Arif Alam
c27b015a63
est_client: fix certificate issuer matching
...
Signed-off-by: Arif Alam <arif.alam@netexperience.com >
2025-08-29 22:52:28 -04:00
Arif Alam
02c2e6945b
est_client: cloud_discovery: fixup demo environment
...
Signed-off-by: Arif Alam <arif.alam@netexperience.com >
2025-08-28 21:39:54 -04:00
John Crispin
c4b3eeed81
est_client: switch to production environment
...
Signed-off-by: John Crispin <john@phrozen.org >
2025-08-11 06:36:22 +02:00
John Crispin
6ba26cba2b
est_client: add a function to validate that the CN is correct
...
cloud_discovery will not start if the CN does not match the devices serial.
an error will be written to syslog
---
Wed Aug 6 14:23:23 2025 user.notice root: ERROR
Wed Aug 6 14:23:23 2025 user.notice root: ERROR
Wed Aug 6 14:23:23 2025 user.notice root: ERROR
Wed Aug 6 14:23:23 2025 user.notice root: The certificate used has a CN that does not match the serial of the device
Wed Aug 6 14:23:23 2025 user.notice root: ERROR
Wed Aug 6 14:23:23 2025 user.notice root: ERROR
Wed Aug 6 14:23:23 2025 user.notice root: ERROR
---
Signed-off-by: John Crispin <john@phrozen.org >
2025-08-06 16:23:57 +02:00
John Crispin
b5b276bfcc
est_client: check if a cert is present inside the fwtool helper
...
This was causing devices without a birt cert being present from doing a
sysupgrade.
Signed-off-by: John Crispin <john@phrozen.org >
2025-08-06 11:03:59 +02:00
John Crispin
89a1be09d9
est_client: set 10s as the max timeout when calling the EST server
...
Signed-off-by: John Crispin <john@phrozen.org >
2025-07-21 11:35:47 +02:00
John Crispin
66df8d3946
est_client: properly populate the re-enrolled certificate
...
Fixes: WIFI-14864
Signed-off-by: John Crispin <john@phrozen.org >
2025-07-17 14:40:01 +02:00
John Crispin
20de4fe438
est_client: allow overriding CERT_PREFIX via an env variable
...
Signed-off-by: John Crispin <john@phrozen.org >
2025-07-17 09:50:45 +02:00
John Crispin
f56fb3c0d3
est_client: allow setting the EST_SERVER via an env variable
...
Signed-off-by: John Crispin <john@phrozen.org >
2025-07-17 09:50:45 +02:00
John Crispin
5aca134364
est_client: reduce number of flash writes
...
Signed-off-by: John Crispin <john@phrozen.org >
2025-07-17 09:50:45 +02:00
John Crispin
f2b69ce972
est_client: fix reenroll call
...
the wrong certificate was being used
Signed-off-by: John Crispin <john@phrozen.org >
2025-07-08 09:41:12 +02:00
John Crispin
aa78f40843
certificates: add support for tar file based certificate storage
...
Fixes: WIFI-14694
Signed-off-by: John Crispin <john@phrozen.org >
2025-07-01 07:18:54 +02:00
John Crispin
721fb4cc4d
est_client: fixup typo
...
Fixes: WIFI-14694
Signed-off-by: John Crispin <john@phrozen.org >
2025-07-01 07:18:54 +02:00
John Crispin
f75a36f89f
est_client: prevent downgrades to FW not supporting EST
...
Fixes: WIFI-14694
Signed-off-by: John Crispin <john@phrozen.org >
2025-07-01 07:18:54 +02:00
John Crispin
a375b9f774
est_client: add reenroll support
...
Fixes: WIFI-14694
Signed-off-by: John Crispin <john@phrozen.org >
2025-07-01 07:18:54 +02:00
John Crispin
16d029f10f
cloud_discovery: split EST code out into its own tool
...
Fixes: WIFI-14694
Signed-off-by: John Crispin <john@phrozen.org >
2025-07-01 07:18:54 +02:00
