/?format=api
{ "id": 2194502, "url": "http://patchwork.ozlabs.org/api/patches/2194502/?format=api", "web_url": "http://patchwork.ozlabs.org/project/hostap/patch/20260209082019.3543846-1-Chaitanya.mgit@gmail.com/", "project": { "id": 22, "url": "http://patchwork.ozlabs.org/api/projects/22/?format=api", "name": "HostAP Development", "link_name": "hostap", "list_id": "hostap.lists.infradead.org", "list_email": "hostap@lists.infradead.org", "web_url": "", "scm_url": "", "webscm_url": "", "list_archive_url": "", "list_archive_url_format": "", "commit_url_format": "" }, "msgid": "<20260209082019.3543846-1-Chaitanya.mgit@gmail.com>", "list_archive_url": null, "date": "2026-02-09T08:20:19", "name": "eap: disable EAP-TTLS CHAP phase2 on server when CONFIG_FIPS is set", "commit_ref": null, "pull_url": null, "state": "accepted", "archived": false, "hash": "17b19f0904928dc40014b476b3140d4cb87f2db5", "submitter": { "id": 23866, "url": "http://patchwork.ozlabs.org/api/people/23866/?format=api", "name": "Chaitanya Tata", "email": "chaitanya.mgit@gmail.com" }, "delegate": null, "mbox": "http://patchwork.ozlabs.org/project/hostap/patch/20260209082019.3543846-1-Chaitanya.mgit@gmail.com/mbox/", "series": [ { "id": 491475, "url": "http://patchwork.ozlabs.org/api/series/491475/?format=api", "web_url": "http://patchwork.ozlabs.org/project/hostap/list/?series=491475", "date": "2026-02-09T08:20:19", "name": "eap: disable EAP-TTLS CHAP phase2 on server when CONFIG_FIPS is set", "version": 1, "mbox": "http://patchwork.ozlabs.org/series/491475/mbox/" } ], "comments": "http://patchwork.ozlabs.org/api/patches/2194502/comments/", "check": "pending", "checks": "http://patchwork.ozlabs.org/api/patches/2194502/checks/", "tags": {}, "related": [], "headers": { "Return-Path": "\n <hostap-bounces+incoming=patchwork.ozlabs.org@lists.infradead.org>", "X-Original-To": "incoming@patchwork.ozlabs.org", "Delivered-To": "patchwork-incoming@legolas.ozlabs.org", "Authentication-Results": [ "legolas.ozlabs.org;\n\tdkim=pass (2048-bit key;\n secure) header.d=lists.infradead.org header.i=@lists.infradead.org\n header.a=rsa-sha256 header.s=bombadil.20210309 header.b=VMqRGk/0;\n\tdkim=fail reason=\"signature verification failed\" (2048-bit key;\n unprotected) header.d=gmail.com header.i=@gmail.com header.a=rsa-sha256\n header.s=20230601 header.b=egKAdkWT;\n\tdkim-atps=neutral", "legolas.ozlabs.org;\n spf=none (no SPF record) smtp.mailfrom=lists.infradead.org\n (client-ip=2607:7c80:54:3::133; helo=bombadil.infradead.org;\n envelope-from=hostap-bounces+incoming=patchwork.ozlabs.org@lists.infradead.org;\n receiver=patchwork.ozlabs.org)" ], "Received": [ "from bombadil.infradead.org (bombadil.infradead.org\n [IPv6:2607:7c80:54:3::133])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4f8d1Z4j3mz1xvc\n\tfor <incoming@patchwork.ozlabs.org>; Mon, 09 Feb 2026 19:20:50 +1100 (AEDT)", "from localhost ([::1] helo=bombadil.infradead.org)\n\tby bombadil.infradead.org with esmtp (Exim 4.98.2 #2 (Red Hat Linux))\n\tid 1vpMVO-0000000EzuX-1SST;\n\tMon, 09 Feb 2026 08:20:26 +0000", "from mail-pg1-x52f.google.com ([2607:f8b0:4864:20::52f])\n\tby bombadil.infradead.org with esmtps (Exim 4.98.2 #2 (Red Hat Linux))\n\tid 1vpMVJ-0000000Ezu9-3tJf\n\tfor hostap@lists.infradead.org;\n\tMon, 09 Feb 2026 08:20:25 +0000", "by mail-pg1-x52f.google.com with SMTP id\n 41be03b00d2f7-c648bc907ebso2755747a12.3\n for <hostap@lists.infradead.org>;\n Mon, 09 Feb 2026 00:20:21 -0800 (PST)", "from tach01.nordicsemi.no ([49.205.248.152])\n by smtp.gmail.com with ESMTPSA id\n d9443c01a7336-2a951c9cdf1sm95057115ad.41.2026.02.09.00.20.18\n (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);\n Mon, 09 Feb 2026 00:20:20 -0800 (PST)" ], "DKIM-Signature": [ "v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;\n\td=lists.infradead.org; s=bombadil.20210309; h=Sender:\n\tContent-Transfer-Encoding:Content-Type:List-Subscribe:List-Help:List-Post:\n\tList-Archive:List-Unsubscribe:List-Id:MIME-Version:Message-ID:Date:Subject:Cc\n\t:To:From:Reply-To:Content-ID:Content-Description:Resent-Date:Resent-From:\n\tResent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:\n\tList-Owner; bh=otpm1IqWEpjoWZHlM6E/L3jRxY3W6naRssu/acHC7Y4=; b=VMqRGk/0DA0vLO\n\t/egO7Q+FWmRUGHBYdyS7SXbF6C9MUlC7MQFNkVEUc4NimdKAaXlF85Mdh12saJPjnbhgxmf8qm0is\n\t3umVsmbQXuMyROo3k2Cse0s0XjBG5BYQQVYUES5uuLCNUmIqqvlZQoojYQA7n+FkcLCOFBJm10eLU\n\tXKSP0iuNAyOZVyC6iEcRLm2qH/MOh2d2LMHx1StzHO+N9SymE+7JFoRgJ59XZ0uKcdq3nbDlV1qDh\n\tOcG/D6LMfSI2E45d2iMEOlI8GEzV1HoRdzk4fJRgavXZpx2kOH8emGQiw3c3C/tous2fTwP5134Er\n\tHGeO8rVHEZjIVw1Ri0GQ==;", "v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=gmail.com; s=20230601; t=1770625220; x=1771230020;\n darn=lists.infradead.org;\n h=content-transfer-encoding:mime-version:message-id:date:subject:cc\n :to:from:from:to:cc:subject:date:message-id:reply-to;\n bh=I30VRRLrsjp9XV+q37bZukqq+Ziz5tkEyv4G1jr00Ts=;\n b=egKAdkWTzjLEM3zr9Z+Sb6UJOlpyase0P4bJwQTqLOecs+uX7m9D8uT6pcVb3btaP4\n MZjbZw+sqCClMt33ywp0NExJM9IRbEKOOUq4DKJHEGVmWiKqHs4qappjtTpTHkAA26vu\n PpzgK8TpWtjfNwI5yjO4S+z3qrcMTrmrA4P6DFWAYeCEtzMpzYGMoz9sRVUHc0REVdRv\n d8jww09r9Ekmt4t5rfCjrGmxJXkOb3p8A2xMND71NNlLkGq3SysFzps3IB8x2AUAFPnG\n vf3oQHKMVvV9JJb5KXY8TQAchXNfaiy8RZekFMnaHUqI7aVlh6u39FV1RKiAOg8xrqb/\n qmvA==" ], "X-Google-DKIM-Signature": "v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=1e100.net; s=20230601; t=1770625220; x=1771230020;\n h=content-transfer-encoding:mime-version:message-id:date:subject:cc\n :to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date\n :message-id:reply-to;\n bh=I30VRRLrsjp9XV+q37bZukqq+Ziz5tkEyv4G1jr00Ts=;\n b=ux9Y1qJtetKOzpKYr/P8dEcATjuX6sD/wwNLjS90glm5Zq/IGUKUZhpQkg/j7EIJKB\n GfIKVI5xuoGeWRTbnI3r1L1N02fZAmpEqlXcE6GD7dNVvVdBrVeqepruuzfBY3GF9Yjp\n nhm/ZW8ttn+FYPRwxZqniYcOsHGfqNb03CoHcNJXykwVtA2mQkgBNd2fRgN4czh89Djf\n sp3bwOTOfDiND/FbakPvXF50eDNdOi8HAiRySeU5504wuCMb+6nuqnQ1STn8CzlriTMZ\n 8ioacZsmcrb9qkf5UO4rEbM+KYykAIQio+eS6a61QRrjUaxQNUCK97vrqYH0zh4GZkq3\n gkMA==", "X-Gm-Message-State": "AOJu0YzZOjK1ErJAxmluHZYRL9EHQW3kutgBOIAcXQTmlpfcam+AcPSc\n\tXTWnkXHZ3efmb9dMvpiuYa6865/DeAxf9go35ENoj0oofMpcziIO8TFzMbqYNA==", "X-Gm-Gg": "AZuq6aK0Wo3ZLW422zG/Npq638BgeSYN3+QS6yT4OoXoJMxRiQ8mejb2ydcA+afhH+7\n\tt4eSFBte91vvccFSOJUkXs3XSiwG2NWspA0xmDkCtQDEo6QZsNCngY6y0njMit70pQyw5DZ/p3Y\n\tD+A4Vp7I79pzU0PacqV7o241yd5szIuJLYzt16JykZMsr4vDgeoKJxIJob7ep5aTcWS0ImE3bFR\n\thSimhQmJ0UBZttk59mRuQQ+HeTwyQPwJlu7aWMKbSvmAVeqbytVHSQHL9oqdMn2ZkLpPFUr4VUt\n\twwvsijAiWH5NhqisutfuzNQNk5cVKePIY0lRANsBOZFrpIbdgXGbWBCSnNVOEROucD/2Fnsa53P\n\tgwBNzrcTn/xr610OgWWcfRKm1z/jSkhqTseMePpIKTS3/Pcg2Iun4ro8LxXJZBj5CHpu8ZNtLqe\n\t8ahg/wP8nV0PFjqSSZCKteDbrtCFDgYTr+Z0oZOo0=", "X-Received": "by 2002:a17:903:2ecb:b0:2aa:e238:e219 with SMTP id\n d9443c01a7336-2aae238ee5fmr36383525ad.58.1770625220510;\n Mon, 09 Feb 2026 00:20:20 -0800 (PST)", "From": "Chaitanya Tata <chaitanya.mgit@gmail.com>", "X-Google-Original-From": "Chaitanya Tata <Chaitanya.mgit@gmail.com>", "To": "hostap@lists.infradead.org", "Cc": "Chaitanya Tata <Chaitanya.Tata@nordicsemi.no>", "Subject": "[PATCH] eap: disable EAP-TTLS CHAP phase2 on server when CONFIG_FIPS\n is set", "Date": "Mon, 9 Feb 2026 13:50:19 +0530", "Message-ID": "<20260209082019.3543846-1-Chaitanya.mgit@gmail.com>", "X-Mailer": "git-send-email 2.43.0", "MIME-Version": "1.0", "X-CRM114-Version": "20100106-BlameMichelson ( TRE 0.8.0 (BSD) ) MR-646709E3 ", "X-CRM114-CacheID": "sfid-20260209_002023_136364_7461B996 ", "X-CRM114-Status": "GOOD ( 10.18 )", "X-Spam-Score": "-2.1 (--)", "X-Spam-Report": "Spam detection software,\n running on the system \"bombadil.infradead.org\",\n has NOT identified this incoming email as spam. The original\n message has been attached to this so you can view it or label\n similar future email. If you have any questions, see\n the administrator of that system for details.\n Content preview: From: Chaitanya Tata Mirror the peer side: reject CHAP in\n eap_ttls_process_phase2_chap() with an error and FAILURE state when\n building\n with CONFIG_FIPS, since CHAP uses MD5 which is not FIPS-approved.\n Content analysis details: (-2.1 points, 5.0 required)\n pts rule name description\n ---- ----------------------\n --------------------------------------------------\n 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record\n -0.0 SPF_PASS SPF: sender matches SPF record\n -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from\n author's\n domain\n -0.1 DKIM_VALID Message has at least one valid DKIM or DK\n signature\n 0.1 DKIM_SIGNED Message has a DKIM or DK signature,\n not necessarily valid\n -0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from\n envelope-from domain\n -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%\n [score: 0.0000]\n 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail\n provider\n [chaitanya.mgit(at)gmail.com]\n -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/, no\n trust\n [2607:f8b0:4864:20:0:0:0:52f listed in]\n [list.dnswl.org]", "X-BeenThere": "hostap@lists.infradead.org", "X-Mailman-Version": "2.1.34", "Precedence": "list", "List-Id": "<hostap.lists.infradead.org>", "List-Unsubscribe": "<http://lists.infradead.org/mailman/options/hostap>,\n <mailto:hostap-request@lists.infradead.org?subject=unsubscribe>", "List-Archive": "<http://lists.infradead.org/pipermail/hostap/>", "List-Post": "<mailto:hostap@lists.infradead.org>", "List-Help": "<mailto:hostap-request@lists.infradead.org?subject=help>", "List-Subscribe": "<http://lists.infradead.org/mailman/listinfo/hostap>,\n <mailto:hostap-request@lists.infradead.org?subject=subscribe>", "Content-Type": "text/plain; charset=\"us-ascii\"", "Content-Transfer-Encoding": "7bit", "Sender": "\"Hostap\" <hostap-bounces@lists.infradead.org>", "Errors-To": "hostap-bounces+incoming=patchwork.ozlabs.org@lists.infradead.org" }, "content": "From: Chaitanya Tata <Chaitanya.Tata@nordicsemi.no>\n\nMirror the peer side: reject CHAP in eap_ttls_process_phase2_chap()\nwith an error and FAILURE state when building with CONFIG_FIPS, since\nCHAP uses MD5 which is not FIPS-approved.\n\nSigned-off-by: Chaitanya Tata <Chaitanya.Tata@nordicsemi.no>\n---\n src/eap_server/eap_server_ttls.c | 6 ++++++\n 1 file changed, 6 insertions(+)", "diff": "diff --git a/src/eap_server/eap_server_ttls.c b/src/eap_server/eap_server_ttls.c\nindex b21f12da7..4984f205c 100644\n--- a/src/eap_server/eap_server_ttls.c\n+++ b/src/eap_server/eap_server_ttls.c\n@@ -560,6 +560,11 @@ static void eap_ttls_process_phase2_chap(struct eap_sm *sm,\n \t\t\t\t\t const u8 *password,\n \t\t\t\t\t size_t password_len)\n {\n+#ifdef CONFIG_FIPS\n+\twpa_printf(MSG_ERROR, \"EAP-TTLS: CHAP not supported in FIPS build\");\n+\teap_ttls_state(data, FAILURE);\n+\treturn;\n+#else /* CONFIG_FIPS */\n \tu8 *chal, hash[CHAP_MD5_LEN];\n \n \tif (challenge == NULL || password == NULL ||\n@@ -613,6 +618,7 @@ static void eap_ttls_process_phase2_chap(struct eap_sm *sm,\n \t\twpa_printf(MSG_DEBUG, \"EAP-TTLS/CHAP: Invalid user password\");\n \t\teap_ttls_state(data, FAILURE);\n \t}\n+#endif /* CONFIG_FIPS */\n }\n \n \n", "prefixes": [] }