Trying to connect to WPA-PEAP without success

[rafaeloliveirarodrigues]

Basic Infos

Hardware

Hardware: ESP-12E
Core Version: Using git commit 7f6daa2

Description

Trying to connect to WPA-PEAP without success

Settings in IDE

Module: NodeMcu 1.0 (ESP-12E)
Flash Size: 4MB
CPU Frequency: 80Mhz
Upload Using: SERIAL

Sketch

extern "C" {
#include "user_interface.h"
#include "wpa2_enterprise.h"
}
#include <Arduino.h>
#include <ESP8266WiFi.h>
#include <ESP8266HTTPClient.h>
#include <ArduinoJson.h>

// SSID to connect to
static const char* ssid = "SSID";
// Username for authentification
static const char* username = "username";
// Password for authentification
static const char* password = "password";
const int ledPin = 0;
// --------------------------------------------------------------
void setup() {
  Serial.begin(115200);
  pinMode(ledPin, OUTPUT);

  Serial.print("Tryingonnect to ");
  Serial.println(ssid);

  wifi_station_disconnect();
  struct station_config wifi_config;

  memset(&wifi_config, 0, sizeof(wifi_config));
  strcpy((char*)wifi_config.ssid, ssid);
  strcpy((char*)wifi_config.password, password);
  wifi_station_set_config(&wifi_config);



  wifi_station_set_wpa2_enterprise_auth(1);
  wifi_station_set_enterprise_username((uint8*)username, strlen(username));
  wifi_station_set_enterprise_password((uint8*)password, strlen(password));
  wifi_station_connect();


  Serial.print("Status: ");
  Serial.println(wifi_station_get_connect_status());


  // Wait for connection AND IP address from DHCP
  while (WiFi.status() != WL_CONNECTED) {
    delay(2000);
    Serial.println(WiFi.localIP());

  }

} // setup

// ---------------------------
void loop() {
 
}

[devyte]

You are trying to use wpa2 enterprise, which I believe isn't yet fully operational in the espressif SDK. Until there is a definitive fix from them, the core won't be able to formally support it. There have been some success stories with workarounds and hacks, though, but also some fails with those same tricks. If you want to try them, just search the issue tracker for wpa2 enterprise.

…

On Jul 20, 2017 1:17 PM, "rjorod" ***@***.***> wrote: Basic Infos Hardware Hardware: ?ESP-12E Core Version: Using git commit 7f6daa2 <7f6daa2> Description Trying to connect to WPA-PEAP without success Settings in IDE Module: NodeMcu 1.0 (ESP-12E) Flash Size: 4MB/ CPU Frequency: 80Mhz Upload Using: SERIAL Sketch extern "C" { #include "user_interface.h" #include "wpa2_enterprise.h" } #include <Arduino.h> #include <ESP8266WiFi.h> #include <ESP8266HTTPClient.h> #include <ArduinoJson.h> // SSID to connect tostatic const char* ssid = "SSID";// Username for authentificationstatic const char* username = "username";// Password for authentificationstatic const char* password = "password";const int ledPin = 0;// --------------------------------------------------------------void setup() { Serial.begin(115200); pinMode(ledPin, OUTPUT); Serial.print("Tryingonnect to "); Serial.println(ssid); wifi_station_disconnect(); struct station_config wifi_config; memset(&wifi_config, 0, sizeof(wifi_config)); strcpy((char*)wifi_config.ssid, ssid); strcpy((char*)wifi_config.password, password); wifi_station_set_config(&wifi_config); wifi_station_set_wpa2_enterprise_auth(1); wifi_station_set_enterprise_username((uint8*)username, strlen(username)); wifi_station_set_enterprise_password((uint8*)password, strlen(password)); wifi_station_connect(); Serial.print("Status: "); Serial.println(wifi_station_get_connect_status()); // Wait for connection AND IP address from DHCP while (WiFi.status() != WL_CONNECTED) { delay(2000); Serial.println(WiFi.localIP()); } } // setup // ---------------------------void loop() { } — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <#3442>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AQC6Bt2lTqwoO0DY0aeQ4n8mYe6N_Oecks5sP4uagaJpZM4OeacB> .

[victorclaessen]

There is a bug in the ESP8266 firmware. We are waiting for ExpressIf to fix it.
#1032 (comment)

[duncandrennan]

I was able to get this working using the 2.4.0 esp8266 Arduino environment and using this code:

      struct station_config wifi_config;
      
      memset(&wifi_config, 0, sizeof(wifi_config));
      strcpy((char*)wifi_config.ssid, ssid);
      
      wifi_station_set_config(&wifi_config);
      
      wifi_station_clear_cert_key();
      wifi_station_clear_enterprise_ca_cert();
      
      wifi_station_set_wpa2_enterprise_auth(1);
      wifi_station_set_enterprise_identity((uint8*)username, strlen(username));
      wifi_station_set_enterprise_username((uint8*)username, strlen(username));
      wifi_station_set_enterprise_password((uint8*)password, strlen(password));
      
      wifi_station_connect();

Note in particular the addition of clearing the certificates and setting the identity.

[kapyaar]

@duncandrennan Have you tried it with 2.4.1? Playing with eduroam in my university, as well as another wpa2 network with user and password, I have been trying all sorts of things, including what you mentioned, and it never seems to get an IP, keeps on disconnect, scandone, wifi evt:1, etc and loops

I can try going back to 2.4.0 but just wanted to check if it indeed was the version.

[duncandrennan]

@kapyaar I had this working at a customer's premises with their WPA enterprise setup. I then tried to replicate the setup in our lab and have the ESP8266 crashing for all the different ways I can set up the RADUIS server (I'm testing with TekRADUIS on Windows).

I think (suspect) there is something with the certificates that it doesn't like in my lab setup. It looks like the server is using EAP-MS-CHAP-V2 and it is exchanging some certificates. Possibly specifying the certificates correctly on the ESP8266 would solve the problem (I'm just not sure exactly what needs to be specified).

I'm waiting for feedback on the customers exact network setup, but I think it may be EAP-PAP, which wouldn't send a certificate for authentication.

I did try with 2.4.1 but had the same issue in our lab setup.

[kapyaar]

@duncandrennan thanks very much for the info. I have ordered a router that has eap support, and I plan to test with ironwifi Radius as a service provider. Atleast this way, I could hopefully see logs on the router where as all my tests so far were blind shots into the dark as I have no access to the router side.
Also, I read on espressiff manual that ESP needs around 26 or 28k ram while on enterprise, so the crashes you see may have something to do with memory? just a thought. I will keep you posted if I get this going.

[duncandrennan]

@kapyaar I did a check on the heap memory before connecting (for this exact reason), and it was about 32k.

 Serial.print("Free heap: ");
 Serial.println(system_get_free_heap_size());

One thing I was confused about was the reset cause that it displays after the crash - it shows reset cause 2 which is a pin reset, which is definitely not the case.

One other thing: the RADUIS server logs appeared to show the the authentication was successful.

[kapyaar]

@duncandrennan ok, so that's not the issue then. My Debug looked like below. I will update once I get the EAP router .

SDK:2.2.1(cfd48f3)/Core:2.4.1/lwIP:2.0.3(STABLE-2_0_3_RELEASE/glue:arduino-2.4.1)
Connecting to UB_Secure
WPA2 ENTERPRISE VERSION: [v2.0] enable
scandone
Wifi station connect status:1
6
wifi evt: 8
wifi evt: 2
Not connected
6
scandone
state: 0 -> 2 (b0)
state: 2 -> 3 (0)
state: 3 -> 0 (4)
reconnect
wifi evt: 1
STA disconnect: 4
Not connected
6
Not connected
6
scandone
state: 0 -> 2 (b0)
state: 2 -> 3 (0)
state: 3 -> 5 (10)
add 0
aid 4
cnt
Not connected
6
Not connected
6
Not connected
6
Not connected
6
pm open,type:2 0
Not connected
6
Not connected
6
Not connected
6
Not connected
6
Not connected
6
Not connected
6
Not connected
6
Not connected
6
Not connected
6
Not connected
6
state: 5 -> 0 (2)
rm 0
pm close 7
reconnect
wifi evt: 1
STA disconnect: 204
scandone
state: 0 -> 2 (b0)
state: 2 -> 3 (0)
state: 3 -> 0 (4)
reconnect
wifi evt: 1
STA disconnect: 4
scandone
wifi evt: 1
STA disconnect: 201
Not connected
4
reconnect
Not connected
4
scandone
state: 0 -> 2 (b0)
state: 2 -> 3 (0)
state: 3 -> 5 (10)
add 0
aid 4
cnt

[duncandrennan]

@kapyaar Could you please send me the code which outputs the extra wifi debugging info from the ESP8266? I haven't looked at the events and I would like to see where the ESP8266 gets to before it crashes.

[kapyaar]

@duncandrennan #4698 I got the router, and tried it. I posted my findings in this thread too. It looks like there is definitely something with the core that is not doing its job, as when I look at the radius server logs, there is some info missing when ESP is connecting.

[edyradice]

hello guys! nothing new on this issue? i have been trying all sort of magic and mojo i found on the web, but the feather HUZZAH ESP8266 seem to not connect to the WiFi network here (EAP-PEAP)... o have this logs on the serial port...

SDK:2.2.1(cfd48f3)/Core:2.4.1/lwIP:2.0.3(STABLE-2_0_3_RELEASE/glue:arduino-2.4.1)
WPA2 ENTERPRISE VERSION: [v2.0] enable
scandone

Waiting for connection and IP Address from DHCP
..scandone
state: 0 -> 2 (b0)
state: 2 -> 3 (0)
state: 3 -> 5 (10)
add 0
aid 110
cnt 
..........pm open,type:2 0
....................state: 5 -> 0 (2)
rm 0
pm close 7
reconnect
.scandone
state: 0 -> 2 (b0)
state: 2 -> 3 (0)
state: 3 -> 5 (10)
add 0
aid 110
cnt 
..........pm open,type:2 0
...........state: 5 -> 2 (7c0)
rm 0
pm close 7
.reconnect

Did someone have an advice? i'm stuck on this since two days, trying to figure out what's wrong and reading the non os SDK2 API reference ...

Any help will be reeeally appreciated, thanks!

[kapyaar]

@edyradice Not much inputs coming from the forum as far as I can tell. Have been beating my head to the wall far too long on this. One thing you can do is to see if you can access the radius server logs and find out what is the reason for the reject

[victorclaessen]

It's probably never going to work until they fix this: https://bbs.espressif.com/viewtopic.php?f=66&t=5962&p=15165

(edit: fixed link to point to the right bug)

[edyradice]

so frustrating... it's probably some sdk issue, i have been following all their informations and examples but nothing works.... BAH! anyway, thanks for the advices and replies @kapyaar and @victorclaessen !! that was my first post in here!

[kapyaar]

@edyradice May be those of us interested parties can hold a candle vigil infront of espressif HQ :P