Open d-a-v opened 6 years ago
@FayeY, in this statement of yours: (link to thread)
We will add an API to set auth mode in the future release
Is it the phase 2 authentication that you are referring to ?
@d-a-v Thanks for opening this issue. I hope someone from espressif will address this soon. As for your PR about SDK3.0.0, did you mean that this version addresses the wpa2 issue?
@d-a-v @FayeY
Seems like things are quiet. Here is one thing I wonder.
I came across https://github.com/JeroenBeemster/ESP32-WPA2-enterprise.
Now, I have not tested this, but I wonder if ESP32 is working, would it be possible to find the relavent files, and port it to ESP8266? Is this even a possibility or are we talking apples and oranges here?
I have tried that example with my esp32 and the eduroam network. Didn't work. Stuck waiting for wifi to connect.
On Thu, Jun 21, 2018, 18:24 kapyaar notifications@github.com wrote:
@d-a-v https://github.com/d-a-v @FayeY https://github.com/FayeY
Seems like things are quiet. Here is one thing I wonder.
I came across https://github.com/JeroenBeemster/ESP32-WPA2-enterprise.
Now, I have not tested this, but I wonder if ESP32 is working, would it be possible to find the relavent files, and port it to ESP32? Is this even a possibility or are we talking apples and oranges here?
— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/espressif/ESP8266_NONOS_SDK/issues/133#issuecomment-399163137, or mute the thread https://github.com/notifications/unsubscribe-auth/AKqUHN99hjpd6nyjJN69ZUxnzyyiqN3wks5t-8izgaJpZM4Uia4g .
@kapyaar Maybe there exists some common code shared between esp32 and esp8266 regarding the physical layer firmware and specifically wpa2-enterprise. In that case, solving this issue for one would solve it for the other. Only espressif can say, because this part of the firmware is closed-source for both chips.
An update: apparently they're working on it: https://bbs.espressif.com/viewtopic.php?f=66&t=5962&start=10#p20892
Latest commits (as of 89920dcc40aee30da11899c832f311e381312b38) do not solve this TTLS/PAP issue:
18:29:06.302 -> SDK:3.0.0-dev(c0f7b44)
18:29:06.302 -> Trying to connect to eduroam
18:29:06.368 -> WPA2 ENTERPRISE VERSION: [v2.0] enable
18:29:07.163 -> wifi evt: 2
18:29:09.250 -> scandone
18:29:10.212 -> state: 0 -> 2 (b0)
18:29:10.212 -> state: 2 -> 3 (0)
18:29:10.212 -> state: 3 -> 5 (10)
18:29:10.212 -> add 0
18:29:10.212 -> aid 15
18:29:10.212 -> cnt
18:29:10.244 -> EAP-TTLS: Start (server ver=0, own ver=0)
18:29:13.793 -> EAP-TTLS: TLS done, proceed to Phase 2
18:29:13.793 -> EAP-TTLS: received 0 bytes encrypted data for Phase 2
18:29:13.793 -> EAP-TTLS: empty data in beginning of Phase 2 - use fake EAP-Request Identity
18:29:13.825 -> EAP-TTLS: Phase 2 MSCHAPV2 Request
18:29:14.852 -> state: 5 -> 2 (2a0)
18:29:14.852 -> rm 0
18:29:14.852 -> wifi evt: 1
18:29:14.885 -> STA disconnect: 2
Are we stuck on this? I do have a wpa2 enterprise network (and also eduroam access), and going to test it out this weekend. Do I just need to copy the lib files from espressif repo to the arduino sdk folder, compile and run? I read on here that I have to
Run fix_sdk_libs.sh
I tried this on my windows 10, but sh fix_sdk_libs.sh on terminal does not seem to work (in the correct directory offcourse).
Am I doing it wrong?
Do I just need to copy the lib files from espressif repo to the arduino sdk folder,
This is an arduino specific discussion, if you wish to use the lastest nonos-sdk with arduino, check the arduino's relevant PR.
Hello,
I have the chance to have a full access (with logs) to a local server of the widely used (and now reaching asia) 'EDUcation ROAMing' eduroam network to which a bunch of esp8266 users would like to connect to. It's generally a wpa2-enterprise network.
It does not work here and I think for a simple reason: the ESP is using
MSCHAPV2
, But this network can require thePAP
phase 2 authentication method. That explains why some user can connect to that network, and why some others not. The required EAP method isTTLS
which the ESP honours from user application and according to the esp-nonos-sdk logs below:edit: same result with current git version of the firmware
SDK:3.0.0-dev(097de86)
FWIW,
PAP
phase 2 method.Here are the laconic logs of the radius server of my local network. Note that my user name is correctly transmitted from the esp, but not the password. The mac address shown is the esp's one:
Relevant part of the source code:
Thus, the question is:
Would you be able to propose an API to select at least the Phase2 authentication method ?
Thanks for your support