T4666: hostap: Reintroduce Debian's allow-tlsv1.patch

After the fixes for T4537/T4584, which added a custom hostap package,
wpa_supplicant no longer allows TLSv1.0 connections, which is required
for EAP-TLS with certain ISPs.

Previously, VyOS allowed TLSv1.0 via Debian's `allow-tlsv1.patch` patch.
This commit reintroduces that patch for the custom hostap package.

Signed-off-by: Andrew Gunnerson <chillermillerlong@hotmail.com>
This commit is contained in:
Andrew Gunnerson 2022-09-02 18:27:24 -04:00
parent 831846e744
commit 54a2f0aa70
No known key found for this signature in database
GPG Key ID: 14200B173D8A3BF5

View File

@ -16,7 +16,9 @@ fi
echo "I: Copy Debian build instructions"
cp -a ${SRC_DEB}/debian ${SRC}
rm -rf ${SRC}/debian/patches
# Preserve Debian's default of allowing TLSv1.0 for compatibility
find ${SRC}/debian/patches -mindepth 1 ! -name allow-tlsv1.patch -delete
echo 'allow-tlsv1.patch' > ${SRC}/debian/patches/series
# Build Debian package
cd ${SRC}