• State Resolved
  • Locked Locked
  • Replies 7 replies
  • Subscribers 42 subscribers
  • Views 1539 views
  • Users 0 members are here
Support feedback
Options
Options
Related

This thread has been locked.

If you have a related question, please click the "Ask a related question" button in the top right corner. The newly created question will be automatically linked to this question.

CC3100 Enterprise Network Connection Issue

Emrys Maier
Guru* 97066 points
Other Parts Discussed in Thread: CC3100

Hi CC3100 experts!

I am having trouble connecting the CC3100 to an enterprise network.

I have followed the steps outlined in the release notes to disable server authentication but I am still getting the Unknown CA flag coming from the CC3100.

Am I missing something?

  • 0
    TI__Guru* 85400 points
    Hi,

    Have you downloaded the certificate onto the serial flash?

    Regards,
    Gigi Joseph.
  • 0 in reply to Joseph Gigi
    TI__Guru* 97066 points

    We downloaded the dummy certificate that comes with the service pack.

  • 0 in reply to Emrys Maier
    Prodigy 60 points

    Hi,

    Here is the log and wireless trace.

    ************************* UPLOAD DUMMY CERTIFICATE ***********************************

    [18:25:36] INFO: setting break signal
    [18:25:38] INFO: detecting FTDI for device reset
    [18:25:39] INFO: connection succeeded
    [18:25:39] INFO: getting storage list
    [18:25:39] INFO: > Executing Operation: Init
    [18:25:39] INFO: reading version info
    [18:25:39] INFO: DEVICE CC3100 ES1.33
    [18:25:39] INFO: reading version info
    [18:25:41] INFO: > Executing Operation: Program
    [18:25:41] INFO: > File name: /sys/mcuimg.bin, Update: false, Erase: false
    [18:25:41] INFO: > File name: /cert/ca.pem, Update: true, Erase: true
    [18:25:41] INFO: > Erase File: /cert/ca.pem
    [18:25:41] INFO: erasing file "/cert/ca.pem"
    [18:25:41] INFO: deleting file "/cert/ca.pem"
    [18:25:41] INFO: erase file completed
    [18:25:41] INFO: > Size of file = 1310
    [18:25:41] INFO: > Update File: /cert/ca.pem
    [18:25:41] INFO: Downloading file "/cert/ca.pem" with size 1310
    [18:25:41] INFO: New Token is 0x0
    [18:25:41] INFO: Download complete
    [18:25:41] INFO: Verifying Data...
    [18:25:41] INFO: get file
    [18:25:41] INFO: Done. Reading 1310 bytes
    [18:25:41] INFO: Verification OK
    [18:25:42] INFO: > Updated Token value: 0x0

    *******************************************************************************************


    **************** RUN THIS CODE **********************************
    SlSecParamsExt_t eapParams;
    SlSecParams_t g_SecParams;
    long lRetVal = -1;
    eapParams.EapMethod = SL_ENT_EAP_METHOD_PEAP0_MSCHAPv2;
    eapParams.User = USER_NAME;
    eapParams.UserLen = strlen((const char *)eapParams.User);
    eapParams.AnonUserLen = 0;
    g_SecParams.Key = PASSWORD;
    g_SecParams.KeyLen = strlen((const char *)g_SecParams.Key);
    g_SecParams.Type = SL_SEC_TYPE_WPA_ENT;

    // add these codes as suggested in the release note
    unsigned char pValues;
    pValues = 0; //0 - Disable the server authentication | 1 - Enable (this is the default)
    sl_WlanSet(SL_WLAN_CFG_GENERAL_PARAM_ID,19,1,&pValues);

    lRetVal = sl_WlanConnect(ENT_NAME,strlen(ENT_NAME),NULL,&g_SecParams, &eapParams);
    ASSERT_ON_ERROR(lRetVal);
    printf("Connecting to AP %s...\n", ENT_NAME );
    /* Wait */
    while((!IS_CONNECTED(g_Status)) || (!IS_IP_ACQUIRED(g_Status)));
    *******************************************************************************************


    ************************************* CONNECT TO AP ***************************************

    Getting started with station application - Version 1.2.0
    Host Driver Version: 1.0.0.10
    Build Version 2.5.99.2.31.1.4.0.1.1.0.3.34
    Device is configured in default state
    Device started as STATION
    Connecting to AP alertDev0...
    (hangs here waiting to connect to AP)

    *******************************************************************************************

  • 0 in reply to Emrys Maier
    TI__Mastermind 26205 points
    Hi Emrys,

    Which certificate you are referring to here? We don't provide any certificate with service pack.

    The error indicates the invalid certificate for enterprise network connection. You should the get the certificate from the admin of the network you are trying to connect to.

    Regards,
    Ankur
  • 0 in reply to Ankur Baranwal
    Prodigy 60 points

    Hi,

    The dummy certificate comes with the 1.0.0.10-2.5.99.2-Beta service pack and its usage is to disable server authentication as mentioned here in the release notes: 

  • 0 in reply to Duy Pham24
    TI__Mastermind 26205 points

    Hi,

    We have found the issue.

    Please use the following code.

    _u32   pValues;

pValues = 0; //0 - Disable the server authentication | 1 - Enable (this is the default)
sl_WlanSet(SL_WLAN_CFG_GENERAL_PARAM_ID,19,sizeof(pValues), (const _u8*) &pValues);

    just before calling sl_WlanConnect().

    Also the dummy certificate needs to be flashed at "/cert/ca.pem"

    Regards,

    Ankur

  • 0 in reply to Ankur Baranwal
    Prodigy 60 points

    that does it! Thank you so much.