Skip to content

Support TTLS-PAP #6427

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
1 task done
hgshoggins opened this issue Mar 13, 2022 · 5 comments
Closed
1 task done

Support TTLS-PAP #6427

hgshoggins opened this issue Mar 13, 2022 · 5 comments
Labels
Resolution: Expired More info wasn't provided

Comments

@hgshoggins
Copy link

hgshoggins commented Mar 13, 2022

Related area

Wifi

Hardware specification

ESP32

Is your feature request related to a problem?

We're missing the EAP-TTLS + PAP, as it's clearly stated in esp_wpa2.h that

@attention 2. wpa2 enterprise authentication can only support TLS, PEAP-MSCHAPv2 and TTLS-MSCHAPv2 method.

A lot of corporate/student networks support/require PAP.

Describe the solution you'd like

Support PAP as PHASE2 like it is offered in the esp_eap_ttls_phase2_types ENUM:

typedef enum {
    ESP_EAP_TTLS_PHASE2_EAP,
    ESP_EAP_TTLS_PHASE2_MSCHAPV2,
    ESP_EAP_TTLS_PHASE2_MSCHAP,
    ESP_EAP_TTLS_PHASE2_PAP,
    ESP_EAP_TTLS_PHASE2_CHAP
} esp_eap_ttls_phase2_types ;

Describe alternatives you've considered

None, we need PAP.

Additional context

No response

I have checked existing list of Feature requests and the Contribution Guide

  • I confirm I have checked existing list of Feature requests and Contribution Guide.
@hgshoggins hgshoggins added the Type: Feature request Feature request for Arduino ESP32 label Mar 13, 2022
@me-no-dev
Copy link
Member

Will #6398 resolve the issue?

@VojtechBartoska VojtechBartoska added the Resolution: Awaiting response Waiting for response of author label Mar 16, 2022
@VojtechBartoska
Copy link
Contributor

Hello @hgshoggins, any chance you take a look on mentioned PR above?

@hgshoggins
Copy link
Author

I'd love to, but actually I'm not sure how I can manage to do so. Ideally, I would work directly from published upstream master. Unless you guide me on how to work from that PR, but that's out of the scope of these comments, and I'm afraid I don't have time/skills for that.

Clearly, here is what is at stake right now: I have a WiFi network to which I connect machines (Linux + Windows + Android) authenticating to a RADIUS server through EAP-TTLS (PAP for Phase2), and I can see it's not working with my ESP32, but that's all I can debug (as well as the RADIUS server's debug log saying the ESP32 is refusing the EAP type). And noting that, the comment in the code saying that only TLS, PEAP-MSCHAPv2 and TTLS-MSCHAPv2 methods are supported pointed me here in the Issues section. But I might not be your best chance to debug further.

I hope someone else can.

@VojtechBartoska
Copy link
Contributor

Thanks for your fast answer @hgshoggins, to validate your issue you can just download version 2.0.3-RC1 we released yesterday and it includes mentioned PR.

To do so, you need to change link in Arduino IDE settings to development release link, take a look here on installing guide.

If there is something unclear, don't hesitate to ask :)

@VojtechBartoska VojtechBartoska removed the Type: Feature request Feature request for Arduino ESP32 label Apr 7, 2022
@VojtechBartoska
Copy link
Contributor

Hello,

as there was no answer in more than 14 days, I'm closing the issue as expired to keep our backlog manageable.

If it's still needed, please reopen the issue.

Thanks for understanding.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Resolution: Expired More info wasn't provided
Projects
None yet
Development

No branches or pull requests

3 participants