[Kindle Touch] Support for Enterprise WPA

[wuschel83]

Originally Posted by ixtab

The parameters look correct as far as I can tell (comparing with http://fss.plone.uni-giessen.de/fss/...upplicant.conf).

One line looks suspicious though: anonymous_identity="anonymous@uni-giessen.de"

I'm not sure if it should contain the "=" sign. Try running the script from the command line (see my second or third post) and check the output, and possibly remove the = and check again.

Good luck

I have delete the "=". And my output is:

[root@kindle root]# sh /mnt/us/extensions/wpa_eap/wpa_eap.sh /mnt/us/extensions/
wpa_eap/networks/eduroam.cfg
set_network 1 ssid eduroam
set_network 1 scan_ssid 1
set_network 1 key_mgmt WPA-EAP
set_network 1 eap TTLS
set_network 1 identity "XXXXX@uni-giessen.de"
set_network 1 anonymous_identity "anonymous@uni-giessen.de"
set_network 1 password "XXXX"
set_network 1 phase2 "auth=PAP"
set_network 1 ca_cert "/mnt/us/extensions/wpa_eap/networks/eduroam.pem"
enable_network 1
quit
wpa_cli v0.6.10
Copyright (c) 2004-2009, Jouni Malinen <j@w1.fi> and contributors

This program is free software. You can distribute it and/or modify it
under the terms of the GNU General Public License version 2.

Alternatively, this software may be distributed under the terms of the
BSD license. See README and COPYING for more details.


Selected interface 'wlan0'

Interactive mode

> OK
> OK
> OK
> OK
> OK
> OK
> OK
> OK
> OK
> OK
>

[wuschel83]

i have resolve the problem and it works fine for me:

eduroam.cfg:
ssid eduroam
scan_ssid 1
key_mgmt WPA-EAP
pairwise TKIP
group TKIP
eap PEAP
identity "XXXX@uni-giessen.de"
anonymous_identity="anonymous@uni-giessen.de"
password "XXXX"
phase1 "peaplabel=0"
phase2 "auth=MSCHAPV2"

eduroam.pem:
-----BEGIN CERTIFICATE-----
MIIDnzCCAoegAwIBAgIBJjANBgkqhkiG9w0BAQUFADBxMQswCQ YDVQQGEwJERTEc
MBoGA1UEChMTRGV1dHNjaGUgVGVsZWtvbSBBRzEfMB0GA1UECx MWVC1UZWxlU2Vj
IFRydXN0IENlbnRlcjEjMCEGA1UEAxMaRGV1dHNjaGUgVGVsZW tvbSBSb290IENB
IDIwHhcNOTkwNzA5MTIxMTAwWhcNMTkwNzA5MjM1OTAwWjBxMQ swCQYDVQQGEwJE
RTEcMBoGA1UEChMTRGV1dHNjaGUgVGVsZWtvbSBBRzEfMB0GA1 UECxMWVC1UZWxl
U2VjIFRydXN0IENlbnRlcjEjMCEGA1UEAxMaRGV1dHNjaGUgVG VsZWtvbSBSb290
IENBIDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQ CrC6M14IspFLEU
ha88EOQ5bzVdSq7d6mGNlUn0b2SjGmBmpKlAIoTZ1KXleJMOaA GtuU1cOs7TuKhC
QN/Po7qCWWqSG6wcmtoIKyUn+WkjR/Hg6yx6m/UTAtB+NHzCnjwAWav12gz1Mjwr
rFDa1sPeg5TKqAyZMg4ISFZbavva4VhYAUlfckE8FQYBjl2tqr iTtM2e66foai1S
NNs671x1Udrb8zH57nGYMsRUFUQM+ZtV7a3fGAigo4aKSe5TBY 8ZTNXeWHmb0moc
QqvF1afPaA+W5OFhmHZhyJF81j4A4pFQh+GdCuatl9Idxjp9y7 zaAzTVjlsB9WoH
txa2bkp/AgMBAAGjQjBAMB0GA1UdDgQWBBQxw3kbuvVT1xfgiXotF2wKsy udMzAP
BgNVHRMECDAGAQH/AgEFMA4GA1UdDwEB/wQEAwIBBjANBgkqhkiG9w0BAQUFAAOC
AQEAlGRZrTlk5ynrE/5aw4sTV8gEJPB0d8Bg42f76Ymmg7+Wgnxu1MM9756Abrsp
tJh6sTtU6zkXR34ajgv8HzFZMQSyzhfzLMdiNlXiItiJVbSYSK pk+tYcNthEeFpa
IzpXl/V6ME+un2pMSyuOoAPjPuCp1NJ70rOo4nI8rZ7/gFnkm0W09juwzTkZmDLl
6iFhkOQxIY40sfcvNUqFENrnijchvllj4PKFiDFT1FQUhXB59C 4Gdyd1Lx+4ivn+
xbrYNuSD7Odlt79jWvNGr4GUN9RBjNYj1h7P9WgbRGOiWrqnNV mh5XAFmw4jV5mU
Cm26OWMohpLzGITY+9HPBVZkVw==
-----END CERTIFICATE-----

[wuschel83]

Anf if you want to switch into the launcher to your home wpa2 network, you have to put this into the network folder:
HOMEnetworkname.pem
an empty pem

HOMEnetworkname.cfg:
ssid HOMEnetworkname
scan_ssid 8
key_mgmt WPA-PSK
pairwise CCMP (sometimes TKIP, try it)
group CCMP (sometimes TKIP, try it)
proto RSN
psk "YOURPASSWORD"
priority 5

[matejs]

Originally Posted by ixtab

One line looks suspicious though: anonymous_identity="anonymous@uni-giessen.de"

You are right, your config files use spaces (while wpa_supplicant uses =).
So there should be no = sign between anonymous_identity and "@..."

Anyway, my eduroam (in CZ) worked even without it.

Running 'iwlist scan' from your Kindle (or nearby Linux computer with WiFi) should give you the values for encryption ciphers, ie:

pairwise CCMP
group TKIP

Also (assuming you created eduroam.pem on Windows), check that your certificate file doesn't containt windows line endings CR LF but only Linux LF. Notepad++ can show / change them. (Edit -- > EOL conversion)

[mergen3107]

Is it possible to set up proxy server and its port?
Thank you in advance.

[ixtab]

@mergen3107: No.

You obviously didn't even understand the topic of this thread, so please stop asking.

[Mehdi]

Originally Posted by ixtab

@mergen3107: No.

You obviously didn't even understand the topic of this thread, so please stop asking.

do you know what might be needed to get this to auto-connect, or where I should even start to look to hack at?

[ixtab]

I repeat: proxy settings have absolutely nothing to do with this thread.

This thread is about establishing a network connection, which concerns OSI Layers 1 and 2 (at most, 3). Proxy settings are OSI layer 7, which is WAY out of scope for this thread.

To paraphrase:
We're talking about connecting an oven to the electricity grid. You're asking about a Pizza recipe.

Please, stop asking these questions here. They are totally off-topic. If you're seriously interested in this, open a new thread concerning proxies.

[Mehdi]

Originally Posted by ixtab

I repeat: proxy settings have absolutely nothing to do with this thread.

This thread is about establishing a network connection, which concerns OSI Layers 1 and 2 (at most, 3). Proxy settings are OSI layer 7, which is WAY out of scope for this thread.

Please, stop asking these questions here. They are totally off-topic. If you're seriously interested in this, open a new thread concerning proxies.

w/e guess I'll hack on my own..

[thatworkshop]

Originally Posted by Mehdi

do you know what might be needed to get this to auto-connect, or where I should even start to look to hack at?

I second this idea too.

And by the way, here's how I managed to connect to a WEP home network using this extension.

HomeNetwork.cfg

ssid MYSSID
scan_ssid 8
key_mgmt NONE
wep_key0 MYKEY
group WEP104
priority 5

HomeNetwork.pem
empty file

[Kozzi]

Will this work with Kindle 3 ?

[aleq]

and Kindle 4, the "non-touch"?

Thanks

[ixtab]

The contained shell script might work on other Kindles (no guarantees!), but AFAIK there is no launcher extension, so the script alone would be of limited use. I cannot develop for devices I don't have

Well anyway, I'm attaching the script, so you can see if you can get anything useful from it. Use as described in my second(?) post.

[aleq]

Thank you, ixtab.

I'll look around and study available resources beforehand. When I get confident or suicidal enough, I'll start playing with my device I'll let you know the results

[ixtab]

Just a note: this extension is probably obsolete with the newest firmware (at least for me, WPA-EAP now works out of the box).

The suggested way is to update and try the built-in method. If it works, just uninstall the extension and remove the remains in the extensions/wpa_eap folder.

In case you have trouble with the built-in method with firmware 5.1.0, post here and we'll see if it makes sense to keep maintaining this hack.