WPA2 Enterprise?

[sashkaw]

Are there any plans for developing capability to connect with WPA2 Enterprise? I am interested in using the Arduino MKR WiFi 1010 with a WPA2 Enterprise connection. Apologies if this is duplicated elsewhere.

[facchinm]

Hi @Durasno ,
there are plans to do it; WPA2 enterprise is fully supported by esp-idf so wrapping it in both this library and https://github.com/arduino/nina-fw easy. MSCHAP-v2 and certificates however need their own new set of APIs so probably they're not going to come immediately

[sashkaw]

Hi @facchinm,

Thanks very much for the response!

[facchinm]

Initial branch: https://github.com/arduino/nina-fw/tree/wpa2_enterprise

[nriesterer]

Any progress on this?

[adriens]

Any progress please ?... or workaround ? 🙏

[adriens]

I'm swithcing my project on raspberry ;-(

[facchinm]

Hi @adriens ,
WPA2 enterprise support is coming before the end of August, sorry for the long delay but we've been super busy with a lot of other stuff 🙂

[adriens]

Awesome @facchinm 🙏
Hence, for now, we are using a raspberry as a router, then connect to it from arduino 😆

[adriens]

Btw @facchinm : what is tha other cool stuff ??? Does it have to deal with Arduino IOT ? OMG say yes 👍 🐱

[cw1812]

I try to run WPA2 Enterprise but fail to pass:

/tmp/468109146/custom/WiFiNINA/src/utility/wifi_drv.cpp: In static member function 'static void WiFiDrv::wpa2EntSetClientCertificate(const char*, const char*)':

/tmp/468109146/custom/WiFiNINA/src/utility/wifi_drv.cpp:1178:13: error: 'sendParamNoLen' is not a member of 'SpiDrv'

SpiDrv::sendParamNoLen((uint8_t*)client_crt, strlen(client_crt), NO_LAST_PARAM);

^~~~~~~~~~~~~~

/tmp/468109146/custom/WiFiNINA/src/utility/wifi_drv.cpp:1179:13: error: 'sendParamNoLen' is not a member of 'SpiDrv'

SpiDrv::sendParamNoLen((uint8_t*)client_key, strlen(client_key), LAST_PARAM);

^~~~~~~~~~~~~~

/tmp/468109146/custom/WiFiNINA/src/utility/wifi_drv.cpp: In static member function 'static void WiFiDrv::wpa2EntSetCACertificate(const char*)':

/tmp/468109146/custom/WiFiNINA/src/utility/wifi_drv.cpp:1210:13: error: 'sendParamNoLen' is not a member of 'SpiDrv'

SpiDrv::sendParamNoLen((uint8_t*)ca_pem, strlen(ca_pem), LAST_PARAM);

^~~~~~~~~~~~~~

exit status 1

[ubidefeo]

@facchinm re: Enterprise support
I was chatting with @gvarisco and @sandeepmistry about a couple vulnerabilities affecting EAP which seem to be patched in IDF 3.3, when we release support let's make sure the IDF is the latest.

here's some info about the exploits
https://matheus-garbelini.github.io/home/post/esp32-esp8266-eap-crash/

These vulnerabilities are patched in this one
https://github.com/espressif/esp-idf/releases/tag/v3.3

cheers
u.