search

Duet3D / RepRapFirmware

OO C++ RepRap Firmware
GNU General Public License v3.0
932 stars 533 forks source link

[FeatureRequest]: WPA3 support - Protected management frames (PMF) #600

Open eMPai-git opened 1 year ago

eMPai-git commented 1 year ago

Is your feature request related to a problem? Please describe.

We are running a 3D printer with a Duet 2 WiFi board. Our wireless network environment requires to use Protected management frames (PMF) IEEE 802.11w-2009 since there are security concerns not using it. Because of this, it is not possible to connect the Duet 2 WiFi to our wireless network.

Describe the solution you propose.

The ESP8266 RTOS Software Development Kit supports WPA3 and PMF since April 8, 2021. See the release notes. My preferred solution would be added WPA3 support.

Describe alternatives you've considered

We discussed the possibility to set 802.11w to optional. However, this was ultimately rejected.

Provide any additional context or information.

ESP8266_RTOS_SDK Release v3.4

dc42 commented 1 year ago

Have you tried the version 2.1beta3 DuetWiFiFirmware that we release with RRF 3.5beta2? That version uses a recent version of the ESP8266 SDK.

eMPai-git commented 1 year ago

Thank you for pointing me to version 2.1beta3 WiFiSocketServerRTOS. I missed the dev branch. Since our 3D printer is in productive use, I do not want to test any beta firmware at the moment. Hopefully I will be able to use an additional mainboard for testing purposes in the not too distant future.

However, I had a look around the code and discovered the following entry: CONFIG_ESP8266_WIFI_ENABLE_WPA3_SAE=n https://github.com/Duet3D/WiFiSocketServerRTOS/blob/9390d0c176cc475b1bdd380b7552fc2447e28dd9/sdkconfig.defaults.esp8266#L11

Does this mean WPA3 is not enabled or have I missed something again? 😅

dc42 commented 1 year ago

@eMPai-git WPA3 is disabled in the ESP8266 build due to limitations of the Expressif SDK and/or insufficient RAM on the ESP8266. It may be working on the ESP32S3 build which is used by the optional WiFi module for the Duet MB6HC version 1.02.