search

opendata-stuttgart / sensors-software

sourcecode for reading sensor data
571 stars 309 forks source link

Add 802.1X support (ex. Eduroam and authenticated network sessions) #896

Open vasconeves opened 3 years ago

vasconeves commented 3 years ago

Hi!

I'm using about 50 feinstaub sensors but I have this recurring problem: school and universities have authenticated networks that require adding more information than just the network name and password. So I need to get creative and use a lot of workaround which are not really ideal in terms of security.

I'm wondering if this feature can be added in future updates.

Thanks.

Best regards,

Vasco

ricki-z commented 3 years ago

This is a matter of available RAM. The existing implementations are very unstable. We tried to use 4096 bit certificates for HTTPS on our API servers, but had to go down to 2048 bit to get stable transmissions. For Eduroam Radius servers we can't tell the size of certificates used. So this may work with some systems but not all.

vasconeves commented 3 years ago

Hello,

Ok...what about moving to esp32? Would that solve the problem?

Best,

V.

Rajko Zschiegner @.***> escreveu no dia segunda, 12/04/2021 à(s) 19:26:

This is a matter of available RAM. The existing implementations are very unstable. We tried to use 4096 bit certificates for HTTPS on our API servers, but had to go down to 2048 bit to get stable transmissions. For Eduroam Radius servers we can't tell the size of certificates used. So this may work with some systems but not all.

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/opendata-stuttgart/airrohr-firmware-flasher/issues/53#issuecomment-818030355, or unsubscribe https://github.com/notifications/unsubscribe-auth/ATTX3RKRZWMQVYEA35ZQ6HTTIM3OLANCNFSM42WUYMUA .

sidietz commented 3 years ago

Moving to ESP32 may help because it offers more SDRAM, a low-power second core and more computing power.

That does not change the fact, that lots of sensors-software code would have to be refactored/re-written, then.

vasconeves commented 3 years ago

Hey,

Maybe we should start thinking about making branches for different builds/cores for the auto update. This is a huge problem for penetration in universities and educational networks, at least in Portugal.

Nevertheless we have now much more sensors as before, up to 30 and counting :)

Usually I suggest to place a router (or any routing equipment) from inside the network but this poses considerable danger in terms of security.

Cheers,

V.

Simon D. @.***> escreveu no dia quinta, 10/06/2021 à(s) 17:03:

Moving to ESP32 may help because it offers more SDRAM, a low-power second core and more computing power.

That does not change the fact, that lots of sensors-software code would have to be refactored/re-written, then.

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/opendata-stuttgart/sensors-software/issues/896#issuecomment-858748118, or unsubscribe https://github.com/notifications/unsubscribe-auth/ATTX3RPFGYUGBEC2KYDDMWTTSDO3PANCNFSM44WZQGSA .