Thread: WPA2 Enteprise
View Single Post
Old 09-28-2017, 04:03 PM   #4
jraffa
Enthusiast
jraffa began at the beginning.
 
Posts: 36
Karma: 10
Join Date: Sep 2017
Device: none
I have a Kindle PaperWhite Wi-Fi only.
The first letters of the serial number are: G090 KB03. This corresponds to PW3W.
Firmware version is 5.8.10 (3202090019)

Here is the wpa_supplicant configuration file of the wireless network I am trying to connect to. It's the wi-fi of the university. Personal credentials omitted.

Code:
###
# polimi-protected.conf
###
ctrl_interface=/var/run/wpa_supplicant
ctrl_interface_group=0
ap_scan=1
network={
ssid="polimi-protected"
proto=WPA RSN
key_mgmt=WPA-EAP
auth_alg=OPEN
pairwise=CCMP TKIP
eap=TLS
ca_cert="~/ca.pem"
subject_match="/C=IT/O=Politecnico di Milano/OU=POLIMI/CN=wifi.polimi.it"
private_key="~/wifiCert.p12"
private_key_passwd="[OMITTED]"
phase2="auth=MSCHAPV2"
identity="[OMITTED]"
}
Also, as you can see there is no password. But if I don't put a password in Kindle, the "connect" button is greyed out.

Here is the command pipeline that I run. I have Windows 10.

1. Download the certificate from my university website. It's in PKCS12 format
2. Run this command:
Code:
openssl pkcs12 -in wifiCert.p12 -out wifiCert.pem
The resulting PEM file contains 1 certificate and 1 encrypted private key
3. Connect Kindle to pc with integrated usb cable
4. Open explorer -> Kindle drive -> create the folder "certs"
5. Copy "wifiCert.pem" into "certs"
6. Renaming "wifiCert.pem" into "polimi_wificert.crt"
6. Unplug Kindle from PC after unmounting it
7. Now I take my Kindle device and click on: settings-> wireless -> other. I fill the form as follows:

Network name: polimi
Connection type: DHCP
Security type: WPA2
Version: Enterprise
EAP method: PEAP
Phase 2 Authentication: MSCHAPv2 (it's greyed out. I can't change it)
CA certificate: polimi_wificert.crt
User name: [the "identy" field of polimi-protected.conf]
Password: a
The password is incorrect and should be empty. But if it's empty the "connect" button is greyed out

Then I click connect and a message box "WPA2 Enterprise not supported" shows up

I attach the screenshots of the relevant part of Kindle drive folder structure
Attached Thumbnails
Click image for larger version

Name:	kindle_screen1.png
Views:	171
Size:	105.8 KB
ID:	159212   Click image for larger version

Name:	kindle_screen2.png
Views:	191
Size:	96.9 KB
ID:	159213  

Last edited by jraffa; 09-28-2017 at 04:20 PM.
jraffa is offline   Reply With Quote