Can't get WPA2 Enterprise (EAP-TLS) to connect to wifi AP using nrf5340/nrf7002/NCS2.9.0

RE: Can't get WPA2 Enterprise (EAP-TLS) to connect to wifi AP using nrf5340/nrf7002/NCS2.9.0

dejans — Mon, 21 Jul 2025 11:35:55 GMT

Hi,

[quote user="BrianW"]it gets set correctly at line 11[/quote]

Can you try to remove it and retest?

[quote user="BrianW"]I meant more the role of these parameters in the WPA2 exchange with the AP. For example, if I am connecting using a client certificate and private key, do I also need to set an anonymous identity? or rather should I be passing the 'eap_identity' field with the client user name from the certificate? When is the eap_password used?[/quote]

wifi_conn_req_param structure basically holds the connection parameters as passed by the user (in case of shell) or an application. It is used to configure supplicant that takes care of connection negotiation. eap_identity and eap_password are applicable for EAP methods which employ a second phase tunnel eg., EAP-TTLS and EAP-PEAP. In case of EAP-TLS, passing anonymous identity is optional. You can find additional details (enhanced documentation) in this commit.

Best regards,
Dejan

RE: Can't get WPA2 Enterprise (EAP-TLS) to connect to wifi AP using nrf5340/nrf7002/NCS2.9.0

BrianW — Mon, 21 Jul 2025 08:11:49 GMT

but then it gets set correctly at line 11....

RE: Can't get WPA2 Enterprise (EAP-TLS) to connect to wifi AP using nrf5340/nrf7002/NCS2.9.0

dejans — Fri, 18 Jul 2025 10:09:34 GMT

Hi,

I saw it here at line 4.

/* Defaults */
    params->band = WIFI_FREQ_BAND_UNKNOWN;
    params->channel = WIFI_CHANNEL_ANY;
    params->security = WIFI_SECURITY_TYPE_NONE;
    params->mfp = WIFI_MFP_OPTIONAL;

/* SSID */
    params->ssid =STA_SSID;
    params->ssid_length = strlen(params->ssid);

    params->security = WIFI_SECURITY_TYPE_EAP_TLS;
    params->eap_identity = STA_IDENTITY;  //"cc2-004a";
    params->eap_id_length = strlen(params->eap_identity);
    params->eap_password = STA_PASSWORD;
    params->eap_passwd_length = strlen(params->eap_password);

Best regards,
Dejan

RE: Can't get WPA2 Enterprise (EAP-TLS) to connect to wifi AP using nrf5340/nrf7002/NCS2.9.0

BrianW — Fri, 18 Jul 2025 07:01:14 GMT

[quote userid="111786" url="~/f/nordic-q-a/121864/can-t-get-wpa2-enterprise-eap-tls-to-connect-to-wifi-ap-using-nrf5340-nrf7002-ncs2-9-0/542720"]It seems that your client is unauthorized to access the network. You specified security type to be NONE using params->security = WIFI_SECURITY_TYPE_NONE.[/quote]

Ah, no, the code (line 18 in the above code samples) has:

ctx->cnx_params.security = WIFI_SECURITY_TYPE_EAP_TLS; // ==WIFI_SECURITY_TYPE_EAP ie WPA2-Enterprise with EAP_TLS authentication

Where do you see it being set to NONE?

RE: Can't get WPA2 Enterprise (EAP-TLS) to connect to wifi AP using nrf5340/nrf7002/NCS2.9.0

dejans — Thu, 17 Jul 2025 08:24:06 GMT

Hi,

It seems that your client is unauthorized to access the network. You specified security type to be NONE using params->security = WIFI_SECURITY_TYPE_NONE. What happens if you change security type to params->security = WIFI_SECURITY_TYPE_EAP_TLS?
You can find security types in wifi_security_type.

Best regards,
Dejan

RE: Can't get WPA2 Enterprise (EAP-TLS) to connect to wifi AP using nrf5340/nrf7002/NCS2.9.0

BrianW — Tue, 15 Jul 2025 16:36:34 GMT

[quote userid="111786" url="~/f/nordic-q-a/121864/can-t-get-wpa2-enterprise-eap-tls-to-connect-to-wifi-ap-using-nrf5340-nrf7002-ncs2-9-0/542556"]anon_id is a anonymous identity. It can be found in wifi_connect_req_param. You can find all parameters in wifi_mgmt.h. You can also find it in wifi_credentials_header.[/quote]

I meant more the role of these parameters in the WPA2 exchange with the AP. For example, if I am connecting using a client certificate and private key, do I also need to set an anonymous identity? or rather should I be passing the 'eap_identity' field with the client user name from the certificate? When is the eap_password used? etc etc...

Currently the code sets pretty much every field, but I suspect this is not correct....

RE: Can't get WPA2 Enterprise (EAP-TLS) to connect to wifi AP using nrf5340/nrf7002/NCS2.9.0

dejans — Tue, 15 Jul 2025 16:11:31 GMT

Hi,

anon_id is a anonymous identity. It can be found in wifi_connect_req_param. You can find all parameters in wifi_mgmt.h. You can also find it in wifi_credentials_header.

Best regards,
Dejan

RE: Can't get WPA2 Enterprise (EAP-TLS) to connect to wifi AP using nrf5340/nrf7002/NCS2.9.0

BrianW — Mon, 07 Jul 2025 09:05:42 GMT

[quote userid="92402" url="~/f/nordic-q-a/121864/can-t-get-wpa2-enterprise-eap-tls-to-connect-to-wifi-ap-using-nrf5340-nrf7002-ncs2-9-0/540984"]I also see that you used anon-id in your shell command, but not in _connect_wpa2_eap(). Do you see any difference if you add this as well?[/quote]

I will gives these changes a try when I can (stuck on another NFC issue right now).

In the meantime, can you point me to a good explainer as to what these parameters are used for in the WPA2 access point setup?

RE: Can't get WPA2 Enterprise (EAP-TLS) to connect to wifi AP using nrf5340/nrf7002/NCS2.9.0

Marte Myrvold — Tue, 01 Jul 2025 08:18:26 GMT

Hi,

Can you try adding this to _connect_wpa2_eap()?

params->eap_ver = 1;

I also see that you used anon-id in your shell command, but not in _connect_wpa2_eap(). Do you see any difference if you add this as well?

ctx->cnx_params.anon_id = anon_id;
ctx->cnx_params.aid_length = strlen(ctx->cnx_params.anon_id);

Make sure to fill anon_id with something like you did in the shell command.

If you decide to use v3.0.0, you can try to providing the certificates during runtime using the script in Run time certificates. Then connect to the network by calling _connect_wpa2_eap(). This will let you check if providing the certificates or the connection is the issue.

Do you have a computer with Linux? If so, can you try to get a sniffer log? If you need instructions for how to do this, let me know.

Best regards,
Marte

RE: Can't get WPA2 Enterprise (EAP-TLS) to connect to wifi AP using nrf5340/nrf7002/NCS2.9.0

Kenneth — Wed, 25 Jun 2025 11:52:43 GMT

Hello,

Marte is currently out, I think it's best she looks into this when she is back. I expect in a few days.

Kenneth

RE: Can't get WPA2 Enterprise (EAP-TLS) to connect to wifi AP using nrf5340/nrf7002/NCS2.9.0

BrianW — Fri, 20 Jun 2025 15:58:23 GMT

Ah ok.

Full application code is a bit large (I will try again with the wifi 'sta' sample next week), but heres the connect function:

// Here we support only EAP-TLS
static bool _connect_wpa2_eap(struct _netwifi_ctx* ctx, char* ssid, char* client_private_key_pass, char* client_identity, char* eap_pass) {
	if (_isConnected(ctx)) {
		// already connected
		log_warn("netwifi: Connection request WPA2-EAP to AP[%s] but already connected!", ssid);
		return true;
	}
	// MUST provide client private key, identity and eap_pass or no go
	if (client_private_key_pass==NULL || client_identity==NULL || eap_pass==NULL) {
		log_warn("netwifi: Connection request WPA2-EAP to AP[%s] but missing private key or identity or eap password!", ssid);
		return false;
	}
	int ret = 0;
	ctx->connect_requested = true;
	ctx->ip_ok=false;		// No IP yet

	memset(&(ctx->cnx_params), 0, sizeof(struct wifi_connect_req_params));
	ctx->cnx_params.security = WIFI_SECURITY_TYPE_EAP_TLS;	// ==WIFI_SECURITY_TYPE_EAP ie WPA2-Enterprise with EAP_TLS authentication

	// Note : this timeout does not seem to have any effect, the connect timeout in the WPA is always 10s (but we have a connect timer to shorten it if required)
	// But don't set it less than the 10s as the wpa_supp doesn't like being disconnected while its still trying...
	ctx->cnx_params.timeout = wvmgr_get_item_as_int("devcfg.wifi.connect_timeout_seconds", 30)* 1000;		//SYS_FOREVER_MS;

	/* Defaults */
	ctx->cnx_params.band = WIFI_FREQ_BAND_2_4_GHZ;		// WIFI_FREQ_BAND_UNKNOWN;
	ctx->cnx_params.channel = WIFI_CHANNEL_ANY;
	ctx->cnx_params.mfp = WIFI_MFP_OPTIONAL;

	/* SSID */
	ctx->cnx_params.ssid = ssid;
	ctx->cnx_params.ssid_length = strlen(ctx->cnx_params.ssid);

	/** Private key passwd for enterprise mode */
	ctx->cnx_params.key_passwd = client_private_key_pass;
	/** Private key passwd length, max 128 */
	ctx->cnx_params.key_passwd_length = strlen(ctx->cnx_params.key_passwd);
	// client identity is default device id
	ctx->cnx_params.eap_identity = client_identity;	// "user@example.org",
	/** eap identity length, max 64 */
	ctx->cnx_params.eap_id_length = strlen(ctx->cnx_params.eap_identity);
	/** Password string for EAP. */
	ctx->cnx_params.eap_password = eap_pass;		// "password",
	/** eap passwd length, max 128 */
	ctx->cnx_params.eap_passwd_length = strlen(ctx->cnx_params.eap_password);
	ctx->eap_conf.type = WIFI_EAP_TYPE_TLS;
	ctx->eap_conf.eap_type_phase1 = WIFI_EAP_TYPE_TLS;
	ctx->eap_conf.eap_type_phase2 = WIFI_EAP_TYPE_TLS; // No inner method needed for TLS

	if ((ret=net_mgmt(NET_REQUEST_WIFI_CONNECT, ctx->iface,
		     &ctx->cnx_params, sizeof(struct wifi_connect_req_params)))!=0) {
		log_warn("netwifi: Connection request WPA2-EAP failed (%d) to AP[%s] for [%s]; reset wifi", ret, ctx->cnx_params.ssid, ctx->cnx_params.eap_identity);
		ctx->connect_requested = false;
		_wifi_reset(ctx);
		return false;
	}
	netmgr_net_event(ctx->name, NET_EVT_CONNECT_START);

	log_cpdbg("netwifi: Connection requested WPA2-EAP to AP[%s] for [%s]", ctx->cnx_params.ssid, ctx->cnx_params.eap_identity);
	// Start the connection timer. This only stops when we get a DHCP IP address...
	wsched_timer_start(ctx->connect_timer, wvmgr_get_item_as_int("devcfg.wifi.connect_timeout_seconds", 5)*1000, 1000, _connect_timeout_cb, ctx);
	return true;
}

It sets up the certificates like this:

static uint8_t* _load_pem(char* name, uint32_t* buf_szp) {
	char* file_id = Util_sprintf("certs/wifi/%s", name);
	int fsize = usb_fs_get_file_size(file_id);
	if (fsize>0) {
		uint8_t* buf = Util_amalloc(fsize+4);
		if (buf!=NULL) {
			file_handle_t fh = usb_fs_open_file(file_id, true);
			if (fh!=NULL) {
				uint32_t blen = usb_fs_read_file(fh, buf, fsize);
				usb_fs_close_file(fh);
				if (blen==fsize) {
					*buf_szp = fsize;
					return buf;
				}
			}
			Util_afree(buf);
		}
	}
	return NULL;
}

// Need to have all 3 elements or no go
static bool _setup_ent_creds(struct _netwifi_ctx* ctx, char* ca_cert_name, char* client_cert_name, char* client_key_name) {
#ifdef CONFIG_WIFI_NM_WPA_SUPPLICANT_CRYPTO_ENTERPRISE
	if (ca_cert_name==NULL || client_cert_name==NULL || client_key_name==NULL) {
		log_warn("netwifi: Wi-Fi enterprise but missing certs config!");
		return false;
	}
	// Free old ones
	if (ctx->enterprise_creds_params.ca_cert!=NULL) {
		Util_afree(ctx->enterprise_creds_params.ca_cert);
	}
	if (ctx->enterprise_creds_params.client_cert!=NULL) {
		Util_afree(ctx->enterprise_creds_params.client_cert);
	}
	if (ctx->enterprise_creds_params.client_key!=NULL) {
		Util_afree(ctx->enterprise_creds_params.client_key);
	}
	// Ensure all null and 0 len
	memset(&ctx->enterprise_creds_params, 0, sizeof(struct wifi_enterprise_creds_params));
	// Load creds from /certs/wifi/<filename in config>
	if ((ctx->enterprise_creds_params.ca_cert = _load_pem(ca_cert_name, &ctx->enterprise_creds_params.ca_cert_len))==NULL) {
		log_warn("netwifi: no CA cert found @[%s]", ca_cert_name);
		return false;
	}
	if ((ctx->enterprise_creds_params.client_cert = _load_pem(client_cert_name, &ctx->enterprise_creds_params.client_cert_len))==NULL) {
		log_warn("netwifi: no client cert found @[%s]", client_cert_name);
		return false;
	}
	if ((ctx->enterprise_creds_params.client_key = _load_pem(client_key_name, &ctx->enterprise_creds_params.client_key_len))==NULL) {
		log_warn("netwifi: no client key found @[%s]", client_key_name);
		return false;
	}
	int retreq = net_mgmt(NET_REQUEST_WIFI_ENTERPRISE_CREDS, ctx->iface, &ctx->enterprise_creds_params, sizeof(struct wifi_enterprise_creds_params));
	if (retreq!=0) {
		log_warn("netwifi: Failed to set Wi-Fi enterprise credentials: %d", retreq);
		return false;
	}
	log_cpdbg("netwifi: set Wi-Fi enterprise credentials: %d", retreq);
	return true;
#else 
	log_warn("netwifi: Wi-Fi enterprise but not built with code!");
	return false;
#endif
}

The certificates seem to be maybe the issue for the shell (0x3d00 error)

the root CA (ca.pem)

The client key (client_key.pem)

and the client signed certificate (client.pem)

I don't see any issue with these but maybe something isn't dealt with by the mbedtls parser?

thanks!

RE: Can't get WPA2 Enterprise (EAP-TLS) to connect to wifi AP using nrf5340/nrf7002/NCS2.9.0

Marte Myrvold — Fri, 20 Jun 2025 07:28:02 GMT

Hi,

I should have clarified. I meant the app code, so I can compare it with the shell sample to see why it tries to connect while your application does not.

Best regards,
Marte

RE: Can't get WPA2 Enterprise (EAP-TLS) to connect to wifi AP using nrf5340/nrf7002/NCS2.9.0

BrianW — Wed, 18 Jun 2025 16:42:05 GMT

The project is exactly the code in NCS3.0.0 in nrf/samples/wifi/shell, which I copied to my directory wifi_shell_30.

I updated the prj.conf to add I2C support when building for my board (one of the nrf70 control IOs is on a ioexpander).

#
# Copyright (c) 2022 Nordic Semiconductor ASA
#
# SPDX-License-Identifier: LicenseRef-Nordic-5-Clause
#
#BW add I2C driver to allow ioexpander to work
CONFIG_I2C=y

CONFIG_WIFI=y
CONFIG_WIFI_NRF70=y

# WPA supplicant
CONFIG_WIFI_NM_WPA_SUPPLICANT=y
CONFIG_NET_L2_WIFI_SHELL=y

# Networking
CONFIG_NETWORKING=y
CONFIG_NET_SOCKETS=y
CONFIG_NET_LOG=y
CONFIG_NET_IPV6=y
CONFIG_NET_IPV4=y
CONFIG_NET_UDP=y
CONFIG_NET_TCP=y
CONFIG_NET_DHCPV4=y
CONFIG_DNS_RESOLVER=y

CONFIG_NET_STATISTICS=y
CONFIG_NET_STATISTICS_WIFI=y
CONFIG_NET_STATISTICS_USER_API=y

CONFIG_NET_PKT_RX_COUNT=8
CONFIG_NET_PKT_TX_COUNT=8

# Below section is the primary contributor to SRAM and is currently
# tuned for performance, but this will be revisited in the future.
CONFIG_NET_BUF_RX_COUNT=16
CONFIG_NET_BUF_TX_COUNT=16
CONFIG_NRF70_RX_NUM_BUFS=16
CONFIG_NRF70_MAX_TX_AGGREGATION=4
CONFIG_NET_TC_TX_COUNT=1

CONFIG_NET_IF_UNICAST_IPV6_ADDR_COUNT=4
CONFIG_NET_IF_MCAST_IPV6_ADDR_COUNT=5
CONFIG_NET_MAX_CONTEXTS=5
CONFIG_NET_CONTEXT_SYNC_RECV=y

CONFIG_INIT_STACKS=y

CONFIG_NET_L2_ETHERNET=y
CONFIG_NET_SHELL=y

# Memories
CONFIG_MAIN_STACK_SIZE=5200
CONFIG_SHELL_STACK_SIZE=5400

CONFIG_NET_TX_STACK_SIZE=4096
CONFIG_NET_RX_STACK_SIZE=4096

# Debugging
CONFIG_STACK_SENTINEL=y
CONFIG_DEBUG_COREDUMP=y
CONFIG_DEBUG_COREDUMP_BACKEND_LOGGING=y
CONFIG_DEBUG_COREDUMP_MEMORY_DUMP_MIN=y
CONFIG_SHELL_CMDS_RESIZE=n
#CONFIG_DEBUG=y
CONFIG_WIFI_NM_WPA_SUPPLICANT_LOG_LEVEL_INF=y

# Kernel options
CONFIG_ENTROPY_GENERATOR=y
CONFIG_REBOOT=y

# Logging
CONFIG_LOG=y
CONFIG_PRINTK=y
CONFIG_SHELL=y
CONFIG_SHELL_GETOPT=y
CONFIG_DEVICE_SHELL=y
CONFIG_POSIX_CLOCK=y
CONFIG_DATE_SHELL=y
CONFIG_NET_CONFIG_AUTO_INIT=n
CONFIG_POSIX_API=y

CONFIG_WIFI_CREDENTIALS=y
CONFIG_FLASH=y
CONFIG_FLASH_PAGE_LAYOUT=y
CONFIG_FLASH_MAP=y
CONFIG_NVS=y
CONFIG_SETTINGS=y
CONFIG_SETTINGS_NVS=y

# printing of scan results puts pressure on queues in new locking
# design in net_mgmt. So, use a higher timeout for a crowded
# environment.
CONFIG_NET_MGMT_EVENT_QUEUE_TIMEOUT=5000
CONFIG_NET_SOCKETS_POLL_MAX=12
CONFIG_NET_MGMT_EVENT_QUEUE_SIZE=16

Updated the zephyr tree with my certifs:

[quote userid="134465" url="~/f/nordic-q-a/121864/can-t-get-wpa2-enterprise-eap-tls-to-connect-to-wifi-ap-using-nrf5340-nrf7002-ncs2-9-0/538702"]ca.pem, client.pem, client_key.pem into zephyr/samples/net/wifi/test_cert[/quote]

and built as

west build --build-dir wifi_shell_30/build wifi_shell_30 -S wifi-enterprise --board <board reference> --pristine -DCONFIG_WIFI_NM_WPA_SUPPLICANT_LOG_LEVEL_DBG=y -DCONFIG_LOG_MODE_IMMEDIATE=y

RE: Can't get WPA2 Enterprise (EAP-TLS) to connect to wifi AP using nrf5340/nrf7002/NCS2.9.0

Marte Myrvold — Tue, 17 Jun 2025 13:44:22 GMT

Hi,

Can you share your current application code so I can check it on my side?

Best regards,
Marte

RE: Can't get WPA2 Enterprise (EAP-TLS) to connect to wifi AP using nrf5340/nrf7002/NCS2.9.0

BrianW — Tue, 10 Jun 2025 16:32:45 GMT

Managed to build the wifi shellsample (my iovdd gpio was on a i2c ioexpander, so I needed to enable I2C in the prj.conf - got to love those easy to debug DTS issues...).

Put my ca.pem, client.pem, client_key.pem into zephyr/samples/net/wifi/test_certs as indicated.

Then, doing a WPA2-EAP-TLS connect:

wifi connect -s kiosk_wpa2_ent -k 7 -a anon -K key_004a-2025

gave me pretty much the same logs as my app for the wpa_supp configuration (although it also configured ca_cert2/client_cert2/private_key2/private_key2_passwd).

However, then it actually went on to try to connect unlike my app code - WHY?

[00:01:10.267,303] <dbg> wpa_supp: wpa_printf_impl: wlan0: Setting scan request: 0.000000 sec
[00:01:10.276,367] <dbg> wpa_supp: wpa_printf_impl: wlan0: State: DISCONNECTED -> SCANNING
[00:01:10.285,003] <dbg> wpa_supp: wpa_printf_impl: Scan SSID - hexdump_ascii(len=14):
[00:01:10.293,273] <dbg> wpa_supp: _wpa_hexdump_ascii:
6b 69 6f 73 6b 5f 77 70 61 32 5f 65 6e 74 |kiosk_wp a2_ent
[00:01:10.307,952] <dbg> wpa_supp: wpa_printf_impl: wlan0: Include wildcard SSID in the scan request
[00:01:10.317,626] <dbg> wpa_supp: wpa_printf_impl: wlan0: Add radio work 'scan'@0x2005cd60
[00:01:10.326,416] <dbg> wpa_supp: wpa_printf_impl: wlan0: First radio work item in the queue - schedule start immediately
[00:01:10.338,012] <dbg> wpa_supp: wpa_printf_impl: wlan0: Starting radio work 'scan'@0x2005cd60 after 0.011566 second wait
[00:01:10.350,067] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: select_network, argc: 2
[00:01:10.358,245] <dbg> wpa_supp: wpa_printf_impl: wpa_drv_zep_scan2: Scan requested - scan timeout 35 seconds
[00:01:10.372,558] <dbg> wifi_supplicant: event_socket_handler: Passing message 47 to wpa_supplicant
[00:01:10.382,080] <dbg> wpa_supp: wpa_printf_impl: wlan0: Event SCAN_STARTED (47) received
[00:01:10.390,899] <dbg> wpa_supp: wpa_printf_impl: wlan0: Own scan request started a scan in 0.018341 seconds
[00:01:10.401,458] <dbg> wpa_supp: wpa_printf_impl: Received len: 24, msg_len:24 - CTRL-EVENT-SCAN-STARTED ->END
[00:01:10.412,109] <dbg> wpa_supp: wpa_printf_impl: argv[0]: select_network
[00:01:10.419,433] <dbg> wpa_supp: wpa_printf_impl: argv[1]: 0
[00:01:10.425,994] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'SELECT_NETWORK 0'
[00:01:10.435,760] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: SELECT_NETWORK id=0

Connect fails after a while, seems to be an mbedtls issue in the pk_parse_key part.. .

[00:01:17.554,260] <dbg> wpa_supp: wpa_printf_impl: EAP: Status notification: accept proposed method (param=TLS)
[00:01:17.567,077] <dbg> wpa_supp: wpa_printf_impl: EAP: Initialize selected EAP method: vendor 0 method 13 (TLS)
[00:01:17.579,864] <dbg> wpa_supp: wpa_printf_impl: TLS: using phase1 config options
[00:01:17.590,972] <err> wpa_supp: MTLS: invalid tls_disable_tlsv* params; ignoring
[00:01:17.609,710] <err> wpa_supp: MTLS: mbedtls_pk_parse_key: (-0x3d00)
[00:01:17.619,232] <inf> wpa_supp: TLS: Failed to set TLS connection parameters
[00:01:17.629,425] <inf> wpa_supp: EAP-TLS: Failed to initialize SSL.
[00:01:17.638,458] <inf> wpa_supp: wlan0: EAP: Failed to initialize EAP method: vendor 0 method 13 (TLS)
[00:01:17.650,543] <dbg> wpa_supp: wpa_printf_impl: EAP: Building EAP-Nak (requested type 13 vendor=0 method=0 not allowed)

Error code 0x3d00 is apparently:

0x3D00 PK - Invalid key tag or value

What could this be objecting to?

Full logs:

wifi scan
Scan requested

Num  | SSID                             (len) | Chan (Band)   | RSSI | Security        | BSSID             | MFP
1    | kiosk                            5     | 104  (5GHz  ) | -52  | WPA2-PSK        | 8C:FD:DE:9E:68:76 | Disable
2    | Livebox-6870                     12    | 104  (5GHz  ) | -52  | WPA2-PSK        | 8C:FD:DE:9E:68:75 | Disable
3    | kiosk_wpa2_ent                   14    | 36   (5GHz  ) | -58  | EAP-TLS         | B8:37:B2:09:1C:11 | Disable
4    | kiosk_wpa3_ent                   14    | 36   (5GHz  ) | -59  | EAP-TLS         | B8:37:B2:09:1C:12 | Optional
5    | kiosk_wpa3_per                   14    | 36   (5GHz  ) | -59  | WPA3-SAE-HNP    | B8:37:B2:09:1C:10 | Optional
6    | kiosk                            5     | 6    (2.4GHz) | -63  | WPA2-PSK        | 8C:FD:DE:9E:68:71 | Disable
7    | Livebox-6870                     12    | 6    (2.4GHz) | -63  | WPA2-PSK        | 8C:FD:DE:9E:68:70 | Disable
8    | Livebox-0490                     12    | 11   (2.4GHz) | -68  | WPA2-PSK        | 58:2F:F7:C7:9B:B8 | Optional
9    | kiosk_wpa3_per                   14    | 1    (2.4GHz) | -69  | WPA3-SAE-HNP    | B8:37:B2:09:1C:00 | Optional
10   | Livebox-0490                     12    | 100  (5GHz  ) | -70  | WPA2-PSK        | 58:2F:F7:C7:9B:B0 | Optional
11   | kiosk_wpa2_ent                   14    | 1    (2.4GHz) | -71  | EAP-TLS         | B8:37:B2:09:1C:01 | Disable
12   | Livebox-6E70                     12    | 112  (5GHz  ) | -73  | WPA2-PSK        | D4:F8:29:54:6E:75 | Disable
13   | kiosk_wpa3_ent                   14    | 1    (2.4GHz) | -73  | EAP-TLS         | B8:37:B2:09:1C:02 | Optional
14   | Livebox-7551                     12    | 52   (5GHz  ) | -74  | WPA-PSK         | 08:87:C6:04:75:52 | Disable
15   | Livebox-7551                     12    | 6    (2.4GHz) | -76  | WPA-PSK         | 08:87:C6:04:75:51 | Disable
16   | Livebox-96be                     12    | 132  (5GHz  ) | -79  | WPA-PSK         | 68:3F:7D:12:96:C3 | Disable
17   | WIFIBRG001241c95e3fIPC117        25    | 11   (2.4GHz) | -86  | WPA2-PSK        | DE:29:19:DC:F9:72 | Disable
18   | Livebox-96be                     12    | 11   (2.4GHz) | -89  | WPA-PSK         | 68:3F:7D:12:96:C2 | Disable
Scan request done
uart:~$ wifi connect -s kiosk_wpa2_ent -k 7 -a anon -K key_004a-2025
wifi connect -s kiosk_wpa2_ent -k 7 -a anon -K key_004a-2025
[00:01:08.400,115] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: remove_network, argc: 2
[00:01:08.408,935] <dbg> wpa_supp: wpa_printf_impl: argv[0]: remove_network
[00:01:08.416,290] <dbg> wpa_supp: wpa_printf_impl: argv[1]: all
[00:01:08.423,034] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'REMOVE_NETWORK all'
[00:01:08.432,983] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: REMOVE_NETWORK all
[00:01:08.441,284] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'ADD_NETWORK'
[00:01:08.450,622] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: ADD_NETWORK
[00:01:08.458,251] <dbg> wpa_supp: wpa_printf_impl: Received len: 26, msg_len:26 - CTRL-EVENT-NETWORK-ADDED 0->END
[00:01:08.469,116] <dbg> wpa_supp: wpa_printf_impl: NET added: 0
[00:01:08.475,524] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: set_network, argc: 4
[00:01:08.484,069] <dbg> wpa_supp: wpa_printf_impl: argv[0]: set_network
[00:01:08.491,149] <dbg> wpa_supp: wpa_printf_impl: argv[1]: 0
[00:01:08.497,406] <dbg> wpa_supp: wpa_printf_impl: argv[2]: ssid
[00:01:08.503,906] <dbg> wpa_supp: wpa_printf_impl: argv[3]: "kiosk_wpa2_ent"
[00:01:08.511,779] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'SET_NETWORK [REMOVED]'
[00:01:08.522,003] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: SET_NETWORK id=0 name='ssid'
[00:01:08.530,792] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: value - hexdump_ascii(len=16): [REMOVED]
[00:01:08.540,679] <dbg> wpa_supp: wpa_printf_impl: ssid - hexdump_ascii(len=14):
[00:01:08.548,522] <dbg> wpa_supp: _wpa_hexdump_ascii:
                                   6b 69 6f 73 6b 5f 77 70  61 32 5f 65 6e 74       |kiosk_wp a2_ent
[00:01:08.563,293] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: set_network, argc: 4
[00:01:08.571,838] <dbg> wpa_supp: wpa_printf_impl: argv[0]: set_network
[00:01:08.578,948] <dbg> wpa_supp: wpa_printf_impl: argv[1]: 0
[00:01:08.585,174] <dbg> wpa_supp: wpa_printf_impl: argv[2]: scan_ssid
[00:01:08.592,102] <dbg> wpa_supp: wpa_printf_impl: argv[3]: 1
[00:01:08.598,663] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'SET_NETWORK [REMOVED]'
[00:01:08.608,886] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: SET_NETWORK id=0 name='scan_ssid'
[00:01:08.618,133] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: value - hexdump_ascii(len=1): [REMOVED]
[00:01:08.627,899] <dbg> wpa_supp: wpa_printf_impl: scan_ssid=1 (0x1)
[00:01:08.634,887] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: set_network, argc: 4
[00:01:08.643,432] <dbg> wpa_supp: wpa_printf_impl: argv[0]: set_network
[00:01:08.650,512] <dbg> wpa_supp: wpa_printf_impl: argv[1]: 0
[00:01:08.656,738] <dbg> wpa_supp: wpa_printf_impl: argv[2]: key_mgmt
[00:01:08.663,574] <dbg> wpa_supp: wpa_printf_impl: argv[3]: NONE
[00:01:08.670,410] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'SET_NETWORK [REMOVED]'
[00:01:08.680,633] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: SET_NETWORK id=0 name='key_mgmt'
[00:01:08.689,788] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: value - hexdump_ascii(len=4): [REMOVED]
[00:01:08.699,584] <dbg> wpa_supp: wpa_printf_impl: key_mgmt: 0x4
[00:01:08.706,176] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: set_network, argc: 4
[00:01:08.714,721] <dbg> wpa_supp: wpa_printf_impl: argv[0]: set_network
[00:01:08.721,801] <dbg> wpa_supp: wpa_printf_impl: argv[1]: 0
[00:01:08.728,057] <dbg> wpa_supp: wpa_printf_impl: argv[2]: ieee80211w
[00:01:08.735,046] <dbg> wpa_supp: wpa_printf_impl: argv[3]: 0
[00:01:08.741,638] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'SET_NETWORK [REMOVED]'
[00:01:08.751,861] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: SET_NETWORK id=0 name='ieee80211w'
[00:01:08.761,169] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: value - hexdump_ascii(len=1): [REMOVED]
[00:01:08.770,965] <dbg> wpa_supp: wpa_printf_impl: ieee80211w=0 (0x0)
[00:01:08.778,015] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: set_network, argc: 4
[00:01:08.786,529] <dbg> wpa_supp: wpa_printf_impl: argv[0]: set_network
[00:01:08.793,640] <dbg> wpa_supp: wpa_printf_impl: argv[1]: 0
[00:01:08.799,865] <dbg> wpa_supp: wpa_printf_impl: argv[2]: proto
[00:01:08.806,427] <dbg> wpa_supp: wpa_printf_impl: argv[3]: RSN
[00:01:08.813,171] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'SET_NETWORK [REMOVED]'
[00:01:08.823,394] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: SET_NETWORK id=0 name='proto'
[00:01:08.832,305] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: value - hexdump_ascii(len=3): [REMOVED]
[00:01:08.842,071] <dbg> wpa_supp: wpa_printf_impl: proto: 0x2
[00:01:08.848,449] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: set_network, argc: 4
[00:01:08.856,964] <dbg> wpa_supp: wpa_printf_impl: argv[0]: set_network
[00:01:08.864,074] <dbg> wpa_supp: wpa_printf_impl: argv[1]: 0
[00:01:08.870,300] <dbg> wpa_supp: wpa_printf_impl: argv[2]: key_mgmt
[00:01:08.877,136] <dbg> wpa_supp: wpa_printf_impl: argv[3]: WPA-EAP
[00:01:08.884,246] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'SET_NETWORK [REMOVED]'
[00:01:08.894,470] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: SET_NETWORK id=0 name='key_mgmt'
[00:01:08.903,625] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: value - hexdump_ascii(len=7): [REMOVED]
[00:01:08.913,421] <dbg> wpa_supp: wpa_printf_impl: key_mgmt: 0x1
[00:01:08.920,043] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: set, argc: 3
[00:01:08.927,856] <dbg> wpa_supp: wpa_printf_impl: argv[0]: set
[00:01:08.934,295] <dbg> wpa_supp: wpa_printf_impl: argv[1]: openssl_ciphers
[00:01:08.941,741] <dbg> wpa_supp: wpa_printf_impl: argv[2]: "DEFAULT:!EXP:!LOW"
[00:01:08.949,890] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'SET openssl_ciphers "DEFAULT:!EXP:!LOW"'
[00:01:08.961,639] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE SET 'openssl_ciphers'='"DEFAULT:!EXP:!LOW"'
[00:01:08.971,710] <dbg> wpa_supp: wpa_printf_impl: openssl_ciphers='"DEFAULT:!EXP:!LOW"'
[00:01:08.980,377] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: set_network, argc: 4
[00:01:08.988,891] <dbg> wpa_supp: wpa_printf_impl: argv[0]: set_network
[00:01:08.996,002] <dbg> wpa_supp: wpa_printf_impl: argv[1]: 0
[00:01:09.002,227] <dbg> wpa_supp: wpa_printf_impl: argv[2]: group
[00:01:09.008,819] <dbg> wpa_supp: wpa_printf_impl: argv[3]: CCMP
[00:01:09.015,625] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'SET_NETWORK [REMOVED]'
[00:01:09.025,848] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: SET_NETWORK id=0 name='group'
[00:01:09.034,729] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: value - hexdump_ascii(len=4): [REMOVED]
[00:01:09.044,525] <dbg> wpa_supp: wpa_printf_impl: group: 0x10
[00:01:09.050,994] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: set_network, argc: 4
[00:01:09.059,509] <dbg> wpa_supp: wpa_printf_impl: argv[0]: set_network
[00:01:09.066,619] <dbg> wpa_supp: wpa_printf_impl: argv[1]: 0
[00:01:09.072,845] <dbg> wpa_supp: wpa_printf_impl: argv[2]: pairwise
[00:01:09.079,681] <dbg> wpa_supp: wpa_printf_impl: argv[3]: CCMP
[00:01:09.086,517] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'SET_NETWORK [REMOVED]'
[00:01:09.096,740] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: SET_NETWORK id=0 name='pairwise'
[00:01:09.105,895] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: value - hexdump_ascii(len=4): [REMOVED]
[00:01:09.115,692] <dbg> wpa_supp: wpa_printf_impl: pairwise: 0x10
[00:01:09.122,406] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: set_network, argc: 4
[00:01:09.130,920] <dbg> wpa_supp: wpa_printf_impl: argv[0]: set_network
[00:01:09.138,031] <dbg> wpa_supp: wpa_printf_impl: argv[1]: 0
[00:01:09.144,256] <dbg> wpa_supp: wpa_printf_impl: argv[2]: group_mgmt
[00:01:09.151,275] <dbg> wpa_supp: wpa_printf_impl: argv[3]: AES-128-CMAC
[00:01:09.158,813] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'SET_NETWORK [REMOVED]'
[00:01:09.169,036] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: SET_NETWORK id=0 name='group_mgmt'
[00:01:09.178,344] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: value - hexdump_ascii(len=12): [REMOVED]
[00:01:09.188,232] <dbg> wpa_supp: wpa_printf_impl: group_mgmt: 0x20
[00:01:09.195,098] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: set_network, argc: 4
[00:01:09.203,643] <dbg> wpa_supp: wpa_printf_impl: argv[0]: set_network
[00:01:09.210,754] <dbg> wpa_supp: wpa_printf_impl: argv[1]: 0
[00:01:09.216,979] <dbg> wpa_supp: wpa_printf_impl: argv[2]: proto
[00:01:09.223,571] <dbg> wpa_supp: wpa_printf_impl: argv[3]: RSN
[00:01:09.230,316] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'SET_NETWORK [REMOVED]'
[00:01:09.240,539] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: SET_NETWORK id=0 name='proto'
[00:01:09.249,420] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: value - hexdump_ascii(len=3): [REMOVED]
[00:01:09.259,368] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: set_network, argc: 4
[00:01:09.267,883] <dbg> wpa_supp: wpa_printf_impl: argv[0]: set_network
[00:01:09.274,993] <dbg> wpa_supp: wpa_printf_impl: argv[1]: 0
[00:01:09.281,219] <dbg> wpa_supp: wpa_printf_impl: argv[2]: eap
[00:01:09.287,628] <dbg> wpa_supp: wpa_printf_impl: argv[3]: TLS
[00:01:09.294,372] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'SET_NETWORK [REMOVED]'
[00:01:09.304,595] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: SET_NETWORK id=0 name='eap'
[00:01:09.313,323] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: value - hexdump_ascii(len=3): [REMOVED]
[00:01:09.323,272] <dbg> wpa_supp: wpa_printf_impl: eap methods - hexdump(len=16): 00 00 00 00 0d 00 00 00 00 00 00 00 00 00 00 00
[00:01:09.335,510] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: set_network, argc: 4
[00:01:09.344,055] <dbg> wpa_supp: wpa_printf_impl: argv[0]: set_network
[00:01:09.351,135] <dbg> wpa_supp: wpa_printf_impl: argv[1]: 0
[00:01:09.357,391] <dbg> wpa_supp: wpa_printf_impl: argv[2]: anonymous_identity
[00:01:09.365,081] <dbg> wpa_supp: wpa_printf_impl: argv[3]: "anon"
[00:01:09.372,100] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'SET_NETWORK [REMOVED]'
[00:01:09.382,324] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: SET_NETWORK id=0 name='anonymous_identity'
[00:01:09.392,364] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: value - hexdump_ascii(len=6): [REMOVED]
[00:01:09.402,160] <dbg> wpa_supp: wpa_printf_impl: anonymous_identity - hexdump_ascii(len=4):
[00:01:09.411,132] <dbg> wpa_supp: _wpa_hexdump_ascii:
                                   61 6e 6f 6e                                      |anon
[00:01:09.426,086] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: set_network, argc: 4
[00:01:09.434,631] <dbg> wpa_supp: wpa_printf_impl: argv[0]: set_network
[00:01:09.441,741] <dbg> wpa_supp: wpa_printf_impl: argv[1]: 0
[00:01:09.447,967] <dbg> wpa_supp: wpa_printf_impl: argv[2]: ca_cert
[00:01:09.454,742] <dbg> wpa_supp: wpa_printf_impl: argv[3]: "blob://ca_cert"
[00:01:09.462,585] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'SET_NETWORK [REMOVED]'
[00:01:09.472,839] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: SET_NETWORK id=0 name='ca_cert'
[00:01:09.481,903] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: value - hexdump_ascii(len=16): [REMOVED]
[00:01:09.491,790] <dbg> wpa_supp: wpa_printf_impl: ca_cert - hexdump_ascii(len=14):
[00:01:09.499,877] <dbg> wpa_supp: _wpa_hexdump_ascii:
                                   62 6c 6f 62 3a 2f 2f 63  61 5f 63 65 72 74       |blob://c a_cert
[00:01:09.514,831] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: set_network, argc: 4
[00:01:09.523,376] <dbg> wpa_supp: wpa_printf_impl: argv[0]: set_network
[00:01:09.530,487] <dbg> wpa_supp: wpa_printf_impl: argv[1]: 0
[00:01:09.536,712] <dbg> wpa_supp: wpa_printf_impl: argv[2]: client_cert
[00:01:09.543,823] <dbg> wpa_supp: wpa_printf_impl: argv[3]: "blob://client_cert"
[00:01:09.552,062] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'SET_NETWORK [REMOVED]'
[00:01:09.562,286] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: SET_NETWORK id=0 name='client_cert'
[00:01:09.571,716] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: value - hexdump_ascii(len=20): [REMOVED]
[00:01:09.581,604] <dbg> wpa_supp: wpa_printf_impl: client_cert - hexdump_ascii(len=18):
[00:01:09.590,057] <dbg> wpa_supp: _wpa_hexdump_ascii:
                                   62 6c 6f 62 3a 2f 2f 63  6c 69 65 6e 74 5f 63 65 |blob://c lient_ce
                                   72 74                                            |rt
[00:01:09.613,861] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: set_network, argc: 4
[00:01:09.622,375] <dbg> wpa_supp: wpa_printf_impl: argv[0]: set_network
[00:01:09.629,486] <dbg> wpa_supp: wpa_printf_impl: argv[1]: 0
[00:01:09.635,711] <dbg> wpa_supp: wpa_printf_impl: argv[2]: private_key
[00:01:09.642,822] <dbg> wpa_supp: wpa_printf_impl: argv[3]: "blob://private_key"
[00:01:09.651,031] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'SET_NETWORK [REMOVED]'
[00:01:09.661,254] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: SET_NETWORK id=0 name='private_key'
[00:01:09.670,684] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: value - hexdump_ascii(len=20): [REMOVED]
[00:01:09.680,572] <dbg> wpa_supp: wpa_printf_impl: private_key - hexdump_ascii(len=18):
[00:01:09.688,995] <dbg> wpa_supp: _wpa_hexdump_ascii:
                                   62 6c 6f 62 3a 2f 2f 70  72 69 76 61 74 65 5f 6b |blob://p rivate_k
                                   65 79                                            |ey
[00:01:09.712,799] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: set_network, argc: 4
[00:01:09.721,313] <dbg> wpa_supp: wpa_printf_impl: argv[0]: set_network
[00:01:09.728,424] <dbg> wpa_supp: wpa_printf_impl: argv[1]: 0
[00:01:09.734,649] <dbg> wpa_supp: wpa_printf_impl: argv[2]: private_key_passwd
[00:01:09.742,370] <dbg> wpa_supp: wpa_printf_impl: argv[3]: "key_004a-2025"
[00:01:09.750,152] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'SET_NETWORK [REMOVED]'
[00:01:09.760,375] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: SET_NETWORK id=0 name='private_key_passwd'
[00:01:09.770,416] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: value - hexdump_ascii(len=15): [REMOVED]
[00:01:09.780,303] <dbg> wpa_supp: wpa_printf_impl: private_key_passwd - hexdump_ascii(len=13): [REMOVED]
[00:01:09.790,374] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: set_network, argc: 4
[00:01:09.798,919] <dbg> wpa_supp: wpa_printf_impl: argv[0]: set_network
[00:01:09.806,030] <dbg> wpa_supp: wpa_printf_impl: argv[1]: 0
[00:01:09.812,255] <dbg> wpa_supp: wpa_printf_impl: argv[2]: ca_cert2
[00:01:09.819,091] <dbg> wpa_supp: wpa_printf_impl: argv[3]: "blob://ca_cert2"
[00:01:09.827,056] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'SET_NETWORK [REMOVED]'
[00:01:09.837,280] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: SET_NETWORK id=0 name='ca_cert2'
[00:01:09.846,435] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: value - hexdump_ascii(len=17): [REMOVED]
[00:01:09.856,323] <dbg> wpa_supp: wpa_printf_impl: ca_cert2 - hexdump_ascii(len=15):
[00:01:09.864,501] <dbg> wpa_supp: _wpa_hexdump_ascii:
                                   62 6c 6f 62 3a 2f 2f 63  61 5f 63 65 72 74 32    |blob://c a_cert2
[00:01:09.879,302] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: set_network, argc: 4
[00:01:09.887,847] <dbg> wpa_supp: wpa_printf_impl: argv[0]: set_network
[00:01:09.894,927] <dbg> wpa_supp: wpa_printf_impl: argv[1]: 0
[00:01:09.901,153] <dbg> wpa_supp: wpa_printf_impl: argv[2]: client_cert2
[00:01:09.908,355] <dbg> wpa_supp: wpa_printf_impl: argv[3]: "blob://client_cert2"
[00:01:09.916,656] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'SET_NETWORK [REMOVED]'
[00:01:09.926,879] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: SET_NETWORK id=0 name='client_cert2'
[00:01:09.936,401] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: value - hexdump_ascii(len=21): [REMOVED]
[00:01:09.946,289] <dbg> wpa_supp: wpa_printf_impl: client_cert2 - hexdump_ascii(len=19):
[00:01:09.954,803] <dbg> wpa_supp: _wpa_hexdump_ascii:
                                   62 6c 6f 62 3a 2f 2f 63  6c 69 65 6e 74 5f 63 65 |blob://c lient_ce
                                   72 74 32                                         |rt2
[00:01:09.978,607] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: set_network, argc: 4
[00:01:09.987,152] <dbg> wpa_supp: wpa_printf_impl: argv[0]: set_network
[00:01:09.994,232] <dbg> wpa_supp: wpa_printf_impl: argv[1]: 0
[00:01:10.000,488] <dbg> wpa_supp: wpa_printf_impl: argv[2]: private_key2
[00:01:10.007,659] <dbg> wpa_supp: wpa_printf_impl: argv[3]: "blob://private_key2"
[00:01:10.015,960] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'SET_NETWORK [REMOVED]'
[00:01:10.026,184] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: SET_NETWORK id=0 name='private_key2'
[00:01:10.035,705] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: value - hexdump_ascii(len=21): [REMOVED]
[00:01:10.045,593] <dbg> wpa_supp: wpa_printf_impl: private_key2 - hexdump_ascii(len=19):
[00:01:10.054,107] <dbg> wpa_supp: _wpa_hexdump_ascii:
                                   62 6c 6f 62 3a 2f 2f 70  72 69 76 61 74 65 5f 6b |blob://p rivate_k
                                   65 79 32                                         |ey2
[00:01:10.077,880] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: set_network, argc: 4
[00:01:10.086,425] <dbg> wpa_supp: wpa_printf_impl: argv[0]: set_network
[00:01:10.093,505] <dbg> wpa_supp: wpa_printf_impl: argv[1]: 0
[00:01:10.099,761] <dbg> wpa_supp: wpa_printf_impl: argv[2]: private_key2_passwd
[00:01:10.107,543] <dbg> wpa_supp: wpa_printf_impl: argv[3]: "(null)"
[00:01:10.114,715] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'SET_NETWORK [REMOVED]'
[00:01:10.124,938] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: SET_NETWORK id=0 name='private_key2_passwd'
[00:01:10.135,040] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: value - hexdump_ascii(len=8): [REMOVED]
[00:01:10.144,866] <dbg> wpa_supp: wpa_printf_impl: private_key2_passwd - hexdump_ascii(len=6): [REMOVED]
[00:01:10.154,937] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: set_network, argc: 4
[00:01:10.163,452] <dbg> wpa_supp: wpa_printf_impl: argv[0]: set_network
[00:01:10.170,562] <dbg> wpa_supp: wpa_printf_impl: argv[1]: 0
[00:01:10.176,788] <dbg> wpa_supp: wpa_printf_impl: argv[2]: ieee80211w
[00:01:10.183,807] <dbg> wpa_supp: wpa_printf_impl: argv[3]: 1
[00:01:10.190,368] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'SET_NETWORK [REMOVED]'
[00:01:10.200,592] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: SET_NETWORK id=0 name='ieee80211w'
[00:01:10.209,899] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: value - hexdump_ascii(len=1): [REMOVED]
[00:01:10.219,726] <dbg> wpa_supp: wpa_printf_impl: ieee80211w=1 (0x1)
[00:01:10.226,745] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: enable_network, argc: 2
[00:01:10.235,534] <dbg> wpa_supp: wpa_printf_impl: argv[0]: enable_network
[00:01:10.242,889] <dbg> wpa_supp: wpa_printf_impl: argv[1]: 0
[00:01:10.249,450] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'ENABLE_NETWORK 0'
[00:01:10.259,246] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: ENABLE_NETWORK id=0
[00:01:10.267,303] <dbg> wpa_supp: wpa_printf_impl: wlan0: Setting scan request: 0.000000 sec
[00:01:10.276,367] <dbg> wpa_supp: wpa_printf_impl: wlan0: State: DISCONNECTED -> SCANNING
[00:01:10.285,003] <dbg> wpa_supp: wpa_printf_impl: Scan SSID - hexdump_ascii(len=14):
[00:01:10.293,273] <dbg> wpa_supp: _wpa_hexdump_ascii:
                                   6b 69 6f 73 6b 5f 77 70  61 32 5f 65 6e 74       |kiosk_wp a2_ent
[00:01:10.307,952] <dbg> wpa_supp: wpa_printf_impl: wlan0: Include wildcard SSID in the scan request
[00:01:10.317,626] <dbg> wpa_supp: wpa_printf_impl: wlan0: Add radio work 'scan'@0x2005cd60
[00:01:10.326,416] <dbg> wpa_supp: wpa_printf_impl: wlan0: First radio work item in the queue - schedule start immediately
[00:01:10.338,012] <dbg> wpa_supp: wpa_printf_impl: wlan0: Starting radio work 'scan'@0x2005cd60 after 0.011566 second wait
[00:01:10.350,067] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: select_network, argc: 2
[00:01:10.358,245] <dbg> wpa_supp: wpa_printf_impl: wpa_drv_zep_scan2: Scan requested - scan timeout 35 seconds
[00:01:10.372,558] <dbg> wifi_supplicant: event_socket_handler: Passing message 47 to wpa_supplicant
[00:01:10.382,080] <dbg> wpa_supp: wpa_printf_impl: wlan0: Event SCAN_STARTED (47) received
[00:01:10.390,899] <dbg> wpa_supp: wpa_printf_impl: wlan0: Own scan request started a scan in 0.018341 seconds
[00:01:10.401,458] <dbg> wpa_supp: wpa_printf_impl: Received len: 24, msg_len:24 - CTRL-EVENT-SCAN-STARTED ->END
[00:01:10.412,109] <dbg> wpa_supp: wpa_printf_impl: argv[0]: select_network
[00:01:10.419,433] <dbg> wpa_supp: wpa_printf_impl: argv[1]: 0
[00:01:10.425,994] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'SELECT_NETWORK 0'
[00:01:10.435,760] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: SELECT_NETWORK id=0
[00:01:10.443,847] <dbg> wpa_supp: wpa_printf_impl: wlan0: Setting scan request: 0.000000 sec
[00:01:10.452,911] <dbg> wpa_supp: wpa_printf_impl: wlan0: Already scanning - Reschedule the incoming scan req
[00:01:10.463,348] <dbg> wpa_supp: wpa_printf_impl: wlan0: Setting scan request: 1.000000 sec
Connection requested
[00:01:11.472,412] <dbg> wpa_supp: wpa_printf_impl: wlan0: Already scanning - Reschedule the incoming scan req
[00:01:11.485,015] <dbg> wpa_supp: wpa_printf_impl: wlan0: Setting scan request: 1.000000 sec
[00:01:12.496,276] <dbg> wpa_supp: wpa_printf_impl: wlan0: Already scanning - Reschedule the incoming scan req
[00:01:12.508,880] <dbg> wpa_supp: wpa_printf_impl: wlan0: Setting scan request: 1.000000 sec
[00:01:13.520,141] <dbg> wpa_supp: wpa_printf_impl: wlan0: Already scanning - Reschedule the incoming scan req
[00:01:13.532,745] <dbg> wpa_supp: wpa_printf_impl: wlan0: Setting scan request: 1.000000 sec
[00:01:14.544,006] <dbg> wpa_supp: wpa_printf_impl: wlan0: Already scanning - Reschedule the incoming scan req
[00:01:14.556,610] <dbg> wpa_supp: wpa_printf_impl: wlan0: Setting scan request: 1.000000 sec
[00:01:14.813,446] <dbg> wifi_supplicant: event_socket_handler: Passing message 3 to wpa_supplicant
[00:01:14.825,042] <dbg> wpa_supp: wpa_printf_impl: wlan0: Event SCAN_RESULTS (3) received
[00:01:14.835,906] <dbg> wpa_supp: wpa_printf_impl: wlan0: Scan completed in 4.445007 seconds
[00:01:14.850,830] <dbg> wpa_supp: wpa_printf_impl: Sorted scan results
[00:01:14.860,076] <dbg> wpa_supp: wpa_printf_impl: b8:37:b2:09:1c:11 ssid=kiosk_wpa2_ent freq=5180 qual=0 noise=-92~ level=-58 snr=34* flags=0xb age=3613 est=336376
[00:01:14.879,119] <dbg> wpa_supp: wpa_printf_impl: IEs - hexdump(len=251): 00 0e 6b 69 6f 73 6b 5f 77 70 61 32 5f 65 6e 74 01 08 8c 12 98 24 b0 48 60 6c 03 01 24 07 0c 46 52 20 24 08 17 64 0b 1e 95 05 0e 20 01 00 23 02 12 00 30 14 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f ac 01 28 00 0b 05 00 00 0a
[00:01:14.908,843] <dbg> wpa_supp: wpa_printf_impl: b8:37:b2:09:1c:01 ssid=kiosk_wpa2_ent freq=2412 qual=0 noise=-89~ level=-72 snr=17 flags=0xb age=4480 est=47666
[00:01:14.927,551] <dbg> wpa_supp: wpa_printf_impl: IEs - hexdump(len=228): 00 0e 6b 69 6f 73 6b 5f 77 70 61 32 5f 65 6e 74 01 08 82 84 0b 16 24 30 48 6c 03 01 01 2a 01 00 32 04 0c 12 18 60 30 14 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f ac 01 28 00 0b 05 00 00 26 6c 6b 2d 1a ad 09 17 ff ff 00 00 00
[00:01:14.957,244] <dbg> wpa_supp: wpa_printf_impl: wlan0: BSS: Start scan result update 1
[00:01:14.968,261] <dbg> wpa_supp: wpa_printf_impl: wlan0: BSS: Add new id 0 BSSID b8:37:b2:09:1c:11 SSID 'kiosk_wpa2_ent' freq 5180
[00:01:14.983,062] <dbg> wpa_supp: wpa_printf_impl: wlan0: BSS: Add new id 1 BSSID b8:37:b2:09:1c:01 SSID 'kiosk_wpa2_ent' freq 2412
[00:01:14.997,619] <dbg> wpa_supp: wpa_printf_impl: BSS: last_scan_res_used=2/32
[00:01:15.007,598] <dbg> wpa_supp: wpa_printf_impl: wlan0: New scan results available (own=1 ext=0)
[00:01:15.019,378] <dbg> wpa_supp: wpa_printf_impl: wlan0: Radio work 'scan'@0x2005cd60 done in 4.681366 seconds
[00:01:15.032,165] <dbg> wpa_supp: wpa_printf_impl: wlan0: radio_work_free('scan'@0x2005cd60): num_active_works --> 0
[00:01:15.045,379] <dbg> wpa_supp: wpa_printf_impl: wlan0: Scan results matching the currently selected network
[00:01:15.058,135] <dbg> wpa_supp: wpa_printf_impl: IEEE 802.11 element parse ignored unknown element (id=7 elen=12)
[00:01:15.071,197] <dbg> wpa_supp: wpa_printf_impl: IEEE 802.11 element parse ignored unknown element (id=32 elen=1)
[00:01:15.084,289] <dbg> wpa_supp: wpa_printf_impl: IEEE 802.11 element parse ignored unknown element (id=35 elen=2)
[00:01:15.097,381] <dbg> wpa_supp: wpa_printf_impl: IEEE 802.11 element parse ignored unknown element (id=11 elen=5)
[00:01:15.110,443] <dbg> wpa_supp: wpa_printf_impl: IEEE 802.11 element parse ignored unknown element (id=195 elen=4)
[00:01:15.123,626] <dbg> wpa_supp: wpa_printf_impl: IEEE 802.11 element parsing ignored unknown element extension (ext_id=38 elen=13)
[00:01:15.138,153] <dbg> wpa_supp: wpa_printf_impl: wlan0: MLD: No Multi-Link element
[00:01:15.148,681] <dbg> wpa_supp: wpa_printf_impl: wlan0: 0: b8:37:b2:09:1c:11 freq=5180 level=-58 snr=34 est_throughput=336376
[00:01:15.162,902] <dbg> wpa_supp: wpa_printf_impl: IEEE 802.11 element parse ignored unknown element (id=11 elen=5)
[00:01:15.175,994] <dbg> wpa_supp: wpa_printf_impl: IEEE 802.11 element parse ignored unknown element (id=74 elen=14)
[00:01:15.189,147] <dbg> wpa_supp: wpa_printf_impl: IEEE 802.11 element parsing ignored unknown element extension (ext_id=38 elen=13)
[00:01:15.203,704] <dbg> wpa_supp: wpa_printf_impl: wlan0: MLD: No Multi-Link element
[00:01:15.214,233] <dbg> wpa_supp: wpa_printf_impl: wlan0: 1: b8:37:b2:09:1c:01 freq=2412 level=-72 snr=17 est_throughput=47666
[00:01:15.228,302] <dbg> wpa_supp: wpa_printf_impl: wlan0: Selecting BSS from priority group 0
[00:01:15.239,654] <dbg> wpa_supp: wpa_printf_impl: wlan0: 0: b8:37:b2:09:1c:11 ssid='kiosk_wpa2_ent' wpa_ie_len=0 rsn_ie_len=20 caps=0x111 level=-58 freq=5180
[00:01:15.256,622] <dbg> wpa_supp: wpa_printf_impl: wlan0:    selected based on RSN IE
[00:01:15.267,150] <dbg> wpa_supp: wpa_printf_impl: IEEE 802.11 element parse ignored unknown element (id=7 elen=12)
[00:01:15.280,212] <dbg> wpa_supp: wpa_printf_impl: IEEE 802.11 element parse ignored unknown element (id=32 elen=1)
[00:01:15.293,304] <dbg> wpa_supp: wpa_printf_impl: IEEE 802.11 element parse ignored unknown element (id=35 elen=2)
[00:01:15.306,365] <dbg> wpa_supp: wpa_printf_impl: IEEE 802.11 element parse ignored unknown element (id=11 elen=5)
[00:01:15.319,427] <dbg> wpa_supp: wpa_printf_impl: IEEE 802.11 element parse ignored unknown element (id=195 elen=4)
[00:01:15.332,611] <dbg> wpa_supp: wpa_printf_impl: IEEE 802.11 element parsing ignored unknown element extension (ext_id=38 elen=13)
[00:01:15.347,167] <dbg> wpa_supp: wpa_printf_impl: wlan0: MLD: No Multi-Link element
[00:01:15.357,635] <dbg> wpa_supp: wpa_printf_impl: wlan0:    selected BSS b8:37:b2:09:1c:11 ssid='kiosk_wpa2_ent'
[00:01:15.370,849] <dbg> wpa_supp: wpa_printf_impl: wlan0: Considering connect request: reassociate: 1  selected: b8:37:b2:09:1c:11  bssid: 00:00:00:00:00:00  pending: 00:00:00:00:00:00  wpa_state: SCANNING  ssid=0x2005bdf0  current_ssid=0x2005bdf0
[00:01:15.395,416] <dbg> wpa_supp: wpa_printf_impl: wlan0: Request association with b8:37:b2:09:1c:11
[00:01:15.407,257] <dbg> wpa_supp: wpa_printf_impl: wlan0: No ongoing scan/p2p-scan found to abort
[00:01:15.418,823] <dbg> wpa_supp: wpa_printf_impl: wlan0: Add radio work 'sme-connect'@0x2005cd00
[00:01:15.430,389] <dbg> wpa_supp: wpa_printf_impl: wlan0: First radio work item in the queue - schedule start immediately
[00:01:15.444,030] <dbg> wpa_supp: wpa_printf_impl: RSN: Ignored PMKID candidate without preauth flag
[00:01:15.455,780] <dbg> wpa_supp: wpa_printf_impl: RSN: Ignored PMKID candidate without preauth flag
[00:01:15.467,742] <dbg> wpa_supp: wpa_printf_impl: wlan0: Starting radio work 'sme-connect'@0x2005cd00 after 0.037323 second wait
[00:01:15.482,086] <dbg> wpa_supp: wpa_printf_impl: wlan0: WPA: clearing own WPA/RSN IE
[00:01:15.492,645] <dbg> wpa_supp: wpa_printf_impl: wlan0: RSN: clearing own RSNXE
[00:01:15.502,807] <dbg> wpa_supp: wpa_printf_impl: wlan0: Automatic auth_alg selection: 0x1
[00:01:15.513,854] <dbg> wpa_supp: wpa_printf_impl: RSN: PMKSA cache search - network_ctx=0x2005bdf0 try_opportunistic=0 akmp=0x0
[00:01:15.528,045] <dbg> wpa_supp: wpa_printf_impl: RSN: Search for BSSID b8:37:b2:09:1c:11
[00:01:15.538,909] <dbg> wpa_supp: wpa_printf_impl: RSN: No PMKSA cache entry found
[00:01:15.549,194] <dbg> wpa_supp: wpa_printf_impl: wlan0: RSN: using IEEE 802.11i/D9.0
[00:01:15.559,844] <dbg> wpa_supp: wpa_printf_impl: wlan0: WPA: Selected cipher suites: group 16 pairwise 16 key_mgmt 1 proto 2
[00:01:15.573,913] <dbg> wpa_supp: wpa_printf_impl: wlan0: WPA: Selected mgmt group cipher 32
[00:01:15.585,052] <dbg> wpa_supp: wpa_printf_impl: wlan0: WPA: clearing AP WPA IE
[00:01:15.595,336] <dbg> wpa_supp: wpa_printf_impl: WPA: set AP RSN IE - hexdump(len=22): 30 14 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f ac 01 28 00
[00:01:15.611,816] <dbg> wpa_supp: wpa_printf_impl: wlan0: WPA: clearing AP RSNXE
[00:01:15.621,887] <dbg> wpa_supp: wpa_printf_impl: wlan0: RSN: Clearing AP RSNE Override element
[00:01:15.633,331] <dbg> wpa_supp: wpa_printf_impl: wlan0: RSN: Clearing AP RSNE Override 2 element
[00:01:15.644,989] <dbg> wpa_supp: wpa_printf_impl: wlan0: RSN: Clearing AP RSNXE Override element
[00:01:15.656,585] <dbg> wpa_supp: wpa_printf_impl: wlan0: WPA: AP group 0x10 network profile group 0x10; available group 0x10
[00:01:15.670,532] <dbg> wpa_supp: wpa_printf_impl: wlan0: WPA: using GTK CCMP
[00:01:15.680,389] <dbg> wpa_supp: wpa_printf_impl: wlan0: WPA: AP pairwise 0x10 network profile pairwise 0x10; available pairwise 0x10
[00:01:15.695,129] <dbg> wpa_supp: wpa_printf_impl: wlan0: WPA: using PTK CCMP
[00:01:15.704,986] <dbg> wpa_supp: wpa_printf_impl: wlan0: WPA: AP key_mgmt 0x1 network profile key_mgmt 0x1; available key_mgmt 0x1
[00:01:15.719,482] <dbg> wpa_supp: wpa_printf_impl: wlan0: WPA: using KEY_MGMT 802.1X
[00:01:15.729,980] <dbg> wpa_supp: wpa_printf_impl: wlan0: WPA: AP mgmt_group_cipher 0x20 network profile mgmt_group_cipher 0x20; available mgmt_group_cipher 0x0
[00:01:15.746,978] <dbg> wpa_supp: wpa_printf_impl: wlan0: WPA: not using MGMT group cipher
[00:01:15.758,056] <dbg> wpa_supp: wpa_printf_impl: WPA: Set own WPA IE default - hexdump(len=22): 30 14 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f ac 01 8c 00
[00:01:15.775,299] <dbg> wpa_supp: wpa_printf_impl: RSN: Set own RSNXE default - hexdump(len=0):0▒PuTTY ▒▒PuTTY
[00:01:15.787,414] <dbg> wpa_supp: wpa_printf_impl: WPA: No current PMKSA - clear PMK
[00:01:15.797,821] <dbg> wpa_supp: wpa_printf_impl: RRM: Determining whether RRM can be used - device support: 0x50
[00:01:15.810,791] <dbg> wpa_supp: wpa_printf_impl: RRM: No RRM in network
[00:01:15.820,281] <dbg> wpa_supp: wpa_printf_impl: EAPOL: External notification - EAP success=0
[00:01:15.831,604] <dbg> wpa_supp: wpa_printf_impl: EAPOL: External notification - EAP fail=0
[00:01:15.842,681] <dbg> wpa_supp: wpa_printf_impl: EAPOL: External notification - portControl=Auto
[00:01:15.854,339] <dbg> wpa_supp: wpa_printf_impl: wlan0: Cancelling scan request
[00:01:15.864,593] <inf> wpa_supp: wlan0: SME: Trying to authenticate with b8:37:b2:09:1c:11 (SSID='kiosk_wpa2_ent' freq=5180 MHz)
[00:01:15.878,906] <dbg> wpa_supp: wpa_printf_impl: EAPOL: External notification - portValid=0
[00:01:15.890,106] <dbg> wpa_supp: wpa_printf_impl: wlan0: State: SCANNING -> AUTHENTICATING
[00:01:15.911,804] <dbg> wpa_supp: wpa_printf_impl: Received len: 40, msg_len:40 - CTRL-EVENT-BSS-ADDED 0 b8:37:b2:09:1c:11->END
[00:01:15.926,025] <dbg> wpa_supp: wpa_printf_impl: Received len: 40, msg_len:40 - CTRL-EVENT-BSS-ADDED 1 b8:37:b2:09:1c:01->END
[00:01:15.940,216] <dbg> wpa_supp: wpa_printf_impl: Received len: 24, msg_len:24 - CTRL-EVENT-SCAN-RESULTS ->END
[00:01:15.953,063] <dbg> wpa_supp: wpa_printf_impl: Received len: 88, msg_len:88 - SME: Trying to authenticate with b8:37:b2:09:1c:11 (SSID='kiosk_wpa2_ent' freq=5180 MHz)->END
[00:01:16.266,174] <dbg> wifi_supplicant: event_socket_handler: Passing message 10 to wpa_supplicant
[00:01:16.277,862] <dbg> wpa_supp: wpa_printf_impl: wlan0: Event AUTH (10) received
[00:01:16.288,208] <dbg> wpa_supp: wpa_printf_impl: wlan0: SME: Authentication response: peer=b8:37:b2:09:1c:11 auth_type=0 auth_transaction=2 status_code=0
[00:01:16.304,748] <dbg> wpa_supp: wpa_printf_impl: SME: Authentication response IEs - hexdump(len=0): [NULL]
[00:01:16.317,413] <dbg> wpa_supp: wpa_printf_impl: SME: Association Request IEs - hexdump(len=22): 30 14 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f ac 01 8c 00
[00:01:16.334,869] <inf> wpa_supp: wlan0: Trying to associate with b8:37:b2:09:1c:11 (SSID='kiosk_wpa2_ent' freq=5180 MHz)
[00:01:16.348,510] <dbg> wpa_supp: wpa_printf_impl: wlan0: State: AUTHENTICATING -> ASSOCIATING
[00:01:16.359,954] <dbg> wpa_supp: wpa_printf_impl: WPA: set own WPA/RSN IE - hexdump(len=22): 30 14 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f ac 01 8c 00
[00:01:16.376,861] <dbg> wpa_supp: wpa_printf_impl: wlan0: RSN: clearing own RSNXE
[00:01:16.392,242] <dbg> wpa_supp: wpa_printf_impl: Received len: 80, msg_len:80 - Trying to associate with b8:37:b2:09:1c:11 (SSID='kiosk_wpa2_ent' freq=5180 MHz)->END
[00:01:16.412,109] <dbg> wifi_supplicant: event_socket_handler: Passing message 0 to wpa_supplicant
[00:01:16.426,300] <dbg> wpa_supp: wpa_printf_impl: wlan0: Event ASSOC (0) received
[00:01:16.436,553] <dbg> wpa_supp: wpa_printf_impl: wlan0: Association info event
[00:01:16.448,089] <dbg> wpa_supp: wpa_printf_impl: req_ies - hexdump(len=215): 00 0e 6b 69 6f 73 6b 5f 77 70 61 32 5f 65 6e 74 01 08 0c 12 18 24 30 48 60 6c 21 02 00 17 5a 03 24 01 00 24 38 24 01 28 01 2c 01 30 01 34 01 38 01 3c 01 40 01 64 01 68 01 6c 01 70 01 74 01 78 01 7c 01 80 01 84 01 88 01 8c 01 90
[00:01:16.478,942] <dbg> wpa_supp: wpa_printf_impl: resp_ies - hexdump(len=176): 01 08 8c 12 98 24 b0 48 60 6c 2d 1a ef 09 17 ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3d 16 24 05 16 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7f 0a 04 00 08 00 00 00 00 40 00 40 bf 0
[00:01:16.508,636] <dbg> wpa_supp: wpa_printf_impl: IEEE 802.11 element parsing ignored unknown element extension (ext_id=38 elen=13)
[00:01:16.523,223] <dbg> wpa_supp: wpa_printf_impl: IEEE 802.11 element parsing ignored unknown element extension (ext_id=38 elen=13)
[00:01:16.537,780] <dbg> wpa_supp: wpa_printf_impl: wlan0: freq=5180 MHz
[00:01:16.547,302] <dbg> wpa_supp: wpa_printf_impl: WPA: set own WPA/RSN IE - hexdump(len=22): 30 14 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f ac 01 8c 00
[00:01:16.564,208] <dbg> wpa_supp: wpa_printf_impl: wlan0: RSN: clearing own RSNXE
[00:01:16.574,371] <dbg> wpa_supp: wpa_printf_impl: wlan0: State: ASSOCIATING -> ASSOCIATED
[00:01:16.585,357] <dbg> wpa_supp: wpa_printf_impl: wlan0: Associated to a new BSS: BSSID=b8:37:b2:09:1c:11
[00:01:16.597,656] <dbg> wpa_supp: wpa_printf_impl: wpa_drv_zep_get_ssid: SSID size: 14
[00:01:16.608,215] <dbg> wpa_supp: wpa_printf_impl: wpa_drv_zep_get_ssid: SSID size: 14
[00:01:16.618,835] <inf> wpa_supp: wlan0: Associated with b8:37:b2:09:1c:11
[00:01:16.628,417] <dbg> wpa_supp: wpa_printf_impl: wlan0: WPA: Association event - clear replay counter
[00:01:16.640,472] <dbg> wpa_supp: wpa_printf_impl: wlan0: WPA: Clear old PTK
[00:01:16.650,726] <dbg> wpa_supp: wpa_printf_impl: EAPOL: External notification - portEnabled=0
[00:01:16.662,048] <dbg> wpa_supp: wpa_printf_impl: EAPOL: External notification - portValid=0
[00:01:16.673,217] <dbg> wpa_supp: wpa_printf_impl: EAPOL: External notification - portEnabled=1
[00:01:16.684,539] <dbg> wpa_supp: wpa_printf_impl: EAPOL: SUPP_PAE entering state CONNECTING
[00:01:16.695,617] <dbg> wpa_supp: wpa_printf_impl: EAPOL: enable timer tick
[00:01:16.705,261] <dbg> wpa_supp: wpa_printf_impl: EAPOL: SUPP_BE entering state IDLE
[00:01:16.715,728] <dbg> wpa_supp: wpa_printf_impl: EAP: EAP entering state INITIALIZE
[00:01:16.726,196] <dbg> wpa_supp: wpa_printf_impl: EAP: EAP entering state IDLE
[00:01:16.736,236] <dbg> wpa_supp: wpa_printf_impl: wlan0: Setting authentication timeout: 10 sec 0 usec
[00:01:16.748,291] <dbg> wpa_supp: wpa_printf_impl: wlan0: Cancelling scan request
[00:01:16.758,453] <inf> wpa_supp: wlan0: CTRL-EVENT-SUBNET-STATUS-UPDATE status=0
[00:01:16.768,798] <dbg> wpa_supp: wpa_printf_impl: wlan0: RX EAPOL from b8:37:b2:09:1c:11
[00:01:16.779,693] <dbg> wpa_supp: wpa_printf_impl: RX EAPOL - hexdump(len=9): 01 00 00 05 01 01 00 05 01
[00:01:16.791,839] <dbg> wpa_supp: wpa_printf_impl: wlan0: Setting authentication timeout: 70 sec 0 usec
[00:01:16.803,894] <dbg> wpa_supp: wpa_printf_impl: EAPOL: Received EAP-Packet frame
[00:01:16.814,178] <dbg> wpa_supp: wpa_printf_impl: EAPOL: SUPP_PAE entering state RESTART
[00:01:16.825,012] <dbg> wpa_supp: wpa_printf_impl: EAP: EAP entering state INITIALIZE
[00:01:16.835,479] <dbg> wpa_supp: wpa_printf_impl: EAP: EAP entering state IDLE
[00:01:16.845,458] <dbg> wpa_supp: wpa_printf_impl: EAPOL: SUPP_PAE entering state AUTHENTICATING
[00:01:16.856,872] <dbg> wpa_supp: wpa_printf_impl: EAPOL: SUPP_BE entering state REQUEST
[00:01:16.867,584] <dbg> wpa_supp: wpa_printf_impl: EAPOL: getSuppRsp
[00:01:16.876,617] <dbg> wpa_supp: wpa_printf_impl: EAP: EAP entering state RECEIVED
[00:01:16.887,084] <dbg> wpa_supp: wpa_printf_impl: EAP: Received EAP-Request id=1 method=1 vendor=0 vendorMethod=0
[00:01:16.900,024] <dbg> wpa_supp: wpa_printf_impl: EAP: EAP entering state IDENTITY
[00:01:16.910,400] <inf> wpa_supp: wlan0: CTRL-EVENT-EAP-STARTED EAP authentication started
[00:01:16.921,325] <dbg> wpa_supp: wpa_printf_impl: EAP: Status notification: started (param=)
[00:01:16.932,556] <dbg> wpa_supp: wpa_printf_impl: EAP: EAP-Request Identity data - hexdump_ascii(len=0):
[00:01:16.944,732] <dbg> wpa_supp: _wpa_hexdump_ascii:
[00:01:16.952,545] <dbg> wpa_supp: wpa_printf_impl: EAP: using anonymous identity - hexdump_ascii(len=4):
[00:01:16.964,660] <dbg> wpa_supp: _wpa_hexdump_ascii:
                                   61 6e 6f 6e                                      |anon
[00:01:16.981,475] <dbg> wpa_supp: wpa_printf_impl: EAP: EAP entering state SEND_RESPONSE
[00:01:16.992,218] <dbg> wpa_supp: wpa_printf_impl: EAP: EAP entering state IDLE
[00:01:17.002,166] <dbg> wpa_supp: wpa_printf_impl: EAPOL: SUPP_BE entering state RESPONSE
[00:01:17.013,000] <dbg> wpa_supp: wpa_printf_impl: EAPOL: txSuppRsp
[00:01:17.021,942] <dbg> wpa_supp: wpa_printf_impl: TX EAPOL: dst=b8:37:b2:09:1c:11
[00:01:17.032,226] <dbg> wpa_supp: wpa_printf_impl: TX EAPOL - hexdump(len=13): 01 00 00 09 02 01 00 09 01 61 6e 6f 6e
[00:01:17.045,776] <dbg> wpa_supp: wpa_printf_impl: EAPOL: SUPP_BE entering state RECEIVE
[00:01:17.057,006] <dbg> wpa_supp: wpa_printf_impl: Received len: 33, msg_len:33 - Associated with b8:37:b2:09:1c:11->END
[00:01:17.071,014] <dbg> wpa_supp: wpa_printf_impl: Received len: 40, msg_len:40 - CTRL-EVENT-SUBNET-STATUS-UPDATE status=0->END
[00:01:17.085,144] <dbg> wpa_supp: wpa_printf_impl: Event not supported: CTRL-EVENT-SUBNET-STATUS-UPDATE status=0
[00:01:17.097,991] <dbg> wpa_supp: wpa_printf_impl: Received len: 49, msg_len:49 - CTRL-EVENT-EAP-STARTED EAP authentication started->END
[00:01:17.112,915] <dbg> wpa_supp: wpa_printf_impl: Event not supported: CTRL-EVENT-EAP-STARTED EAP authentication started
[00:01:17.126,556] <dbg> wpa_supp: wpa_printf_impl: Received len: 51, msg_len:51 - CTRL-EVENT-EAP-STATUS status='started' parameter=''->END
[00:01:17.141,662] <dbg> wpa_supp: wpa_printf_impl: Event not supported: CTRL-EVENT-EAP-STATUS status='started' parameter=''
[00:01:17.157,348] <dbg> wpa_supp: wpa_printf_impl: wlan0: RX EAPOL from b8:37:b2:09:1c:11
[00:01:17.168,243] <dbg> wpa_supp: wpa_printf_impl: RX EAPOL - hexdump(len=10): 01 00 00 06 01 02 00 06 19 20
[00:01:17.180,725] <dbg> wpa_supp: wpa_printf_impl: EAPOL: Received EAP-Packet frame
[00:01:17.191,009] <dbg> wpa_supp: wpa_printf_impl: EAPOL: SUPP_BE entering state REQUEST
[00:01:17.201,721] <dbg> wpa_supp: wpa_printf_impl: EAPOL: getSuppRsp
[00:01:17.210,754] <dbg> wpa_supp: wpa_printf_impl: EAP: EAP entering state RECEIVED
[00:01:17.221,191] <dbg> wpa_supp: wpa_printf_impl: EAP: Received EAP-Request id=2 method=25 vendor=0 vendorMethod=0
[00:01:17.234,252] <dbg> wpa_supp: wpa_printf_impl: EAP: EAP entering state GET_METHOD
[00:01:17.244,750] <dbg> wpa_supp: wpa_printf_impl: EAP: configuration does not allow: vendor 0 method 25
[00:01:17.256,835] <dbg> wpa_supp: wpa_printf_impl: EAP: vendor 0 method 25 not allowed
[00:01:17.267,456] <inf> wpa_supp: wlan0: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=25 -> NAK
[00:01:17.278,991] <dbg> wpa_supp: wpa_printf_impl: EAP: Status notification: refuse proposed method (param=PEAP)
[00:01:17.291,900] <dbg> wpa_supp: wpa_printf_impl: EAP: Building EAP-Nak (requested type 25 vendor=0 method=0 not allowed)
[00:01:17.305,572] <dbg> wpa_supp: wpa_printf_impl: EAP: allowed methods - hexdump(len=1): 0d
[00:01:17.316,650] <dbg> wpa_supp: wpa_printf_impl: EAP: EAP entering state SEND_RESPONSE
[00:01:17.327,392] <dbg> wpa_supp: wpa_printf_impl: EAP: EAP entering state IDLE
[00:01:17.337,341] <dbg> wpa_supp: wpa_printf_impl: EAPOL: SUPP_BE entering state RESPONSE
[00:01:17.348,144] <dbg> wpa_supp: wpa_printf_impl: EAPOL: txSuppRsp
[00:01:17.357,086] <dbg> wpa_supp: wpa_printf_impl: TX EAPOL: dst=b8:37:b2:09:1c:11
[00:01:17.367,370] <dbg> wpa_supp: wpa_printf_impl: TX EAPOL - hexdump(len=10): 01 00 00 06 02 02 00 06 03 0d
[00:01:17.380,096] <dbg> wpa_supp: wpa_printf_impl: EAPOL: SUPP_BE entering state RECEIVE
[00:01:17.391,479] <dbg> wpa_supp: wpa_printf_impl: Received len: 56, msg_len:56 - CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=25 -> NAK->END
[00:01:17.407,409] <dbg> wpa_supp: wpa_printf_impl: Event not supported: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=25 -> NAK
[00:01:17.421,844] <dbg> wpa_supp: wpa_printf_impl: Received len: 70, msg_len:70 - CTRL-EVENT-EAP-STATUS status='refuse proposed method' parameter='PEAP'->END
[00:01:17.438,598] <dbg> wpa_supp: wpa_printf_impl: Event not supported: CTRL-EVENT-EAP-STATUS status='refuse proposed method' parameter='PEAP'
[00:01:17.455,902] <dbg> wpa_supp: wpa_printf_impl: wlan0: RX EAPOL from b8:37:b2:09:1c:11
[00:01:17.466,796] <dbg> wpa_supp: wpa_printf_impl: RX EAPOL - hexdump(len=10): 01 00 00 06 01 03 00 06 0d 20
[00:01:17.479,278] <dbg> wpa_supp: wpa_printf_impl: EAPOL: Received EAP-Packet frame
[00:01:17.489,562] <dbg> wpa_supp: wpa_printf_impl: EAPOL: SUPP_BE entering state REQUEST
[00:01:17.500,274] <dbg> wpa_supp: wpa_printf_impl: EAPOL: getSuppRsp
[00:01:17.509,307] <dbg> wpa_supp: wpa_printf_impl: EAP: EAP entering state RECEIVED
[00:01:17.519,744] <dbg> wpa_supp: wpa_printf_impl: EAP: Received EAP-Request id=3 method=13 vendor=0 vendorMethod=0
[00:01:17.532,806] <dbg> wpa_supp: wpa_printf_impl: EAP: EAP entering state GET_METHOD
[00:01:17.543,334] <inf> wpa_supp: wlan0: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=13
[00:01:17.554,260] <dbg> wpa_supp: wpa_printf_impl: EAP: Status notification: accept proposed method (param=TLS)
[00:01:17.567,077] <dbg> wpa_supp: wpa_printf_impl: EAP: Initialize selected EAP method: vendor 0 method 13 (TLS)
[00:01:17.579,864] <dbg> wpa_supp: wpa_printf_impl: TLS: using phase1 config options
[00:01:17.590,972] <err> wpa_supp: MTLS: invalid tls_disable_tlsv* params; ignoring
[00:01:17.609,710] <err> wpa_supp: MTLS: mbedtls_pk_parse_key: (-0x3d00)
[00:01:17.619,232] <inf> wpa_supp: TLS: Failed to set TLS connection parameters
[00:01:17.629,425] <inf> wpa_supp: EAP-TLS: Failed to initialize SSL.
[00:01:17.638,458] <inf> wpa_supp: wlan0: EAP: Failed to initialize EAP method: vendor 0 method 13 (TLS)
[00:01:17.650,543] <dbg> wpa_supp: wpa_printf_impl: EAP: Building EAP-Nak (requested type 13 vendor=0 method=0 not allowed)
[00:01:17.664,215] <dbg> wpa_supp: wpa_printf_impl: EAP: allowed methods - hexdump(len=0):
[00:01:17.675,018] <dbg> wpa_supp: wpa_printf_impl: EAP: EAP entering state SEND_RESPONSE
[00:01:17.685,760] <dbg> wpa_supp: wpa_printf_impl: EAP: EAP entering state IDLE
[00:01:17.695,709] <dbg> wpa_supp: wpa_printf_impl: EAPOL: SUPP_BE entering state RESPONSE
[00:01:17.706,542] <dbg> wpa_supp: wpa_printf_impl: EAPOL: txSuppRsp
[00:01:17.715,484] <dbg> wpa_supp: wpa_printf_impl: TX EAPOL: dst=b8:37:b2:09:1c:11
[00:01:17.725,769] <dbg> wpa_supp: wpa_printf_impl: TX EAPOL - hexdump(len=10): 01 00 00 06 02 03 00 06 03 00
[00:01:17.738,555] <dbg> wpa_supp: wpa_printf_impl: EAPOL: SUPP_BE entering state RECEIVE
[00:01:17.749,908] <dbg> wpa_supp: wpa_printf_impl: Received len: 49, msg_len:49 - CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=13->END
[00:01:17.764,831] <dbg> wpa_supp: wpa_printf_impl: Event not supported: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=13
[00:01:17.778,472] <dbg> wpa_supp: wpa_printf_impl: Received len: 69, msg_len:69 - CTRL-EVENT-EAP-STATUS status='accept proposed method' parameter='TLS'->END
[00:01:17.795,135] <dbg> wpa_supp: wpa_printf_impl: Event not supported: CTRL-EVENT-EAP-STATUS status='accept proposed method' parameter='TLS'
[00:01:17.810,516] <dbg> wpa_supp: wpa_printf_impl: Received len: 62, msg_len:62 - EAP: Failed to initialize EAP method: vendor 0 method 13 (TLS)->END
[00:01:18.749,908] <dbg> wpa_supp: wpa_printf_impl: EAPOL: startWhen --> 0
[00:01:18.765,716] <dbg> wpa_supp: wpa_printf_impl: wlan0: RX EAPOL from b8:37:b2:09:1c:11
[00:01:18.776,641] <dbg> wpa_supp: wpa_printf_impl: RX EAPOL - hexdump(len=8): 01 00 00 04 04 03 00 04
[00:01:18.788,513] <dbg> wpa_supp: wpa_printf_impl: EAPOL: Received EAP-Packet frame
[00:01:18.798,797] <dbg> wpa_supp: wpa_printf_impl: EAPOL: SUPP_BE entering state REQUEST
[00:01:18.809,509] <dbg> wpa_supp: wpa_printf_impl: EAPOL: getSuppRsp
[00:01:18.818,511] <dbg> wpa_supp: wpa_printf_impl: EAP: EAP entering state RECEIVED
[00:01:18.828,979] <dbg> wpa_supp: wpa_printf_impl: EAP: Received EAP-Failure
[00:01:18.838,653] <dbg> wpa_supp: wpa_printf_impl: EAP: Status notification: completion (param=failure)
[00:01:18.850,769] <dbg> wpa_supp: wpa_printf_impl: EAP: EAP entering state FAILURE
[00:01:18.860,992] <inf> wpa_supp: wlan0: CTRL-EVENT-EAP-FAILURE EAP authentication failed
[00:01:18.871,826] <dbg> wpa_supp: wpa_printf_impl: EAPOL: SUPP_PAE entering state HELD
[00:01:18.882,385] <dbg> wpa_supp: wpa_printf_impl: EAPOL: Supplicant port status: Unauthorized
[00:01:18.900,543] <dbg> wpa_supp: wpa_printf_impl: EAPOL: SUPP_BE entering state RECEIVE
[00:01:18.911,437] <dbg> wpa_supp: wpa_printf_impl: EAPOL: SUPP_BE entering state FAIL
[00:01:18.921,905] <dbg> wpa_supp: wpa_printf_impl: EAPOL: SUPP_BE entering state IDLE
[00:01:18.932,403] <dbg> wpa_supp: wpa_printf_impl: EAPOL authentication completed - result=FAILURE
[00:01:18.944,061] <dbg> wpa_supp: wpa_printf_impl: wlan0: Setting authentication timeout: 2 sec 0 usec
[00:01:18.956,054] <dbg> wifi_supplicant: event_socket_handler: Passing message 11 to wpa_supplicant
[00:01:18.967,742] <dbg> wpa_supp: wpa_printf_impl: wlan0: Event DEAUTH (11) received
[00:01:18.978,179] <dbg> wpa_supp: wpa_printf_impl: wlan0: Deauthentication notification
[00:01:18.988,830] <dbg> wpa_supp: wpa_printf_impl: wlan0:  * reason 1 (UNSPECIFIED)
[00:01:18.999,206] <dbg> wpa_supp: wpa_printf_impl: wlan0:  * address b8:37:b2:09:1c:11
[00:01:19.009,765] <dbg> wpa_supp: wpa_printf_impl: Deauthentication frame IE(s) - hexdump(len=0): [NULL]
[00:01:19.021,942] <inf> wpa_supp: wlan0: CTRL-EVENT-DISCONNECTED bssid=b8:37:b2:09:1c:11 reason=1
Connection request failed (1)
[00:01:19.039,306] <inf> wpa_supp: wlan0: CTRL-EVENT-SSID-TEMP-DISABLED id=0 ssid="kiosk_wpa2_ent" auth_failures=1 duration=10 reason=AUTH_FAILED
[00:01:19.054,962] <dbg> wpa_supp: wpa_printf_impl: wlan0: Auto connect enabled: try to reconnect (wps=0/0 wpa_state=6)
[00:01:19.068,359] <dbg> wpa_supp: wpa_printf_impl: wlan0: Setting scan request: 0.100000 sec
[00:01:19.079,528] <dbg> wpa_supp: wpa_printf_impl: wlan0: Radio work 'sme-connect'@0x2005cd00 done in 3.611786 seconds
[00:01:19.092,926] <dbg> wpa_supp: wpa_printf_impl: wlan0: radio_work_free('sme-connect'@0x2005cd00): num_active_works --> 0
[00:01:19.106,842] <inf> wpa_supp: wlan0: Added BSSID b8:37:b2:09:1c:11 into ignore list, ignoring for 10 seconds
[00:01:19.119,720] <dbg> wpa_supp: wpa_printf_impl: wlan0: Another BSS in this ESS has been seen; try it next
[00:01:19.132,324] <inf> wpa_supp: wlan0: BSSID b8:37:b2:09:1c:11 ignore list count incremented to 2, ignoring for 10 seconds
[00:01:19.146,270] <dbg> wpa_supp: wpa_printf_impl: wlan0: Consecutive connection failures: 1 --> request scan in 100 ms
[00:01:19.159,790] <dbg> wpa_supp: wpa_printf_impl: wlan0: Ignore new scan request for 0.100000 sec since an earlier request is scheduled to trigger sooner
[00:01:19.176,239] <dbg> wpa_supp: wpa_printf_impl: wlan0: WPA: Clear old PMK and PTK
[00:01:19.186,950] <dbg> wpa_supp: wpa_printf_impl: wlan0: Disconnect event - remove keys
[00:01:19.197,723] <dbg> wpa_supp: wpa_printf_impl: wlan0: State: ASSOCIATED -> DISCONNECTED
[00:01:19.208,740] <dbg> wpa_supp: wpa_printf_impl: EAPOL: External notification - portEnabled=0
[00:01:19.220,031] <dbg> wpa_supp: wpa_printf_impl: EAPOL: SUPP_PAE entering state DISCONNECTED
[00:01:19.231,292] <dbg> wpa_supp: wpa_printf_impl: EAPOL: Supplicant port status: Unauthorized
[00:01:19.251,708] <dbg> wpa_supp: wpa_printf_impl: EAPOL: SUPP_BE entering state INITIALIZE
[00:01:19.262,847] <dbg> wpa_supp: wpa_printf_impl: EAP: EAP entering state DISABLED
[00:01:19.273,162] <dbg> wpa_supp: wpa_printf_impl: EAPOL: External notification - portValid=0
[00:01:19.284,423] <dbg> wpa_supp: wpa_printf_impl: Received len: 61, msg_len:61 - CTRL-EVENT-EAP-STATUS status='completion' parameter='failure'->END
[00:01:19.300,384] <dbg> wpa_supp: wpa_printf_impl: Event not supported: CTRL-EVENT-EAP-STATUS status='completion' parameter='failure'
[00:01:19.315,063] <dbg> wpa_supp: wpa_printf_impl: Received len: 48, msg_len:48 - CTRL-EVENT-EAP-FAILURE EAP authentication failed->END
[00:01:19.329,895] <dbg> wpa_supp: wpa_printf_impl: Event not supported: CTRL-EVENT-EAP-FAILURE EAP authentication failed
[00:01:19.343,475] <dbg> wpa_supp: wpa_printf_impl: Received len: 56, msg_len:56 - CTRL-EVENT-DISCONNECTED bssid=b8:37:b2:09:1c:11 reason=1->END
[00:01:19.359,069] <dbg> wpa_supp: wpa_printf_impl: Received len: 103, msg_len:103 - CTRL-EVENT-SSID-TEMP-DISABLED id=0 ssid="kiosk_wpa2_ent" auth_failures=1 duration=10 reason=AUTH_FAILED->END
[00:01:19.378,936] <dbg> wpa_supp: wpa_printf_impl: Received len: 71, msg_len:71 - Added BSSID b8:37:b2:09:1c:11 into ignore list, ignoring for 10 seconds->END
[00:01:19.395,782] <dbg> wpa_supp: wpa_printf_impl: Received len: 83, msg_len:83 - BSSID b8:37:b2:09:1c:11 ignore list count incremented to 2, ignoring for 10 seconds->END
[00:01:19.413,726] <dbg> wpa_supp: wpa_printf_impl: wlan0: State: DISCONNECTED -> SCANNING
[00:01:19.424,621] <dbg> wpa_supp: wpa_printf_impl: wlan0: Starting AP scan for wildcard SSID
[00:01:19.435,791] <dbg> wpa_supp: wpa_printf_impl: wlan0: Optimize scan based on previously generated frequency list
[00:01:19.449,066] <dbg> wpa_supp: wpa_printf_impl: wlan0: Add radio work 'scan'@0x2005d068
[00:01:19.460,021] <dbg> wpa_supp: wpa_printf_impl: wlan0: First radio work item in the queue - schedule start immediately
[00:01:19.473,815] <dbg> wpa_supp: wpa_printf_impl: wlan0: Starting radio work 'scan'@0x2005d068 after 0.013763 second wait
[00:01:19.496,093] <dbg> wpa_supp: wpa_printf_impl: wpa_drv_zep_scan2: Scan requested - scan timeout 35 seconds
[00:01:19.509,826] <dbg> wifi_supplicant: event_socket_handler: Passing message 47 to wpa_supplicant
[00:01:19.521,514] <dbg> wpa_supp: wpa_printf_impl: wlan0: Event SCAN_STARTED (47) received
[00:01:19.532,501] <dbg> wpa_supp: wpa_printf_impl: wlan0: Own scan request started a scan in 0.022796 seconds
[00:01:19.545,227] <dbg> wpa_supp: wpa_printf_impl: Received len: 24, msg_len:24 - CTRL-EVENT-SCAN-STARTED ->END
[00:01:19.558,624] <dbg> wifi_supplicant: event_socket_handler: Passing message 3 to wpa_supplicant
[00:01:19.570,251] <dbg> wpa_supp: wpa_printf_impl: wlan0: Event SCAN_RESULTS (3) received
[00:01:19.581,115] <dbg> wpa_supp: wpa_printf_impl: wlan0: Scan completed in 0.048615 seconds
[00:01:19.595,214] <dbg> wpa_supp: wpa_printf_impl: Sorted scan results
[00:01:19.604,461] <dbg> wpa_supp: wpa_printf_impl: b8:37:b2:09:1c:01 ssid=kiosk_wpa2_ent freq=2412 qual=0 noise=-89~ level=-71 snr=18 flags=0xb age=58 est=52000
[00:01:19.623,107] <dbg> wpa_supp: wpa_printf_impl: IEs - hexdump(len=243): 00 0e 6b 69 6f 73 6b 5f 77 70 61 32 5f 65 6e 74 01 08 82 84 0b 16 24 30 48 6c 03 01 01 05 04 00 01 00 00 2a 01 00 32 04 0c 12 18 60 30 14 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f ac 01 28 00 0b 05 00 00 30 dd 6d 2d 1a ad 09
[00:01:19.654,418] <dbg> wpa_supp: wpa_printf_impl: Beacon IEs - hexdump(len=243): 00 0e 6b 69 6f 73 6b 5f 77 70 61 32 5f 65 6e 74 01 08 82 84 0b 16 24 30 48 6c 03 01 01 05 04 00 01 00 00 2a 01 00 32 04 0c 12 18 60 30 14 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f ac 01 28 00 0b 05 00 00 30 dd 6d 2d 1a
[00:01:19.684,112] <dbg> wpa_supp: wpa_printf_impl: wlan0: BSS: Start scan result update 2
[00:01:19.695,190] <dbg> wpa_supp: wpa_printf_impl: BSS: last_scan_res_used=1/32
[00:01:19.705,169] <dbg> wpa_supp: wpa_printf_impl: wlan0: New scan results available (own=1 ext=0)
[00:01:19.716,949] <dbg> wpa_supp: wpa_printf_impl: wlan0: Radio work 'scan'@0x2005d068 done in 0.243134 seconds
[00:01:19.729,736] <dbg> wpa_supp: wpa_printf_impl: wlan0: radio_work_free('scan'@0x2005d068): num_active_works --> 0
[00:01:19.742,980] <dbg> wpa_supp: wpa_printf_impl: wlan0: Postpone network selection by 10 seconds since all networks are disabled
[00:01:19.757,507] <dbg> wpa_supp: wpa_printf_impl: Received len: 24, msg_len:24 - CTRL-EVENT-SCAN-RESULTS ->END
[00:01:19.770,324] <dbg> wpa_supp: wpa_printf_impl: EAPOL: disable timer tick
[00:01:29.757,476] <dbg> wpa_supp: wpa_printf_impl: wlan0: Try to associate due to network getting re-enabled
[00:01:29.769,927] <dbg> wpa_supp: wpa_printf_impl: Fast associate: Old scan results
[00:01:29.780,273] <dbg> wpa_supp: wpa_printf_impl: wlan0: Setting scan request: 0.000000 sec
[00:01:29.791,442] <dbg> wpa_supp: wpa_printf_impl: Scan SSID - hexdump_ascii(len=14):
[00:01:29.801,879] <dbg> wpa_supp: _wpa_hexdump_ascii:
                                   6b 69 6f 73 6b 5f 77 70  61 32 5f 65 6e 74       |kiosk_wp a2_ent
[00:01:29.818,725] <dbg> wpa_supp: wpa_printf_impl: wlan0: Include wildcard SSID in the scan request
[00:01:29.830,535] <dbg> wpa_supp: wpa_printf_impl: wlan0: Add radio work 'scan'@0x2005cea8
[00:01:29.841,491] <dbg> wpa_supp: wpa_printf_impl: wlan0: First radio work item in the queue - schedule start immediately
[00:01:29.855,255] <dbg> wpa_supp: wpa_printf_impl: wlan0: Starting radio work 'scan'@0x2005cea8 after 0.013702 second wait
[00:01:29.877,075] <dbg> wpa_supp: wpa_printf_impl: wpa_drv_zep_scan2: Scan requested - scan timeout 35 seconds
[00:01:29.890,716] <dbg> wifi_supplicant: event_socket_handler: Passing message 47 to wpa_supplicant
[00:01:29.902,404] <dbg> wpa_supp: wpa_printf_impl: wlan0: Event SCAN_STARTED (47) received
[00:01:29.913,360] <dbg> wpa_supp: wpa_printf_impl: wlan0: Own scan request started a scan in 0.022767 seconds
[00:01:29.926,086] <dbg> wpa_supp: wpa_printf_impl: Received len: 24, msg_len:24 - CTRL-EVENT-SCAN-STARTED ->END

RE: Can't get WPA2 Enterprise (EAP-TLS) to connect to wifi AP using nrf5340/nrf7002/NCS2.9.0

Marte Myrvold — Fri, 06 Jun 2025 14:43:16 GMT

Hi,

I will discuss the logs internally and get back to you.

Regarding the build errors you see, we have a guide on debugging devicetree errors in our nRF Connect SDK Intermediate course on DevAcademy that is very useful. You can find it here: Troubleshooting the devicetree.

Best regards,
Marte

RE: Can't get WPA2 Enterprise (EAP-TLS) to connect to wifi AP using nrf5340/nrf7002/NCS2.9.0

BrianW — Thu, 05 Jun 2025 16:42:34 GMT

[quote userid="92402" url="~/f/nordic-q-a/121864/can-t-get-wpa2-enterprise-eap-tls-to-connect-to-wifi-ap-using-nrf5340-nrf7002-ncs2-9-0/538167"]

Great thanks! Indeed thats quite a different set of fields in the params structure from the code I had. I'll give that a go...

Let me know how it goes!

[/quote]

I looked at the shell param setting code in detail, and noted that the

params->key2_passwd = KEY2_PASSWD;
params->key2_passwd_length = strlen(params->key2_passwd);

if only if specifing 2 key passwords - if just one -K <password> then its key_passwd that is set

and that:

params->mfp = WIFI_MFP_REQUIRED; // 2

params->suiteb_type = WIFI_SUITEB_192; // 2

from -w 2 and -S 2 are for WPA3 (I'm trying to get WPA2 working first!)

Also, WIFI_SECURITY_TYPE_EAP_TLS == WIFI_SECURITY_TYPE_EAP in wifi.h to same as I had.

So finally the main difference is putting an anonymous identity rather than eap_identity.

Alas, still doesn't work...

The logs:

[00:00:00.390,472] <inf> wifi_nrf_bus: SPIM spi@a000: freq = 24 MHz
[00:00:00.390,502] <inf> wifi_nrf_bus: SPIM spi@a000: latency = 1
*** Booting nRF Connect SDK v2.9.0-7787b2649840 ***
*** Using Zephyr OS v3.7.99-1f8f3dc29142 ***
[00:00:00.604,431] <inf> sta: Starting cc2v1 with CPU frequency: 64 MHz
[00:00:00.604,614] <dbg> wpa_supp: wpa_printf_impl: wpa_supplicant v2.11-devel
[00:00:00.604,827] <inf> wifi_supplicant: wpa_supplicant initialized
[00:00:00.605,224] <dbg> wifi_supplicant: add_interface: Adding interface wlan0 [1] (0x200029b8)
[00:00:00.605,316] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: interface_add, argc: 5
[00:00:00.605,346] <dbg> wpa_supp: wpa_printf_impl: argv[0]: interface_add
[00:00:00.605,407] <dbg> wpa_supp: wpa_printf_impl: argv[1]: wlan0
[00:00:00.605,438] <dbg> wpa_supp: wpa_printf_impl: argv[2]: zephyr
[00:00:00.605,499] <dbg> wpa_supp: wpa_printf_impl: argv[3]: zephyr
[00:00:00.605,529] <dbg> wpa_supp: wpa_printf_impl: argv[4]: zephyr
[00:00:00.605,926] <dbg> wpa_supp: wpa_printf_impl: RX global ctrl_iface - hexdump_ascii(len=71):
[00:00:00.605,926] <dbg> wpa_supp: _wpa_hexdump_ascii:
                                   49 4e 54 45 52 46 41 43  45 5f 41 44 44 20 77 6c |INTERFAC E_ADD wl
                                   61 6e 30 09 7a 65 70 68  79 72 09 7a 65 70 68 79 |an0.zeph yr.zephy
                                   72 09 7a 65 70 68 79 72  09 09 09 09 20 77 6c 61 |r.zephyr .... wla
                                   6e 30 20 7a 65 70 68 79  72 20 7a 65 70 68 79 72 |n0 zephy r zephyr
                                   20 7a 65 70 68 79 72                             | zephyr
[00:00:00.605,987] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE GLOBAL INTERFACE_ADD 'wlan0      zephyr  zephyr  zephyr                           wlan0 zephyr zephyr zephyr'
[00:00:00.606,140] <dbg> wpa_supp: wpa_printf_impl: Initializing interface 'wlan0' conf 'zephyr' driver 'zephyr' ctrl_interface 'zephyr' bridge 'N/A'
[00:00:00.608,093] <dbg> wpa_supp: wpa_printf_impl: Add interface wlan0 to a new radio N/A
[00:00:00.611,541] <dbg> wpa_supp: wpa_printf_impl: wpa_supp: Added 802.11b mode based on 802.11g information
[00:00:00.611,724] <dbg> wpa_supp: wpa_printf_impl: l2_packet_init: iface wlan0 ifindex 1
[00:00:00.611,877] <dbg> wpa_supp: wpa_printf_impl: wlan0: Own MAC address: f0:ce:37:00:00:4a
[00:00:00.612,030] <dbg> wpa_supp: wpa_printf_impl: _wpa_drv_zep_set_key: priv:0x2000b450 alg 0 addr 0x0 key_idx 0 set_tx 0 seq 0x0 seq_len 0 key 0x0 key_len 0 key_flag 10
[00:00:00.615,539] <dbg> wpa_supp: wpa_printf_impl: _wpa_drv_zep_set_key: priv:0x2000b450 alg 0 addr 0x0 key_idx 1 set_tx 0 seq 0x0 seq_len 0 key 0x0 key_len 0 key_flag 10
[00:00:00.617,828] <dbg> wpa_supp: wpa_printf_impl: _wpa_drv_zep_set_key: priv:0x2000b450 alg 0 addr 0x0 key_idx 2 set_tx 0 seq 0x0 seq_len 0 key 0x0 key_len 0 key_flag 10
[00:00:00.620,117] <dbg> wpa_supp: wpa_printf_impl: _wpa_drv_zep_set_key: priv:0x2000b450 alg 0 addr 0x0 key_idx 3 set_tx 0 seq 0x0 seq_len 0 key 0x0 key_len 0 key_flag 10
[00:00:00.622,406] <dbg> wpa_supp: wpa_printf_impl: _wpa_drv_zep_set_key: priv:0x2000b450 alg 0 addr 0x0 key_idx 4 set_tx 0 seq 0x0 seq_len 0 key 0x0 key_len 0 key_flag 10
[00:00:00.626,037] <dbg> wpa_supp: wpa_printf_impl: _wpa_drv_zep_set_key: priv:0x2000b450 alg 0 addr 0x0 key_idx 5 set_tx 0 seq 0x0 seq_len 0 key 0x0 key_len 0 key_flag 10
[00:00:00.628,295] <dbg> wpa_supp: wpa_printf_impl: wlan0: RSN: flushing PMKID list in the driver
[00:00:00.628,417] <dbg> wpa_supp: wpa_printf_impl: wlan0: State: DISCONNECTED -> INACTIVE
[00:00:00.690,612] <dbg> wpa_supp: wpa_printf_impl: EAPOL: SUPP_PAE entering state DISCONNECTED
[00:00:00.690,673] <dbg> wpa_supp: wpa_printf_impl: EAPOL: Supplicant port status: Unauthorized
[00:00:00.700,714] <dbg> wpa_supp: wpa_printf_impl: EAPOL: KEY_RX entering state NO_KEY_RECEIVE
[00:00:00.700,744] <dbg> wpa_supp: wpa_printf_impl: EAPOL: SUPP_BE entering state INITIALIZE
[00:00:00.700,805] <dbg> wpa_supp: wpa_printf_impl: EAP: EAP entering state DISABLED
[00:00:00.701,202] <dbg> wpa_supp: wpa_printf_impl: wlan0: Added interface wlan0
[00:00:00.701,324] <dbg> wpa_supp: wpa_printf_impl: wlan0: State: INACTIVE -> DISCONNECTED
[00:00:01.604,522] <inf> sta: Wi-Fi enterprise credentials loaded and configured : ca_cert len 1242, client cert len 1138, key len 1715
[00:00:01.604,614] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: remove_network, argc: 2
[00:00:01.604,644] <dbg> wpa_supp: wpa_printf_impl: argv[0]: remove_network
[00:00:01.604,705] <dbg> wpa_supp: wpa_printf_impl: argv[1]: all
[00:00:01.605,072] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'REMOVE_NETWORK all'
[00:00:01.605,163] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: REMOVE_NETWORK all
[00:00:01.605,651] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'ADD_NETWORK'
[00:00:01.605,773] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: ADD_NETWORK
[00:00:01.606,262] <dbg> wpa_supp: wpa_printf_impl: Received len: 26, msg_len:26 - CTRL-EVENT-NETWORK-ADDED 0->END
[00:00:01.606,628] <dbg> wpa_supp: wpa_printf_impl: NET added: 0
[00:00:01.606,719] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: set_network, argc: 4
[00:00:01.606,781] <dbg> wpa_supp: wpa_printf_impl: argv[0]: set_network
[00:00:01.606,811] <dbg> wpa_supp: wpa_printf_impl: argv[1]: 0
[00:00:01.606,872] <dbg> wpa_supp: wpa_printf_impl: argv[2]: ssid
[00:00:01.606,903] <dbg> wpa_supp: wpa_printf_impl: argv[3]: "kiosk_wpa2_ent"
[00:00:01.607,299] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'SET_NETWORK [REMOVED]'
[00:00:01.607,421] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: SET_NETWORK id=0 name='ssid'
[00:00:01.607,482] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: value - hexdump_ascii(len=16): [REMOVED]
[00:00:01.607,574] <dbg> wpa_supp: wpa_printf_impl: ssid - hexdump_ascii(len=14):
[00:00:01.607,604] <dbg> wpa_supp: _wpa_hexdump_ascii:
                                   6b 69 6f 73 6b 5f 77 70  61 32 5f 65 6e 74       |kiosk_wp a2_ent
[00:00:01.607,879] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: set_network, argc: 4
[00:00:01.607,940] <dbg> wpa_supp: wpa_printf_impl: argv[0]: set_network
[00:00:01.607,971] <dbg> wpa_supp: wpa_printf_impl: argv[1]: 0
[00:00:01.608,032] <dbg> wpa_supp: wpa_printf_impl: argv[2]: scan_ssid
[00:00:01.608,062] <dbg> wpa_supp: wpa_printf_impl: argv[3]: 1
[00:00:01.608,459] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'SET_NETWORK [REMOVED]'
[00:00:01.608,581] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: SET_NETWORK id=0 name='scan_ssid'
[00:00:01.608,642] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: value - hexdump_ascii(len=1): [REMOVED]
[00:00:01.608,703] <dbg> wpa_supp: wpa_printf_impl: scan_ssid=1 (0x1)
[00:00:01.608,978] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: set_network, argc: 4
[00:00:01.609,039] <dbg> wpa_supp: wpa_printf_impl: argv[0]: set_network
[00:00:01.609,069] <dbg> wpa_supp: wpa_printf_impl: argv[1]: 0
[00:00:01.609,130] <dbg> wpa_supp: wpa_printf_impl: argv[2]: key_mgmt
[00:00:01.609,161] <dbg> wpa_supp: wpa_printf_impl: argv[3]: NONE
[00:00:01.609,558] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'SET_NETWORK [REMOVED]'
[00:00:01.609,680] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: SET_NETWORK id=0 name='key_mgmt'
[00:00:01.609,741] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: value - hexdump_ascii(len=4): [REMOVED]
[00:00:01.609,832] <dbg> wpa_supp: wpa_printf_impl: key_mgmt: 0x4
[00:00:01.610,137] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: set_network, argc: 4
[00:00:01.610,168] <dbg> wpa_supp: wpa_printf_impl: argv[0]: set_network
[00:00:01.610,229] <dbg> wpa_supp: wpa_printf_impl: argv[1]: 0
[00:00:01.610,260] <dbg> wpa_supp: wpa_printf_impl: argv[2]: ieee80211w
[00:00:01.610,321] <dbg> wpa_supp: wpa_printf_impl: argv[3]: 0
[00:00:01.610,687] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'SET_NETWORK [REMOVED]'
[00:00:01.610,839] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: SET_NETWORK id=0 name='ieee80211w'
[00:00:01.610,900] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: value - hexdump_ascii(len=1): [REMOVED]
[00:00:01.611,022] <dbg> wpa_supp: wpa_printf_impl: ieee80211w=0 (0x0)
[00:00:01.611,328] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: set_network, argc: 4
[00:00:01.611,358] <dbg> wpa_supp: wpa_printf_impl: argv[0]: set_network
[00:00:01.611,419] <dbg> wpa_supp: wpa_printf_impl: argv[1]: 0
[00:00:01.611,450] <dbg> wpa_supp: wpa_printf_impl: argv[2]: proto
[00:00:01.611,511] <dbg> wpa_supp: wpa_printf_impl: argv[3]: RSN
[00:00:01.611,877] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'SET_NETWORK [REMOVED]'
[00:00:01.612,030] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: SET_NETWORK id=0 name='proto'
[00:00:01.612,091] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: value - hexdump_ascii(len=3): [REMOVED]
[00:00:01.612,152] <dbg> wpa_supp: wpa_printf_impl: proto: 0x2
[00:00:01.612,457] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: set_network, argc: 4
[00:00:01.612,487] <dbg> wpa_supp: wpa_printf_impl: argv[0]: set_network
[00:00:01.612,548] <dbg> wpa_supp: wpa_printf_impl: argv[1]: 0
[00:00:01.612,579] <dbg> wpa_supp: wpa_printf_impl: argv[2]: key_mgmt
[00:00:01.612,640] <dbg> wpa_supp: wpa_printf_impl: argv[3]: WPA-EAP
[00:00:01.613,006] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'SET_NETWORK [REMOVED]'
[00:00:01.613,159] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: SET_NETWORK id=0 name='key_mgmt'
[00:00:01.613,220] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: value - hexdump_ascii(len=7): [REMOVED]
[00:00:01.613,311] <dbg> wpa_supp: wpa_printf_impl: key_mgmt: 0x1
[00:00:01.613,586] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: set, argc: 3
[00:00:01.613,647] <dbg> wpa_supp: wpa_printf_impl: argv[0]: set
[00:00:01.613,677] <dbg> wpa_supp: wpa_printf_impl: argv[1]: openssl_ciphers
[00:00:01.613,739] <dbg> wpa_supp: wpa_printf_impl: argv[2]: "DEFAULT:!EXP:!LOW"
[00:00:01.614,135] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'SET openssl_ciphers "DEFAULT:!EXP:!LOW"'
[00:00:01.614,227] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE SET 'openssl_ciphers'='"DEFAULT:!EXP:!LOW"'
[00:00:01.614,349] <dbg> wpa_supp: wpa_printf_impl: openssl_ciphers='"DEFAULT:!EXP:!LOW"'
[00:00:01.614,624] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: set_network, argc: 4
[00:00:01.614,654] <dbg> wpa_supp: wpa_printf_impl: argv[0]: set_network
[00:00:01.614,715] <dbg> wpa_supp: wpa_printf_impl: argv[1]: 0
[00:00:01.614,746] <dbg> wpa_supp: wpa_printf_impl: argv[2]: group
[00:00:01.614,807] <dbg> wpa_supp: wpa_printf_impl: argv[3]: CCMP
[00:00:01.615,173] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'SET_NETWORK [REMOVED]'
[00:00:01.615,295] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: SET_NETWORK id=0 name='group'
[00:00:01.615,386] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: value - hexdump_ascii(len=4): [REMOVED]
[00:00:01.615,478] <dbg> wpa_supp: wpa_printf_impl: group: 0x10
[00:00:01.615,753] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: set_network, argc: 4
[00:00:01.615,814] <dbg> wpa_supp: wpa_printf_impl: argv[0]: set_network
[00:00:01.615,844] <dbg> wpa_supp: wpa_printf_impl: argv[1]: 0
[00:00:01.615,875] <dbg> wpa_supp: wpa_printf_impl: argv[2]: pairwise
[00:00:01.615,936] <dbg> wpa_supp: wpa_printf_impl: argv[3]: CCMP
[00:00:01.616,302] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'SET_NETWORK [REMOVED]'
[00:00:01.616,455] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: SET_NETWORK id=0 name='pairwise'
[00:00:01.616,516] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: value - hexdump_ascii(len=4): [REMOVED]
[00:00:01.616,607] <dbg> wpa_supp: wpa_printf_impl: pairwise: 0x10
[00:00:01.616,912] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: set_network, argc: 4
[00:00:01.616,943] <dbg> wpa_supp: wpa_printf_impl: argv[0]: set_network
[00:00:01.616,973] <dbg> wpa_supp: wpa_printf_impl: argv[1]: 0
[00:00:01.617,034] <dbg> wpa_supp: wpa_printf_impl: argv[2]: group_mgmt
[00:00:01.617,065] <dbg> wpa_supp: wpa_printf_impl: argv[3]: AES-128-CMAC
[00:00:01.617,492] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'SET_NETWORK [REMOVED]'
[00:00:01.617,614] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: SET_NETWORK id=0 name='group_mgmt'
[00:00:01.617,706] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: value - hexdump_ascii(len=12): [REMOVED]
[00:00:01.617,797] <dbg> wpa_supp: wpa_printf_impl: group_mgmt: 0x20
[00:00:01.618,103] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: set_network, argc: 4
[00:00:01.618,133] <dbg> wpa_supp: wpa_printf_impl: argv[0]: set_network
[00:00:01.618,194] <dbg> wpa_supp: wpa_printf_impl: argv[1]: 0
[00:00:01.618,225] <dbg> wpa_supp: wpa_printf_impl: argv[2]: proto
[00:00:01.618,255] <dbg> wpa_supp: wpa_printf_impl: argv[3]: RSN
[00:00:01.618,652] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'SET_NETWORK [REMOVED]'
[00:00:01.618,804] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: SET_NETWORK id=0 name='proto'
[00:00:01.618,865] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: value - hexdump_ascii(len=3): [REMOVED]
[00:00:01.619,171] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: set_network, argc: 4
[00:00:01.619,232] <dbg> wpa_supp: wpa_printf_impl: argv[0]: set_network
[00:00:01.619,262] <dbg> wpa_supp: wpa_printf_impl: argv[1]: 0
[00:00:01.619,323] <dbg> wpa_supp: wpa_printf_impl: argv[2]: eap
[00:00:01.619,354] <dbg> wpa_supp: wpa_printf_impl: argv[3]: TLS
[00:00:01.619,750] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'SET_NETWORK [REMOVED]'
[00:00:01.619,903] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: SET_NETWORK id=0 name='eap'
[00:00:01.619,964] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: value - hexdump_ascii(len=3): [REMOVED]
[00:00:01.620,269] <dbg> wpa_supp: wpa_printf_impl: eap methods - hexdump(len=16): 00 00 00 00 0d 00 00 00 00 00 00 00 00 00 00 00
[00:00:01.620,605] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: set_network, argc: 4
[00:00:01.620,635] <dbg> wpa_supp: wpa_printf_impl: argv[0]: set_network
[00:00:01.620,697] <dbg> wpa_supp: wpa_printf_impl: argv[1]: 0
[00:00:01.620,727] <dbg> wpa_supp: wpa_printf_impl: argv[2]: anonymous_identity
[00:00:01.620,758] <dbg> wpa_supp: wpa_printf_impl: argv[3]: "anon"
[00:00:01.621,154] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'SET_NETWORK [REMOVED]'
[00:00:01.621,307] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: SET_NETWORK id=0 name='anonymous_identity'
[00:00:01.621,368] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: value - hexdump_ascii(len=6): [REMOVED]
[00:00:01.621,490] <dbg> wpa_supp: wpa_printf_impl: anonymous_identity - hexdump_ascii(len=4):
[00:00:01.621,490] <dbg> wpa_supp: _wpa_hexdump_ascii:
                                   61 6e 6f 6e                                      |anon
[00:00:01.621,887] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: set_network, argc: 4
[00:00:01.621,917] <dbg> wpa_supp: wpa_printf_impl: argv[0]: set_network
[00:00:01.621,978] <dbg> wpa_supp: wpa_printf_impl: argv[1]: 0
[00:00:01.622,009] <dbg> wpa_supp: wpa_printf_impl: argv[2]: ca_cert
[00:00:01.622,070] <dbg> wpa_supp: wpa_printf_impl: argv[3]: "blob://ca_cert"
[00:00:01.622,467] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'SET_NETWORK [REMOVED]'
[00:00:01.622,589] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: SET_NETWORK id=0 name='ca_cert'
[00:00:01.622,650] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: value - hexdump_ascii(len=16): [REMOVED]
[00:00:01.622,772] <dbg> wpa_supp: wpa_printf_impl: ca_cert - hexdump_ascii(len=14):
[00:00:01.622,802] <dbg> wpa_supp: _wpa_hexdump_ascii:
                                   62 6c 6f 62 3a 2f 2f 63  61 5f 63 65 72 74       |blob://c a_cert
[00:00:01.623,168] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: set_network, argc: 4
[00:00:01.623,229] <dbg> wpa_supp: wpa_printf_impl: argv[0]: set_network
[00:00:01.623,260] <dbg> wpa_supp: wpa_printf_impl: argv[1]: 0
[00:00:01.623,321] <dbg> wpa_supp: wpa_printf_impl: argv[2]: client_cert
[00:00:01.623,352] <dbg> wpa_supp: wpa_printf_impl: argv[3]: "blob://client_cert"
[00:00:01.623,748] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'SET_NETWORK [REMOVED]'
[00:00:01.623,901] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: SET_NETWORK id=0 name='client_cert'
[00:00:01.623,962] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: value - hexdump_ascii(len=20): [REMOVED]
[00:00:01.624,084] <dbg> wpa_supp: wpa_printf_impl: client_cert - hexdump_ascii(len=18):
[00:00:01.624,084] <dbg> wpa_supp: _wpa_hexdump_ascii:
                                   62 6c 6f 62 3a 2f 2f 63  6c 69 65 6e 74 5f 63 65 |blob://c lient_ce
                                   72 74                                            |rt
[00:00:01.624,511] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: set_network, argc: 4
[00:00:01.624,542] <dbg> wpa_supp: wpa_printf_impl: argv[0]: set_network
[00:00:01.624,603] <dbg> wpa_supp: wpa_printf_impl: argv[1]: 0
[00:00:01.624,633] <dbg> wpa_supp: wpa_printf_impl: argv[2]: private_key
[00:00:01.624,694] <dbg> wpa_supp: wpa_printf_impl: argv[3]: "blob://private_key"
[00:00:01.625,091] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'SET_NETWORK [REMOVED]'
[00:00:01.625,213] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: SET_NETWORK id=0 name='private_key'
[00:00:01.625,274] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: value - hexdump_ascii(len=20): [REMOVED]
[00:00:01.625,396] <dbg> wpa_supp: wpa_printf_impl: private_key - hexdump_ascii(len=18):
[00:00:01.625,427] <dbg> wpa_supp: _wpa_hexdump_ascii:
                                   62 6c 6f 62 3a 2f 2f 70  72 69 76 61 74 65 5f 6b |blob://p rivate_k
                                   65 79                                            |ey
[00:00:01.625,732] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: set_network, argc: 4
[00:00:01.625,762] <dbg> wpa_supp: wpa_printf_impl: argv[0]: set_network
[00:00:01.625,823] <dbg> wpa_supp: wpa_printf_impl: argv[1]: 0
[00:00:01.625,854] <dbg> wpa_supp: wpa_printf_impl: argv[2]: private_key_passwd
[00:00:01.625,915] <dbg> wpa_supp: wpa_printf_impl: argv[3]: "key_004a-2025"
[00:00:01.626,312] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'SET_NETWORK [REMOVED]'
[00:00:01.626,434] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: SET_NETWORK id=0 name='private_key_passwd'
[00:00:01.626,525] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: value - hexdump_ascii(len=15): [REMOVED]
[00:00:01.626,647] <dbg> wpa_supp: wpa_printf_impl: private_key_passwd - hexdump_ascii(len=13): [REMOVED]
[00:00:01.626,892] <inf> sta: Connection requested
[00:00:01.626,953] <inf> sta: ==================
[00:00:01.626,983] <inf> sta: State: DISCONNECTED
[00:00:01.701,080] <dbg> wpa_supp: wpa_printf_impl: EAPOL: disable timer tick
[00:00:06.627,105] <inf> sta: ==================
[00:00:06.627,136] <inf> sta: State: DISCONNECTED
[00:00:11.627,258] <inf> sta: ==================

What seems strange is that there are no errors, its as though it doesn't start the connection process after doing all the param config?

I am also trying to build the wifi shell with WPA2 Enterprise on NCS 3.0.0 as per the link you suggested, but currently it won't build due to some issue with the DTS for my custom board when it gets to the link:

c:/ncs/toolchains/0b393f9e1b/opt/zephyr-sdk/arm-zephyr-eabi/bin/../lib/gcc/arm-zephyr-eabi/12.2.0/../../../../arm-zephyr-eabi/bin/ld.bfd.exe: modules/nrf_wifi/bus/libnrf70-buslib.a(rpu_hw_if.c.obj): in function `rpu_init':
C:/ncs/v3.0.0/zephyr/modules/nrf_wifi/bus/rpu_hw_if.c:452: undefined reference to `__device_dts_ord_14'
c:/ncs/toolchains/0b393f9e1b/opt/zephyr-sdk/arm-zephyr-eabi/bin/../lib/gcc/arm-zephyr-eabi/12.2.0/../../../../arm-zephyr-eabi/bin/ld.bfd.exe: modules/nrf_wifi/bus/libnrf70-buslib.a(rpu_hw_if.c.obj):(.rodata.iovdd_ctrl_spec+0x0): undefined reference to `__device_dts_ord_14'
collect2.exe: error: ld returned 1 exit status

Its all a bit of a struggle...

RE: Can't get WPA2 Enterprise (EAP-TLS) to connect to wifi AP using nrf5340/nrf7002/NCS2.9.0

Marte Myrvold — Thu, 05 Jun 2025 08:20:20 GMT

Hi,

[quote user="BrianW"]Great thanks! Indeed thats quite a different set of fields in the params structure from the code I had. I'll give that a go...[/quote]

Let me know how it goes!

[quote user="BrianW"]

The difference is just in where the data (in PEM format) for the different fields comes from - in this case its statically defined in the code, yes? This net_mgmt call to set the certificates is supported in 2.9 as well?

thanks

[/quote]

Correct. With run time, the certificates are provided using Wi-Fi shell, while with compile time, the certificates are, as the name states, included in the build at compile time.

In both cases, the credentials are provided using the same method, i.e., the parameters you shared and calling the net_mgmt() command. The implementation is slightly different in v3.0.0 since the certificates can also be provided at run time, but the way they are provided is the same.

Best regards,
Marte

RE: Can't get WPA2 Enterprise (EAP-TLS) to connect to wifi AP using nrf5340/nrf7002/NCS2.9.0

BrianW — Wed, 04 Jun 2025 15:18:39 GMT

[quote userid="92402" url="~/f/nordic-q-a/121864/can-t-get-wpa2-enterprise-eap-tls-to-connect-to-wifi-ap-using-nrf5340-nrf7002-ncs2-9-0/538086"]So, to get the same as the shell command, you should set the parameters like this in the code:[/quote]

Great thanks! Indeed thats quite a different set of fields in the params structure from the code I had. I'll give that a go...

[quote userid="92402" url="~/f/nordic-q-a/121864/can-t-get-wpa2-enterprise-eap-tls-to-connect-to-wifi-ap-using-nrf5340-nrf7002-ncs2-9-0/538086"]I mean changing the certificates at run time in general. The guide I linked explains how to install the certificates during compile time and run time. Support for installing the certificates was added in nRF Connect SDK v3.0.0. If you are using an older version, you need to follow the compile time guide.[/quote]

Ok. I think in both cases they use this net_mgmt() command:

struct wifi_enterprise_creds_params enterprise_creds_params={0};

enterprise_creds_params.ca_cert = _ca_cert;

enterprise_creds_params.ca_cert_len = sizeof(_ca_cert);

enterprise_creds_params.client_cert = _client_cert;

enterprise_creds_params.client_cert_len = sizeof(_client_cert);

enterprise_creds_params.client_key = _client_key;

enterprise_creds_params.client_key_len = sizeof(_client_key);

int retreq = net_mgmt(NET_REQUEST_WIFI_ENTERPRISE_CREDS, iface, &enterprise_creds_params, sizeof(struct wifi_enterprise_creds_params));

if (retreq!=0) {

LOG_ERR("Failed to set Wi-Fi enterprise credentials: %d\n", retreq);

return false;

}

thanks

RE: Can't get WPA2 Enterprise (EAP-TLS) to connect to wifi AP using nrf5340/nrf7002/NCS2.9.0

Marte Myrvold — Wed, 04 Jun 2025 14:01:59 GMT

Hi,

[quote user="BrianW"]Do you have a C code connection params setup example (like my setup code above, but that does the certificate setup as well?)[/quote]

You can look at how the __wifi_args_to_params() function is implemented in the shell code: https://github.com/nrfconnect/sdk-zephyr/blob/v4.0.99-ncs1/subsys/net/l2/wifi/wifi_shell.c#L777.

The arguments in this shell command:

wifi connect -s <SSID> -k 7 -a anon -K whatever -S 2 -w 2

Corresponds to these parameters:

params->security = WIFI_SECURITY_TYPE_EAP; // 7
params->mfp = WIFI_MFP_REQUIRED; // 2
params->anon_id = ANON_ID;
params->aid_length = strlen(params->anon_id);
params->key2_passwd = KEY2_PASSWD;
params->key2_passwd_length = strlen(params->key2_passwd);
params->suiteb_type = WIFI_SUITEB_192; // 2

So, to get the same as the shell command, you should set the parameters like this in the code:

static int __wifi_params_wpa2eap(struct wifi_connect_req_params *params)
{

    params->timeout =  CONFIG_STA_CONN_TIMEOUT_SEC * MSEC_PER_SEC;

    if (params->timeout == 0) {
        params->timeout = SYS_FOREVER_MS;
    }

    /* Defaults */
    params->band = WIFI_FREQ_BAND_UNKNOWN;
    params->channel = WIFI_CHANNEL_ANY;
    params->security = WIFI_SECURITY_TYPE_EAP; // 7
    params->mfp = WIFI_MFP_REQUIRED; // 2

    /* SSID */
    params->ssid =STA_SSID;
    params->ssid_length = strlen(params->ssid);

    params->anon_id = ANON_ID;
	params->aid_length = strlen(params->anon_id);
	params->key2_passwd = KEY2_PASSWD;
	params->key2_passwd_length = strlen(params->key2_passwd);
	params->suiteb_type = WIFI_SUITEB_192; // 2

    return 0;
}

[quote user="BrianW"]Do you mean in the shell sample?[/quote]

I mean changing the certificates at run time in general. The guide I linked explains how to install the certificates during compile time and run time. Support for installing the certificates was added in nRF Connect SDK v3.0.0. If you are using an older version, you need to follow the compile time guide.

Best regards,
Marte

RE: Can't get WPA2 Enterprise (EAP-TLS) to connect to wifi AP using nrf5340/nrf7002/NCS2.9.0

BrianW — Tue, 03 Jun 2025 10:35:57 GMT

[quote userid="134465" url="~/f/nordic-q-a/121864/can-t-get-wpa2-enterprise-eap-tls-to-connect-to-wifi-ap-using-nrf5340-nrf7002-ncs2-9-0/537671"]Please note that run time certificates are only supported in v3.0.0 and later.[/quote]

Do you mean in the shell sample?

Anyway, I have updated the code to set the rootCA for the Radius server, and the client certificate, key and key password.

Certificates (static in the code for now) : PEM format

static char _ca_cert[] = "-----BEGIN CERTIFICATE-----"

"MIIDdzCCAl+gAwIBAgIUSPHDcjKwnzJwpPNKqqJ9CZ6z8y0wDQYJKoZIhvcNAQEL"

"BQAwSzELMAkGA1UEBhMCRlIxEjAQBgNVBAgMCUZpbmlzdGVyZTERMA8GA1UECgwI"

"SW5mcmFmb24xFTATBgNVBAMMDGluZnJhZm9uLmNvbTAeFw0yNTA2MDMwODU5MzRa"

"Fw0yNTA3MDMwODU5MzRaMEsxCzAJBgNVBAYTAkZSMRIwEAYDVQQIDAlGaW5pc3Rl"

"cmUxETAPBgNVBAoMCEluZnJhZm9uMRUwEwYDVQQDDAxpbmZyYWZvbi5jb20wggEi"

"MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIsfqHWTOvEbipYL/ReZGcuYZ/"

"QTtzdqZvOUE10121QDM9yCIEN1xzcq16Dlfs+HmrXSFmHSZhMK2xrnd59DzuyDq5"

"snQg2BPfEJUqxDJg+ON055j57GXp8dUKZrCY9VSZa17jtJHYThYZpUoxqDjFlWvO"

"Shqcw/9rkf3z+/6nCF1uNV7vwife4mo1okY4SNUuxPBiEhZBZOg6d5Ydb0fxsxYj"

"qMN+vu3ELHPnHzzcEMzY/iA5qahPigACbm4NwXRrfdvTFfcqgJ43WWZr9FLlj3TO"

"5BX1HHYRerI+MhPIK/PJmQbbJy4VC91Z414XJElXAya5myMmwd8qDFc9NQqRAgMB"

"AAGjUzBRMB0GA1UdDgQWBBSNNMZnwGIr73sGUr5ZcccVGkD3LTAfBgNVHSMEGDAW"

"gBSNNMZnwGIr73sGUr5ZcccVGkD3LTAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3"

"DQEBCwUAA4IBAQBOyrJ2iQpkycm0gsL+Z/Ueu3BA1sUGUC3cbIeluuPybzmsjTrA"

"dqnaymJJbcRz+Ge39VpZpeVrQO5IwVLAWrzg2Vyyyv5uOdf2VjakfUlneAF0U+zK"

"nZaaaLdwjj93wV14U+8JGF1Lb6Q41+fjQ5eIF/1OtV4gI8G9qQ46TwTsR+DSkKol"

"Z/5AOWkg4TarfKzghS7O6llwV+mfwXKQtsQbGQVhscXKRsAVPE/OaqkYCSXgLRTf"

"5pcYCeRky/fhUJV6BKy4VLac40u5luKOGSjNV4Ycnqr0o4vIexuPCKw21cCpGqnk"

"11Y85cQqpF2DzU7gFW/ovVGl2ygcjjjeVg3V"

"-----END CERTIFICATE-----"

"";

static char _client_cert[] = "-----BEGIN CERTIFICATE-----"

"MIIDKDCCAhACFA36ysYJv6exm5n1jADbn3MLNCyrMA0GCSqGSIb3DQEBCwUAMEsx"

"CzAJBgNVBAYTAkZSMRIwEAYDVQQIDAlGaW5pc3RlcmUxETAPBgNVBAoMCEluZnJh"

"Zm9uMRUwEwYDVQQDDAxpbmZyYWZvbi5jb20wHhcNMjUwNjAzMDkxMDA5WhcNMjUw"

"NzAzMDkxMDA5WjBWMQswCQYDVQQGEwJGUjESMBAGA1UECAwJRmluaXN0ZXJlMREw"

"DwYDVQQKDAhJbmZyYWZvbjENMAsGA1UECwwEVGVzdDERMA8GA1UEAwwIY2MyLTAw"

"NGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7bN5Jy8kx7z3LU/qH"

"IO1+QR/hjtx3sHQKp4ni6m+Mqv/PElxWEaxx8D3NThMmftGvDEbkDaV1G10KZODL"

"maY0ExsUnaTewgk+nBs0rMfsJnbhxMBiaFstHYKPsqAF4JtvdKfTN05BkHDDHULI"

"5N5DXP2Orty2Lh5866JfNywmDbcamDrbp1TcpJL7atc7ukrkPwZZU0tA9YAnkeYj"

"sd9R/TUNA7UEo7wb4a+r+xiv+ECrzK5KJz+icYgQPbF52PFVrJX8rG/PrSqZGsr9"

"XhWoZF7MzlmYRmqZijbB0khVHFn0x5lsXYyQL+5AXeoF/SbPFC65/qLdWTZSXWrr"

"5RFdAgMBAAEwDQYJKoZIhvcNAQELBQADggEBAIai4nNCWtX+94jeX00a36qUffPW"

"+neYi3aVZU9xestlvLhjhSf9bU5MO7w8JnRQaIzd2jh3NV+Ab4Yizrn7Zmr3bARY"

"VPs1Uswf2HHoS5YIJqF/us6Px1wljNWi7hspyPpwFKPIWMXvMfAO4ZT+5mQ7ksYR"

"aS3MuervINOwa166Sb64JgwQ9bWabKX14Wj03/VrVIkxzVzQjVsFFEH9abepao7w"

"WQhxl3Sl+dFHH0IuGMC2cABhW69EynsF7LxvKZwFhgksVblHubOg6Ekq2KI79Mj8"

"Su1KG4PXt8UX0scIn2Z8amxIHj+t2jz5+IYw0MDPHYtBMm9MPZkOBqmG1bk="

"-----END CERTIFICATE-----"

"";

static char _client_key[] = "-----BEGIN RSA PRIVATE KEY-----"

"Proc-Type: 4,ENCRYPTED"

"DEK-Info: DES-EDE3-CBC,5BD79331E8C31EE0"

"dBjnzKTP9Ww1RSJYxgExTmMvPKb2iWPjNw6tYbzXS+LrvecHZ7rhb9zUq3Giouwq"

"PJ0Hv2XC8gzWqHvcaXHNytOYlvPzVMJqeoK3HRgTJi5v4ywBj73/Q9uKXPOQ1sFY"

"N81ZJjIBDuGk0xMtlP4UJ6qGXrgEUzo/HgXN0mtdqDt8OFiVq9J1PztiYBCn0vpj"

"VYBnwPCkBF/nngxMPKjsbWhFRXnANkwWluRI+R2fH+JjrYEars2LVThidWjCx3ej"

"9Y9Ih9yE217/+ONWBDCgjs8Dh+rgMnvMsA13siwLfyXRfZvoC0Lymt17dvsDiaAc"

"FTDB9gNtUh7ZnNoQ/7outlgcn9cRTAHVjq2dG5qO5KBwFCmU5RYBGK1uu43lpuL/"

"08pGvCwJ7u4UCoLjk7Q68kAcBqCmqPX3Y9Qk4zgVMeXOeiA969t4VbNaUNq2ri2q"

"fxH0Lbl34b3FGt/F9j9bCYdYak0V0846bC8jCOT5dMwz05bBvG1+5Erw2NCk9k2L"

"B9ovTQeLdchFoJNrl9nPkh0ipxvtlyzyJLvKjJ0RGJJytkAbI173+OM7cQgsq1uz"

"iOrY/f/cKEzyltpISZfARPmpzh/HflIGiiqpsv//0ITIl2X40RyNBXU7iTVKoMob"

"4yuNDVQCoOXjyosJ6rir9Ou39BWY0qiY5njyXHrannMmjCeN9xcIztEN1TF1m6+Z"

"znqhkc8e+fQlPIVNM15wH+WEw5egZSUWMDU3g8AsxiLxiRe/zdTnpXe+0hbAH4s+"

"7iYes1/yD2p0rOTAh3Sg0htBXnUUK6M/OXTtcantG1SmwvENSV13rPXsTTnPhgIl"

"GdGg/jGjW23iU6ztEkKEO/2v5+5wFNmFFrDAY5Pl3jElnoFwEnnA/n8ndCfboB+r"

"wQJYrrU8WP1BsaEFrdU/yZuHqfO9Z3fFG/BqPUTe9MGksJF921ID3fDTdeo8RGY3"

"leuDjiXRISgEc8a7BE0NYnkNnMMkKNkfa0zbgRJMg9NfJjNh+MsvesDUexwEgUOK"

"2eRvVuXcyhFZ+SyN3ijY7EmGAGgCMI9FEQ+HbOZa+nQeUw1Rks8vZPYHPdHPYfac"

"Hn+DyGZ4tpeMFEIzdjennEwEQj7uW7kB5eZvWp7kTpXbxZMI785ZGnS2Pfe1V9v5"

"y6+PGvuBvkSdIKwtQDXyAd8WdnjVmBpfb/kFbpWqC8PytPr1bsMd6YPyaNo6pP/8"

"fLmZ103gO5PFYathFRCV2/W/xsjunvLC1jt+og6iSzxzboFDhpO6Y2M6RsTjhk4c"

"ybKfNt0UbLH5LW1+XYdqdLGSecefe6NBq/OWxkhXs9Om79Sv1+1qPoajVe+oIB2B"

"MxcR78V8eE3OoymAT7mWAqiGokukFtMEaHbtkZtjBOEkLvVdiSG6y4uS2c6yE/e0"

"chLwuCNgIa+uoHVh5Osc70RlRbhfkxzR3rkZxDeniIxCokO6iIi12l357mja2TM0"

"uE8D2QMc16nvg9IsFy7bMc5Ehf6TSEmAfDhHTGDmpEEK/lEqIUSH0QeGVXh8w6ge"

"Viy3qzpFg9ddjGIXl2TJt8nrWMqdMFvZMrHGKXRKujXLsctEB5FbeQ=="

"-----END RSA PRIVATE KEY-----"

"";

struct wifi_enterprise_creds_params enterprise_creds_params={0};

enterprise_creds_params.ca_cert = _ca_cert;

enterprise_creds_params.ca_cert_len = sizeof(_ca_cert);

enterprise_creds_params.client_cert = _client_cert;

enterprise_creds_params.client_cert_len = sizeof(_client_cert);

enterprise_creds_params.client_key = _client_key;

enterprise_creds_params.client_key_len = sizeof(_client_key);

int retreq = net_mgmt(NET_REQUEST_WIFI_ENTERPRISE_CREDS, iface, &enterprise_creds_params, sizeof(struct wifi_enterprise_creds_params));

if (retreq!=0) {

LOG_ERR("Failed to set Wi-Fi enterprise credentials: %d\n", retreq);

return false;

}

LOG_INF("Wi-Fi enterprise credentials loaded and configured.");

Params setup:

params->timeout = CONFIG_STA_CONN_TIMEOUT_SEC * MSEC_PER_SEC;

if (params->timeout == 0) {

params->timeout = SYS_FOREVER_MS;

}

/* Defaults */

params->band = WIFI_FREQ_BAND_UNKNOWN;

params->channel = WIFI_CHANNEL_ANY;

params->security = WIFI_SECURITY_TYPE_NONE;

params->mfp = WIFI_MFP_OPTIONAL;

/* SSID */

params->ssid =STA_SSID;

params->ssid_length = strlen(params->ssid);

params->security = WIFI_SECURITY_TYPE_EAP_TLS;

params->key_passwd = STA_KEY_PASS;

params->key_passwd_length = strlen(params->key_passwd);

params->eap_identity = STA_IDENTITY; //"cc2-004a";

params->eap_id_length = strlen(params->eap_identity);

params->eap_password = STA_PASSWORD;

params->eap_passwd_length = strlen(params->eap_password);

[is the eap_password used, and for what?]

The logs show all this being sent to the wpa_supp via the cli, apparently without any errors when I do the connect request:

if (net_mgmt(NET_REQUEST_WIFI_CONNECT, iface,

&cnx_params, sizeof(struct wifi_connect_req_params))) {

LOG_ERR("Connection request failed");

return -ENOEXEC;

}

LOG_INF("Connection requested");

But following the request I never get anything else and the status remains as DISCONNECTED....

[00:00:00.256,561] <inf> wifi_nrf_bus: SPIM spi@a000: freq = 24 MHz
[00:00:00.256,591] <inf> wifi_nrf_bus: SPIM spi@a000: latency = 1
*** Booting nRF Connect SDK v2.9.0-7787b2649840 ***
*** Using Zephyr OS v3.7.99-1f8f3dc29142 ***
[00:00:00.470,520] <inf> sta: Starting cc2v1 with CPU frequency: 64 MHz
[00:00:00.470,703] <dbg> wpa_supp: wpa_printf_impl: wpa_supplicant v2.11-devel
[00:00:00.470,916] <inf> wifi_supplicant: wpa_supplicant initialized
[00:00:00.471,313] <dbg> wifi_supplicant: add_interface: Adding interface wlan0 [1] (0x200029b0)
[00:00:00.471,405] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: interface_add, argc: 5
[00:00:00.471,435] <dbg> wpa_supp: wpa_printf_impl: argv[0]: interface_add
[00:00:00.471,496] <dbg> wpa_supp: wpa_printf_impl: argv[1]: wlan0
[00:00:00.471,527] <dbg> wpa_supp: wpa_printf_impl: argv[2]: zephyr
[00:00:00.471,588] <dbg> wpa_supp: wpa_printf_impl: argv[3]: zephyr
[00:00:00.471,618] <dbg> wpa_supp: wpa_printf_impl: argv[4]: zephyr
[00:00:00.471,984] <dbg> wpa_supp: wpa_printf_impl: RX global ctrl_iface - hexdump_ascii(len=71):
[00:00:00.472,015] <dbg> wpa_supp: _wpa_hexdump_ascii:
                                   49 4e 54 45 52 46 41 43  45 5f 41 44 44 20 77 6c |INTERFAC E_ADD wl
                                   61 6e 30 09 7a 65 70 68  79 72 09 7a 65 70 68 79 |an0.zeph yr.zephy
                                   72 09 7a 65 70 68 79 72  09 09 09 09 20 77 6c 61 |r.zephyr .... wla
                                   6e 30 20 7a 65 70 68 79  72 20 7a 65 70 68 79 72 |n0 zephy r zephyr
                                   20 7a 65 70 68 79 72                             | zephyr
[00:00:00.472,076] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE GLOBAL INTERFACE_ADD 'wlan0      zephyr  zephyr  zephyr                           wlan0 zephyr zephyr zephyr'
[00:00:00.472,229] <dbg> wpa_supp: wpa_printf_impl: Initializing interface 'wlan0' conf 'zephyr' driver 'zephyr' ctrl_interface 'zephyr' bridge 'N/A'
[00:00:00.474,090] <dbg> wpa_supp: wpa_printf_impl: Add interface wlan0 to a new radio N/A
[00:00:00.477,447] <dbg> wpa_supp: wpa_printf_impl: wpa_supp: Added 802.11b mode based on 802.11g information
[00:00:00.477,630] <dbg> wpa_supp: wpa_printf_impl: l2_packet_init: iface wlan0 ifindex 1
[00:00:00.477,813] <dbg> wpa_supp: wpa_printf_impl: wlan0: Own MAC address: f0:ce:37:00:00:4a
[00:00:00.477,935] <dbg> wpa_supp: wpa_printf_impl: _wpa_drv_zep_set_key: priv:0x2000b448 alg 0 addr 0x0 key_idx 0 set_tx 0 seq 0x0 seq_len 0 key 0x0 key_len 0 key_flag 10
[00:00:00.481,414] <dbg> wpa_supp: wpa_printf_impl: _wpa_drv_zep_set_key: priv:0x2000b448 alg 0 addr 0x0 key_idx 1 set_tx 0 seq 0x0 seq_len 0 key 0x0 key_len 0 key_flag 10
[00:00:00.483,612] <dbg> wpa_supp: wpa_printf_impl: _wpa_drv_zep_set_key: priv:0x2000b448 alg 0 addr 0x0 key_idx 2 set_tx 0 seq 0x0 seq_len 0 key 0x0 key_len 0 key_flag 10
[00:00:00.485,809] <dbg> wpa_supp: wpa_printf_impl: _wpa_drv_zep_set_key: priv:0x2000b448 alg 0 addr 0x0 key_idx 3 set_tx 0 seq 0x0 seq_len 0 key 0x0 key_len 0 key_flag 10
[00:00:00.487,976] <dbg> wpa_supp: wpa_printf_impl: _wpa_drv_zep_set_key: priv:0x2000b448 alg 0 addr 0x0 key_idx 4 set_tx 0 seq 0x0 seq_len 0 key 0x0 key_len 0 key_flag 10
[00:00:00.490,051] <dbg> wpa_supp: wpa_printf_impl: _wpa_drv_zep_set_key: priv:0x2000b448 alg 0 addr 0x0 key_idx 5 set_tx 0 seq 0x0 seq_len 0 key 0x0 key_len 0 key_flag 10
[00:00:00.493,469] <dbg> wpa_supp: wpa_printf_impl: wlan0: RSN: flushing PMKID list in the driver
[00:00:00.493,591] <dbg> wpa_supp: wpa_printf_impl: wlan0: State: DISCONNECTED -> INACTIVE
[00:00:00.555,755] <dbg> wpa_supp: wpa_printf_impl: EAPOL: SUPP_PAE entering state DISCONNECTED
[00:00:00.555,786] <dbg> wpa_supp: wpa_printf_impl: EAPOL: Supplicant port status: Unauthorized
[00:00:00.566,650] <dbg> wpa_supp: wpa_printf_impl: EAPOL: KEY_RX entering state NO_KEY_RECEIVE
[00:00:00.566,711] <dbg> wpa_supp: wpa_printf_impl: EAPOL: SUPP_BE entering state INITIALIZE
[00:00:00.566,741] <dbg> wpa_supp: wpa_printf_impl: EAP: EAP entering state DISABLED
[00:00:00.567,138] <dbg> wpa_supp: wpa_printf_impl: wlan0: Added interface wlan0
[00:00:00.567,260] <dbg> wpa_supp: wpa_printf_impl: wlan0: State: INACTIVE -> DISCONNECTED
[00:00:01.470,581] <inf> sta: Wi-Fi enterprise credentials loaded and configured.
[00:00:01.470,703] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: remove_network, argc: 2
[00:00:01.470,733] <dbg> wpa_supp: wpa_printf_impl: argv[0]: remove_network
[00:00:01.470,764] <dbg> wpa_supp: wpa_printf_impl: argv[1]: all
[00:00:01.471,130] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'REMOVE_NETWORK all'
[00:00:01.471,252] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: REMOVE_NETWORK all
[00:00:01.471,740] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'ADD_NETWORK'
[00:00:01.471,862] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: ADD_NETWORK
[00:00:01.472,351] <dbg> wpa_supp: wpa_printf_impl: Received len: 26, msg_len:26 - CTRL-EVENT-NETWORK-ADDED 0->END
[00:00:01.472,717] <dbg> wpa_supp: wpa_printf_impl: NET added: 0
[00:00:01.472,808] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: set_network, argc: 4
[00:00:01.472,839] <dbg> wpa_supp: wpa_printf_impl: argv[0]: set_network
[00:00:01.472,900] <dbg> wpa_supp: wpa_printf_impl: argv[1]: 0
[00:00:01.472,930] <dbg> wpa_supp: wpa_printf_impl: argv[2]: ssid
[00:00:01.472,991] <dbg> wpa_supp: wpa_printf_impl: argv[3]: "kiosk_wpa2_ent"
[00:00:01.473,358] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'SET_NETWORK [REMOVED]'
[00:00:01.473,510] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: SET_NETWORK id=0 name='ssid'
[00:00:01.473,571] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: value - hexdump_ascii(len=16): [REMOVED]
[00:00:01.473,663] <dbg> wpa_supp: wpa_printf_impl: ssid - hexdump_ascii(len=14):
[00:00:01.473,663] <dbg> wpa_supp: _wpa_hexdump_ascii:
                                   6b 69 6f 73 6b 5f 77 70  61 32 5f 65 6e 74       |kiosk_wp a2_ent
[00:00:01.473,937] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: set_network, argc: 4
[00:00:01.473,999] <dbg> wpa_supp: wpa_printf_impl: argv[0]: set_network
[00:00:01.474,029] <dbg> wpa_supp: wpa_printf_impl: argv[1]: 0
[00:00:01.474,090] <dbg> wpa_supp: wpa_printf_impl: argv[2]: scan_ssid
[00:00:01.474,121] <dbg> wpa_supp: wpa_printf_impl: argv[3]: 1
[00:00:01.474,517] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'SET_NETWORK [REMOVED]'
[00:00:01.474,639] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: SET_NETWORK id=0 name='scan_ssid'
[00:00:01.474,700] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: value - hexdump_ascii(len=1): [REMOVED]
[00:00:01.474,761] <dbg> wpa_supp: wpa_printf_impl: scan_ssid=1 (0x1)
[00:00:01.475,036] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: set_network, argc: 4
[00:00:01.475,097] <dbg> wpa_supp: wpa_printf_impl: argv[0]: set_network
[00:00:01.475,128] <dbg> wpa_supp: wpa_printf_impl: argv[1]: 0
[00:00:01.475,189] <dbg> wpa_supp: wpa_printf_impl: argv[2]: key_mgmt
[00:00:01.475,219] <dbg> wpa_supp: wpa_printf_impl: argv[3]: NONE
[00:00:01.475,616] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'SET_NETWORK [REMOVED]'
[00:00:01.475,738] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: SET_NETWORK id=0 name='key_mgmt'
[00:00:01.475,799] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: value - hexdump_ascii(len=4): [REMOVED]
[00:00:01.475,891] <dbg> wpa_supp: wpa_printf_impl: key_mgmt: 0x4
[00:00:01.476,165] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: set_network, argc: 4
[00:00:01.476,226] <dbg> wpa_supp: wpa_printf_impl: argv[0]: set_network
[00:00:01.476,257] <dbg> wpa_supp: wpa_printf_impl: argv[1]: 0
[00:00:01.476,287] <dbg> wpa_supp: wpa_printf_impl: argv[2]: ieee80211w
[00:00:01.476,348] <dbg> wpa_supp: wpa_printf_impl: argv[3]: 0
[00:00:01.476,715] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'SET_NETWORK [REMOVED]'
[00:00:01.476,867] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: SET_NETWORK id=0 name='ieee80211w'
[00:00:01.476,928] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: value - hexdump_ascii(len=1): [REMOVED]
[00:00:01.477,081] <dbg> wpa_supp: wpa_printf_impl: ieee80211w=0 (0x0)
[00:00:01.477,355] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: set_network, argc: 4
[00:00:01.477,386] <dbg> wpa_supp: wpa_printf_impl: argv[0]: set_network
[00:00:01.477,447] <dbg> wpa_supp: wpa_printf_impl: argv[1]: 0
[00:00:01.477,478] <dbg> wpa_supp: wpa_printf_impl: argv[2]: proto
[00:00:01.477,539] <dbg> wpa_supp: wpa_printf_impl: argv[3]: RSN
[00:00:01.477,905] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'SET_NETWORK [REMOVED]'
[00:00:01.478,057] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: SET_NETWORK id=0 name='proto'
[00:00:01.478,118] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: value - hexdump_ascii(len=3): [REMOVED]
[00:00:01.478,179] <dbg> wpa_supp: wpa_printf_impl: proto: 0x2
[00:00:01.478,485] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: set_network, argc: 4
[00:00:01.478,515] <dbg> wpa_supp: wpa_printf_impl: argv[0]: set_network
[00:00:01.478,546] <dbg> wpa_supp: wpa_printf_impl: argv[1]: 0
[00:00:01.478,607] <dbg> wpa_supp: wpa_printf_impl: argv[2]: key_mgmt
[00:00:01.478,637] <dbg> wpa_supp: wpa_printf_impl: argv[3]: WPA-EAP
[00:00:01.479,034] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'SET_NETWORK [REMOVED]'
[00:00:01.479,156] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: SET_NETWORK id=0 name='key_mgmt'
[00:00:01.479,217] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: value - hexdump_ascii(len=7): [REMOVED]
[00:00:01.479,309] <dbg> wpa_supp: wpa_printf_impl: key_mgmt: 0x1
[00:00:01.479,583] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: set, argc: 3
[00:00:01.479,644] <dbg> wpa_supp: wpa_printf_impl: argv[0]: set
[00:00:01.479,675] <dbg> wpa_supp: wpa_printf_impl: argv[1]: openssl_ciphers
[00:00:01.479,736] <dbg> wpa_supp: wpa_printf_impl: argv[2]: "DEFAULT:!EXP:!LOW"
[00:00:01.480,133] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'SET openssl_ciphers "DEFAULT:!EXP:!LOW"'
[00:00:01.480,224] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE SET 'openssl_ciphers'='"DEFAULT:!EXP:!LOW"'
[00:00:01.480,346] <dbg> wpa_supp: wpa_printf_impl: openssl_ciphers='"DEFAULT:!EXP:!LOW"'
[00:00:01.480,621] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: set_network, argc: 4
[00:00:01.480,682] <dbg> wpa_supp: wpa_printf_impl: argv[0]: set_network
[00:00:01.480,712] <dbg> wpa_supp: wpa_printf_impl: argv[1]: 0
[00:00:01.480,743] <dbg> wpa_supp: wpa_printf_impl: argv[2]: group
[00:00:01.480,804] <dbg> wpa_supp: wpa_printf_impl: argv[3]: CCMP
[00:00:01.481,170] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'SET_NETWORK [REMOVED]'
[00:00:01.481,323] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: SET_NETWORK id=0 name='group'
[00:00:01.481,384] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: value - hexdump_ascii(len=4): [REMOVED]
[00:00:01.481,475] <dbg> wpa_supp: wpa_printf_impl: group: 0x10
[00:00:01.481,750] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: set_network, argc: 4
[00:00:01.481,781] <dbg> wpa_supp: wpa_printf_impl: argv[0]: set_network
[00:00:01.481,842] <dbg> wpa_supp: wpa_printf_impl: argv[1]: 0
[00:00:01.481,872] <dbg> wpa_supp: wpa_printf_impl: argv[2]: pairwise
[00:00:01.481,933] <dbg> wpa_supp: wpa_printf_impl: argv[3]: CCMP
[00:00:01.482,299] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'SET_NETWORK [REMOVED]'
[00:00:01.482,452] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: SET_NETWORK id=0 name='pairwise'
[00:00:01.482,513] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: value - hexdump_ascii(len=4): [REMOVED]
[00:00:01.482,604] <dbg> wpa_supp: wpa_printf_impl: pairwise: 0x10
[00:00:01.482,879] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: set_network, argc: 4
[00:00:01.482,910] <dbg> wpa_supp: wpa_printf_impl: argv[0]: set_network
[00:00:01.482,971] <dbg> wpa_supp: wpa_printf_impl: argv[1]: 0
[00:00:01.483,001] <dbg> wpa_supp: wpa_printf_impl: argv[2]: group_mgmt
[00:00:01.483,062] <dbg> wpa_supp: wpa_printf_impl: argv[3]: AES-128-CMAC
[00:00:01.483,489] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'SET_NETWORK [REMOVED]'
[00:00:01.483,612] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: SET_NETWORK id=0 name='group_mgmt'
[00:00:01.483,673] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: value - hexdump_ascii(len=12): [REMOVED]
[00:00:01.483,795] <dbg> wpa_supp: wpa_printf_impl: group_mgmt: 0x20
[00:00:01.484,069] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: set_network, argc: 4
[00:00:01.484,130] <dbg> wpa_supp: wpa_printf_impl: argv[0]: set_network
[00:00:01.484,161] <dbg> wpa_supp: wpa_printf_impl: argv[1]: 0
[00:00:01.484,191] <dbg> wpa_supp: wpa_printf_impl: argv[2]: proto
[00:00:01.484,252] <dbg> wpa_supp: wpa_printf_impl: argv[3]: RSN
[00:00:01.484,649] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'SET_NETWORK [REMOVED]'
[00:00:01.484,771] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: SET_NETWORK id=0 name='proto'
[00:00:01.484,832] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: value - hexdump_ascii(len=3): [REMOVED]
[00:00:01.485,168] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: set_network, argc: 4
[00:00:01.485,198] <dbg> wpa_supp: wpa_printf_impl: argv[0]: set_network
[00:00:01.485,260] <dbg> wpa_supp: wpa_printf_impl: argv[1]: 0
[00:00:01.485,290] <dbg> wpa_supp: wpa_printf_impl: argv[2]: eap
[00:00:01.485,321] <dbg> wpa_supp: wpa_printf_impl: argv[3]: TLS
[00:00:01.485,717] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'SET_NETWORK [REMOVED]'
[00:00:01.485,870] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: SET_NETWORK id=0 name='eap'
[00:00:01.485,931] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: value - hexdump_ascii(len=3): [REMOVED]
[00:00:01.486,236] <dbg> wpa_supp: wpa_printf_impl: eap methods - hexdump(len=16): 00 00 00 00 0d 00 00 00 00 00 00 00 00 00 00 00
[00:00:01.486,541] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: set_network, argc: 4
[00:00:01.486,602] <dbg> wpa_supp: wpa_printf_impl: argv[0]: set_network
[00:00:01.486,633] <dbg> wpa_supp: wpa_printf_impl: argv[1]: 0
[00:00:01.486,694] <dbg> wpa_supp: wpa_printf_impl: argv[2]: identity
[00:00:01.486,724] <dbg> wpa_supp: wpa_printf_impl: argv[3]: "cc2-004a"
[00:00:01.487,121] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'SET_NETWORK [REMOVED]'
[00:00:01.487,274] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: SET_NETWORK id=0 name='identity'
[00:00:01.487,335] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: value - hexdump_ascii(len=10): [REMOVED]
[00:00:01.487,426] <dbg> wpa_supp: wpa_printf_impl: identity - hexdump_ascii(len=8):
[00:00:01.487,457] <dbg> wpa_supp: _wpa_hexdump_ascii:
                                   63 63 32 2d 30 30 34 61                          |cc2-004a
[00:00:01.487,762] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: set_network, argc: 4
[00:00:01.487,792] <dbg> wpa_supp: wpa_printf_impl: argv[0]: set_network
[00:00:01.487,854] <dbg> wpa_supp: wpa_printf_impl: argv[1]: 0
[00:00:01.487,884] <dbg> wpa_supp: wpa_printf_impl: argv[2]: password
[00:00:01.487,945] <dbg> wpa_supp: wpa_printf_impl: argv[3]: "infrafon-2022"
[00:00:01.488,311] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'SET_NETWORK [REMOVED]'
[00:00:01.488,464] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: SET_NETWORK id=0 name='password'
[00:00:01.488,525] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: value - hexdump_ascii(len=15): [REMOVED]
[00:00:01.488,647] <dbg> wpa_supp: wpa_printf_impl: password - hexdump_ascii(len=13): [REMOVED]
[00:00:01.488,952] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: set_network, argc: 4
[00:00:01.488,983] <dbg> wpa_supp: wpa_printf_impl: argv[0]: set_network
[00:00:01.489,044] <dbg> wpa_supp: wpa_printf_impl: argv[1]: 0
[00:00:01.489,074] <dbg> wpa_supp: wpa_printf_impl: argv[2]: anonymous_identity
[00:00:01.489,135] <dbg> wpa_supp: wpa_printf_impl: argv[3]: "(null)"
[00:00:01.489,532] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'SET_NETWORK [REMOVED]'
[00:00:01.489,654] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: SET_NETWORK id=0 name='anonymous_identity'
[00:00:01.489,715] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: value - hexdump_ascii(len=8): [REMOVED]
[00:00:01.489,837] <dbg> wpa_supp: wpa_printf_impl: anonymous_identity - hexdump_ascii(len=6):
[00:00:01.489,837] <dbg> wpa_supp: _wpa_hexdump_ascii:
                                   28 6e 75 6c 6c 29                                |(null)
[00:00:01.490,234] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: set_network, argc: 4
[00:00:01.490,264] <dbg> wpa_supp: wpa_printf_impl: argv[0]: set_network
[00:00:01.490,325] <dbg> wpa_supp: wpa_printf_impl: argv[1]: 0
[00:00:01.490,356] <dbg> wpa_supp: wpa_printf_impl: argv[2]: ca_cert
[00:00:01.490,417] <dbg> wpa_supp: wpa_printf_impl: argv[3]: "blob://ca_cert"
[00:00:01.490,783] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'SET_NETWORK [REMOVED]'
[00:00:01.490,936] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: SET_NETWORK id=0 name='ca_cert'
[00:00:01.490,997] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: value - hexdump_ascii(len=16): [REMOVED]
[00:00:01.491,119] <dbg> wpa_supp: wpa_printf_impl: ca_cert - hexdump_ascii(len=14):
[00:00:01.491,149] <dbg> wpa_supp: _wpa_hexdump_ascii:
                                   62 6c 6f 62 3a 2f 2f 63  61 5f 63 65 72 74       |blob://c a_cert
[00:00:01.491,516] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: set_network, argc: 4
[00:00:01.491,546] <dbg> wpa_supp: wpa_printf_impl: argv[0]: set_network
[00:00:01.491,607] <dbg> wpa_supp: wpa_printf_impl: argv[1]: 0
[00:00:01.491,638] <dbg> wpa_supp: wpa_printf_impl: argv[2]: client_cert
[00:00:01.491,699] <dbg> wpa_supp: wpa_printf_impl: argv[3]: "blob://client_cert"
[00:00:01.492,095] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'SET_NETWORK [REMOVED]'
[00:00:01.492,218] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: SET_NETWORK id=0 name='client_cert'
[00:00:01.492,279] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: value - hexdump_ascii(len=20): [REMOVED]
[00:00:01.492,401] <dbg> wpa_supp: wpa_printf_impl: client_cert - hexdump_ascii(len=18):
[00:00:01.492,431] <dbg> wpa_supp: _wpa_hexdump_ascii:
                                   62 6c 6f 62 3a 2f 2f 63  6c 69 65 6e 74 5f 63 65 |blob://c lient_ce
                                   72 74                                            |rt
[00:00:01.492,828] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: set_network, argc: 4
[00:00:01.492,889] <dbg> wpa_supp: wpa_printf_impl: argv[0]: set_network
[00:00:01.492,919] <dbg> wpa_supp: wpa_printf_impl: argv[1]: 0
[00:00:01.492,980] <dbg> wpa_supp: wpa_printf_impl: argv[2]: private_key
[00:00:01.493,011] <dbg> wpa_supp: wpa_printf_impl: argv[3]: "blob://private_key"
[00:00:01.493,408] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'SET_NETWORK [REMOVED]'
[00:00:01.493,530] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: SET_NETWORK id=0 name='private_key'
[00:00:01.493,621] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: value - hexdump_ascii(len=20): [REMOVED]
[00:00:01.493,743] <dbg> wpa_supp: wpa_printf_impl: private_key - hexdump_ascii(len=18):
[00:00:01.493,743] <dbg> wpa_supp: _wpa_hexdump_ascii:
                                   62 6c 6f 62 3a 2f 2f 70  72 69 76 61 74 65 5f 6b |blob://p rivate_k
                                   65 79                                            |ey
[00:00:01.494,049] <dbg> wpa_supp: wpa_printf_impl: Calling wpa_cli: set_network, argc: 4
[00:00:01.494,110] <dbg> wpa_supp: wpa_printf_impl: argv[0]: set_network
[00:00:01.494,140] <dbg> wpa_supp: wpa_printf_impl: argv[1]: 0
[00:00:01.494,201] <dbg> wpa_supp: wpa_printf_impl: argv[2]: private_key_passwd
[00:00:01.494,232] <dbg> wpa_supp: wpa_printf_impl: argv[3]: "key_004a-2025"
[00:00:01.494,628] <dbg> wpa_supp: wpa_printf_impl: wlan0: Control interface command 'SET_NETWORK [REMOVED]'
[00:00:01.494,781] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: SET_NETWORK id=0 name='private_key_passwd'
[00:00:01.494,842] <dbg> wpa_supp: wpa_printf_impl: CTRL_IFACE: value - hexdump_ascii(len=15): [REMOVED]
[00:00:01.494,964] <dbg> wpa_supp: wpa_printf_impl: private_key_passwd - hexdump_ascii(len=13): [REMOVED]
[00:00:01.495,208] <inf> sta: Connection requested
[00:00:01.495,269] <inf> sta: ==================
[00:00:01.495,300] <inf> sta: State: DISCONNECTED
[00:00:01.566,986] <dbg> wpa_supp: wpa_printf_impl: EAPOL: disable timer tick
[00:00:01.795,410] <inf> sta: ==================

How to debug this further?

thanks

RE: Can't get WPA2 Enterprise (EAP-TLS) to connect to wifi AP using nrf5340/nrf7002/NCS2.9.0

BrianW — Mon, 02 Jun 2025 13:03:15 GMT

[quote userid="92402" url="~/f/nordic-q-a/121864/can-t-get-wpa2-enterprise-eap-tls-to-connect-to-wifi-ap-using-nrf5340-nrf7002-ncs2-9-0/537662"]I recommend updating to nRF Connect SDK v3.0.0 or later, as that version has some improvements regarding Wi-Fi enterprise.[/quote]

Ok, but that update broke my WPA-PSK operation...

Update to NCS3.0.0 broke wifi WPA2-PSK connect?

Maybe you can shed some light on that?

[quote userid="92402" url="~/f/nordic-q-a/121864/can-t-get-wpa2-enterprise-eap-tls-to-connect-to-wifi-ap-using-nrf5340-nrf7002-ncs2-9-0/537662"]

Did you enable Wi-Fi enterprise mode in prj.conf?

Fullscreen

1
CONFIG_WIFI_NM_WPA_SUPPLICANT_CRYPTO_ENTERPRISE=y
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

CONFIG_WIFI_NM_WPA_SUPPLICANT_CRYPTO_ENTERPRISE=y

I recommend testing the Wi-Fi shell sample with enterprise mode, as described in Build the nRF70 Series DK for Shell sample with Enterprise mode, to verify that you can get enterprise mode to work with your AP and board.

[/quote]

Yes, thats exactly what I was trying to do but using the (simpler) wifi sta sample, see prj.conf as included above.

[quote userid="134465" url="~/f/nordic-q-a/121864/can-t-get-wpa2-enterprise-eap-tls-to-connect-to-wifi-ap-using-nrf5340-nrf7002-ncs2-9-0"]

wifi-sta prj.conf file:

4300.prj.conf

[/quote]

[quote userid="92402" url="~/f/nordic-q-a/121864/can-t-get-wpa2-enterprise-eap-tls-to-connect-to-wifi-ap-using-nrf5340-nrf7002-ncs2-9-0/537662"]Additionally, Wi-Fi enterprise requires X.509 certificates. If you are not providing this, it might explain why it does not work. I recommend taking a look at Wi-Fi Enterprise test: X.509 Certificate management in our documentation. Please note that run time certificates are only supported in v3.0.0 and later.[/quote]

Ok... I see the wifi shell example, but its all using command lines to setup the connection. Do you have a C code connection params setup example (like my setup code above, but that does the certificate setup as well?)

thanks

RE: Can't get WPA2 Enterprise (EAP-TLS) to connect to wifi AP using nrf5340/nrf7002/NCS2.9.0

Marte Myrvold — Mon, 02 Jun 2025 12:38:03 GMT

Hi,

I recommend updating to nRF Connect SDK v3.0.0 or later, as that version has some improvements regarding Wi-Fi enterprise.

Additionally, Wi-Fi enterprise requires X.509 certificates. If you are not providing this, it might explain why it does not work. I recommend taking a look at Wi-Fi Enterprise test: X.509 Certificate management in our documentation. Please note that run time certificates are only supported in v3.0.0 and later.

Did you enable Wi-Fi enterprise mode in prj.conf?

CONFIG_WIFI_NM_WPA_SUPPLICANT_CRYPTO_ENTERPRISE=y

Best regards,
Marte