CC3200: ICE server certificate validating after disabling server authentication

what error did you get on the device? 

Hi,

Thank you for the reply.

We went to the client location and tried both with and without the certificate. 

In both cases, the device was not able to connect. The device is throwing a -102 error in the event handler.

Below are the root, intermediate and server certificate they are using on their Cisco ICE server.

They have root (RSA 2048), Intermediate certificate (RSA 2048) and server certificate(4096).

Since they are using the PEAP MSCHAP, we have installed only root ca on the device.

Root cert (RSA 2048):

Intermediate cert:

Server certificate (RSA 4096):

Does CC3200 support this kind of network? Can we bypass certificate to make it work?

Regards,

Sundar

Hi,

unfortunately the -102 (SL_ERROR_CON_MGMT_STATUS_UNSPECIFIED) doesn't provide enough info on the source of the issue.

Please provide an air (802.11) sniffer log (e.g. using wireshark) and /or NWP log (see /cfs-file/__key/communityserver-discussions-components-files/968/CC3100-_2600_-CC3200-Capture-NWP-Logs-_2D00_-Texas-Instruments-Wiki.pdf).

Are you using the latest SP?

what is the return code of the sl_WlanConnect?

br,

Kobi

Hi Kobi,

The customer has updated their SHA1 certificates to SHA2 on their ISE server.

We are using the 1.2.0 SDK version in our device and bypassing the certificate in the device. 

If I update to the 1.5.0  SDK and bypass the cert, will it fix the issue? 

We are trying to get the NWP logs from the client. 

Regards,

Sundar

i'm not sure what is the source of the problem. we need to see logs (hopefully the NWP log will be good enough)