Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Error while connecting to WPA Enterprise network #509

Open
kbshal opened this issue Jan 14, 2023 · 11 comments
Open

Error while connecting to WPA Enterprise network #509

kbshal opened this issue Jan 14, 2023 · 11 comments

Comments

@kbshal
Copy link

kbshal commented Jan 14, 2023

It gives an error while trying to connect to the enterprise network

@vakshit
Copy link

vakshit commented Jan 19, 2023

how do you check for errors?
i'm having the same issue. I'm able to connect to a WPA2 network but not able to connect to enterprise network.

@martin-ger
Copy link
Owner

ESP8266 and WPA Enterprise is a pain. Think, often the certificates used by the WPA Enterprise networks are too large for the ESP8266's memory and this causes crashes. If possible, try with the ESP32 instead.

@vakshit
Copy link

vakshit commented Jan 19, 2023

my enterprise network doesn't use CA certificates. if that's what you are talking about.

@martin-ger
Copy link
Owner

What kind of authentication do you use?

@vakshit
Copy link

vakshit commented Jan 19, 2023

PEAP-MSCHAPv2. I read in the readme that something related to MSCHAPv2 is broken. Is that the issue here?

@vakshit
Copy link

vakshit commented Jan 19, 2023

image

this config after entering my username and password works well on my system.

@martin-ger
Copy link
Owner

This only means, this config doesn't check the server's certificate with a CA cert - there is the chance that you connect to a fake AP. Still the RADIUS server has a cert and sends it. See also: https://security.stackexchange.com/questions/182530/is-it-possible-for-an-802-1x-network-peap-mschapv2-to-have-no-certificate

@martin-ger
Copy link
Owner

MSCHAPv2 itself isn't a problem here as it is used inside a TLS tunnel to check the PW.

@vakshit
Copy link

vakshit commented Jan 19, 2023

Yes, there is a chance that the RADUIS server sends me a CA certificate, but i dont know a way to check it. Also, it is my institute's wifi so it's not getting connected to a fake AP.

Shall I try on an ESP32? I'm actually still unable to find out the issue. 😅

@martin-ger
Copy link
Owner

Think, you should try.

@vakshit
Copy link

vakshit commented Jan 19, 2023

the same code or this one https://github.com/martin-ger/esp32_nat_router.

edit: sorry, found out this one doesn't work.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants