WiFi Scan WPA2-EAP Authentication reported as WIFI_AUTH_OPEN (IDFGH-9885) #11202

aquaticus · 2023-04-15T17:13:31Z

Answers checklist.

I have read the documentation ESP-IDF Programming Guide and the issue is not addressed there.
I have updated my IDF branch (master or release) to the latest version and checked that the issue is present there.
I have searched the issue tracker for a similar issue and not found a similar issue.

IDF version.

v5.1-dev-4557-gf404fe96b1

Operating System used.

Linux

How did you build your project?

Command line with idf.py

If you are using Windows, please specify command line type.

None

Development Kit.

Custom Board

Power Supply used.

USB

What is the expected behavior?

When using WPA2-EAP authentication method is used and router enables 802.11w Management Frame Protection, WiFi scan reports network as WIFI_AUTH_WPA2_ENTERPRISE.

After call to esp_wifi_scan_get_ap_records() wifi_auth_mode_t member of wifi_ap_record_t should be set to WIFI_AUTH_WPA2_ENTERPRISE.

What is the actual behavior?

Instead WiFi scan authomode for the network is WIFI_AUTH_OPEN.

After call to esp_wifi_scan_get_ap_records() wifi_auth_mode_t member of wifi_ap_record_t is incorrectly set to WIFI_AUTH_OPEN.

Steps to reproduce.

On router set authentication method to WPA2-EAP
On router set 802.11w Management Frame Protection as Required or Optional
Compile and flash WiFi example scan (https://github.com/espressif/esp-idf/tree/master/examples/wifi/scan)
Check the output of the sample

Debug Logs.

I (3297) scan: SSID             test
I (3297) scan: RSSI             -43
I (3297) scan: Authmode         WIFI_AUTH_OPEN
I (3307) scan: Pairwise Cipher  WIFI_CIPHER_TYPE_CCMP
I (3307) scan: Group Cipher     WIFI_CIPHER_TYPE_CCMP
I (3317) scan: Channel          13

More Information.

The issue was recreated on:

IDF v4.4.4
IDF v5.0.1
IDF latest master

Chips: ESP32 and ESP32-C3

NOTES:

Using WPA3-EAP gives the same results
When WPA2-PSK is used Authmode is reported correctly with 802.11w frame protection
Other WiFi clients e.g. Linux, Windows, phones report auth mode properly for the same network
Test router used: OpenWrt 22.03.3 r20028-43d71ad93e; radio chipset: Qualcomm Atheros QCA9560 802.11bgn

Output from nmcli dev wifi on Linux for the same network (proper WPA2 802.1X)

test                           Infra  13    195 Mbit/s  100     ▂▄▆█  WPA2 802.1X

The text was updated successfully, but these errors were encountered:

jgujarathi · 2023-04-18T10:37:54Z

Hi @aquaticus ,
We have tried the mentioned steps with an AP configured similarly as yours and cannot seem to reproduce the same result.
Could you please provide a sniffer capture which include the beacons of the AP you are facing the issue with?

I (3420) scan: SSID jash_wpa2_ent
I (3420) scan: RSSI -25
I (3420) scan: Authmode WIFI_AUTH_WPA2_ENTERPRISE
I (3430) scan: Pairwise Cipher WIFI_CIPHER_TYPE_CCMP
I (3430) scan: Group Cipher WIFI_CIPHER_TYPE_CCMP
I (3440) scan: Channel 11

aquaticus · 2023-04-19T18:25:00Z

@jgujarathi Please find attached beacon pcap dump (unzip file).
mng_frame_enabled_beacon.zip

kapilkedawat · 2023-04-21T16:51:58Z

@aquaticus thanks for the capture, this will be corrected in next software fix.

AxelLin · 2023-04-23T09:22:24Z

Just want to check if v4.3 branch is impacted by this issue?
I'm wondering if I should wait for this fix for v4.3 branch to build my application firmware.

kapilkedawat · 2023-04-24T05:42:14Z

Yes, v4.3 branch is also impacted by this. However its only a display issue and functionality won't change.

AxelLin · 2023-04-24T08:50:29Z

Yes, v4.3 branch is also impacted by this. However its only a display issue and functionality won't change.

Our configure interface does not allow user to set enterprise settings if it was recognized as WIFI_AUTH_OPEN.
So this is not just a display issue, I have to wait for your fix.

AxelLin · 2023-05-07T09:00:28Z

@jgujarathi @kapilkedawat Any update for the fix?

AxelLin · 2023-05-15T00:48:37Z

@jgujarathi @kapilkedawat

All stable branches are impacted by this issue.
I cannot workaround the issue since I think the issue is in wifi-lib.
Could you fix it ASAP?

AxelLin · 2023-06-09T10:48:46Z

@aquaticus thanks for the capture, this will be corrected in next software fix.

There are several esp32-wifi-lib and esp-idf (including esp-idf-v4.4.5) updates recently, but still cannot find this fix in any branches.

AxelLin · 2023-06-30T00:14:38Z

@igrr @Alvin1Zhang Can someone help to fix this bug? The bug is in all release branches.

…9ed1). 1) Fix issue during split scan to allow for data tx. 2) Fix issue when parsing wpa_ie to set correct authmode when AP supports both WPA_EAP and WPA_EAP_SHA256 authmode. Closes espressif/esp-idf#11202 3) Fix an occasional crash during sta roam. 4) Add home_channel_dwell_time to wifi_scan_config_t. This allows configuration of the time spent between scanning consecutive channels for tx. 5) Adds a obss scan timer disarm when a sta disconnects from an AP

1) Fix issue during split scan to allow for data tx. 2) Fix issue when parsing wpa_ie to set correct authmode when AP supports both WPA_EAP and WPA_EAP_SHA256 authmode. Closes #11202 3) Fix an occasional crash during sta roam. 4) Add home_channel_dwell_time to wifi_scan_config_t. This allows configuration of the time spent between scanning consecutive channels for tx. 5) Adds a obss scan timer disarm when a sta disconnects from an AP

…7176) 1) Fix issue during split scan to allow for data tx. 2) Fix issue when parsing wpa_ie to set correct authmode when AP supports both WPA_EAP and WPA_EAP_SHA256 authmode. Closes espressif/esp-idf#11202 3) Fix an occasional crash during sta roam. 4) Add home_channel_dwell_time to wifi_scan_config_t. This allows configuration of the time spent between scanning consecutive channels for tx. 5) Adds a obss scan timer disarm when a sta disconnects from an AP

1) Fix issue during split scan to allow for data tx. 2) Fix issue when parsing wpa_ie to set correct authmode when AP supports both WPA_EAP and WPA_EAP_SHA256 authmode. Closes #11202 3) Fix an occasional crash during sta roam. 4) Add home_channel_dwell_time to wifi_scan_config_t. This allows configuration of the time spent between scanning consecutive channels for tx. 5) Adds a obss scan timer disarm when a sta disconnects from an AP

…6045) 1) Fix issue during split scan to allow for data tx. 2) Fix issue when parsing wpa_ie to set correct authmode when AP supports both WPA_EAP and WPA_EAP_SHA256 authmode. Closes espressif/esp-idf#11202 3) Fix an occasional crash during sta roam. 4) Add home_channel_dwell_time to wifi_scan_config_t. This allows configuration of the time spent between scanning consecutive channels for tx. 5) Adds a obss scan timer disarm when a sta disconnects from an AP

1) Fix issue during split scan to allow for data tx. 2) Fix issue when parsing wpa_ie to set correct authmode when AP supports both WPA_EAP and WPA_EAP_SHA256 authmode. Closes #11202 3) Fix an occasional crash during sta roam. 4) Add home_channel_dwell_time to wifi_scan_config_t. This allows configuration of the time spent between scanning consecutive channels for tx.

1) Fix issue during split scan to allow for data tx. 2) Fix issue when parsing wpa_ie to set correct authmode when AP supports both WPA_EAP and WPA_EAP_SHA256 authmode. Closes #11202 3) Fix an occasional crash during sta roam. 4) Add home_channel_dwell_time to wifi_scan_config_t. This allows configuration of the time spent between scanning consecutive channels for tx. 5) Adds a obss scan timer disarm when a sta disconnects from an AP

aquaticus added the Type: Bug bugs in IDF label Apr 15, 2023

github-actions bot changed the title ~~WiFi Scan WPA2-EAP Authentication reported as WIFI_AUTH_OPEN~~ WiFi Scan WPA2-EAP Authentication reported as WIFI_AUTH_OPEN (IDFGH-9885) Apr 15, 2023

espressif-bot added the Status: Opened Issue is new label Apr 15, 2023

espressif-bot assigned kapilkedawat Apr 17, 2023

espressif-bot assigned jgujarathi and unassigned kapilkedawat Apr 24, 2023

espressif-bot added Status: Done Issue is done internally Resolution: NA Issue resolution is unavailable and removed Status: Opened Issue is new labels Jul 3, 2023

espressif-bot closed this as completed in 1302c5a Jul 6, 2023

bill88t mentioned this issue Nov 2, 2023

WiFi Authmodes are being shuffled on v5.1.1 (IDFGH-11372) #12517

Closed

3 tasks

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

WiFi Scan WPA2-EAP Authentication reported as WIFI_AUTH_OPEN (IDFGH-9885) #11202

WiFi Scan WPA2-EAP Authentication reported as WIFI_AUTH_OPEN (IDFGH-9885) #11202

aquaticus commented Apr 15, 2023 •

edited

Loading

jgujarathi commented Apr 18, 2023

aquaticus commented Apr 19, 2023

kapilkedawat commented Apr 21, 2023

AxelLin commented Apr 23, 2023

kapilkedawat commented Apr 24, 2023

AxelLin commented Apr 24, 2023

AxelLin commented May 7, 2023

AxelLin commented May 15, 2023

AxelLin commented Jun 9, 2023

AxelLin commented Jun 30, 2023

WiFi Scan WPA2-EAP Authentication reported as WIFI_AUTH_OPEN (IDFGH-9885) #11202

WiFi Scan WPA2-EAP Authentication reported as WIFI_AUTH_OPEN (IDFGH-9885) #11202

Comments

aquaticus commented Apr 15, 2023 • edited Loading

Answers checklist.

IDF version.

Operating System used.

How did you build your project?

If you are using Windows, please specify command line type.

Development Kit.

Power Supply used.

What is the expected behavior?

What is the actual behavior?

Steps to reproduce.

Debug Logs.

More Information.

jgujarathi commented Apr 18, 2023

aquaticus commented Apr 19, 2023

kapilkedawat commented Apr 21, 2023

AxelLin commented Apr 23, 2023

kapilkedawat commented Apr 24, 2023

AxelLin commented Apr 24, 2023

AxelLin commented May 7, 2023

AxelLin commented May 15, 2023

AxelLin commented Jun 9, 2023

AxelLin commented Jun 30, 2023

aquaticus commented Apr 15, 2023 •

edited

Loading