John Crispin
b5b276bfcc
est_client: check if a cert is present inside the fwtool helper
...
This was causing devices without a birt cert being present from doing a
sysupgrade.
Signed-off-by: John Crispin <john@phrozen.org >
2025-08-06 11:03:59 +02:00
John Crispin
d1e4c48617
cloud_discovery: add automatic reenrolment of operational certificates
...
The daemon will check the vailidity of the operational certificate once and hour.
If the certificate is valid for less than three days, a reenrollment is attempted.
Once the reenroll happened the connection to the cloud controller will be restarted.
Fixes: WIFI-14900
Fixes: WIFI-14694
Signed-off-by: John Crispin <john@phrozen.org >
2025-07-31 09:48:10 +02:00
Tanya Singh
5306f7db27
cloud_discovery: Add 'sync' after file generation in Cloud discovery process
...
Fixes: WIFI-14906
Signed-off-by: Tanya Singh <tanya_singh@accton.com >
2025-07-27 17:40:03 +02:00
John Crispin
89a1be09d9
est_client: set 10s as the max timeout when calling the EST server
...
Signed-off-by: John Crispin <john@phrozen.org >
2025-07-21 11:35:47 +02:00
John Crispin
66df8d3946
est_client: properly populate the re-enrolled certificate
...
Fixes: WIFI-14864
Signed-off-by: John Crispin <john@phrozen.org >
2025-07-17 14:40:01 +02:00
John Crispin
20de4fe438
est_client: allow overriding CERT_PREFIX via an env variable
...
Signed-off-by: John Crispin <john@phrozen.org >
2025-07-17 09:50:45 +02:00
John Crispin
f56fb3c0d3
est_client: allow setting the EST_SERVER via an env variable
...
Signed-off-by: John Crispin <john@phrozen.org >
2025-07-17 09:50:45 +02:00
John Crispin
5aca134364
est_client: reduce number of flash writes
...
Signed-off-by: John Crispin <john@phrozen.org >
2025-07-17 09:50:45 +02:00
John Crispin
89ac58b48f
add incremental interval backoff
...
Signed-off-by: John Crispin <john@phrozen.org >
2025-07-17 09:50:45 +02:00
John Crispin
a607aac99a
cloud_discovery: set production timeouts
...
Signed-off-by: John Crispin <john@phrozen.org >
2025-07-11 11:08:42 +02:00
John Crispin
f2b69ce972
est_client: fix reenroll call
...
the wrong certificate was being used
Signed-off-by: John Crispin <john@phrozen.org >
2025-07-08 09:41:12 +02:00
John Crispin
5f8c4d31cc
cloud_discovery: use the correct certificte for CDS
...
Fixes: WIFI-14694
Signed-off-by: John Crispin <john@phrozen.org >
2025-07-01 07:18:54 +02:00
John Crispin
aa78f40843
certificates: add support for tar file based certificate storage
...
Fixes: WIFI-14694
Signed-off-by: John Crispin <john@phrozen.org >
2025-07-01 07:18:54 +02:00
John Crispin
721fb4cc4d
est_client: fixup typo
...
Fixes: WIFI-14694
Signed-off-by: John Crispin <john@phrozen.org >
2025-07-01 07:18:54 +02:00
John Crispin
f75a36f89f
est_client: prevent downgrades to FW not supporting EST
...
Fixes: WIFI-14694
Signed-off-by: John Crispin <john@phrozen.org >
2025-07-01 07:18:54 +02:00
John Crispin
a375b9f774
est_client: add reenroll support
...
Fixes: WIFI-14694
Signed-off-by: John Crispin <john@phrozen.org >
2025-07-01 07:18:54 +02:00
John Crispin
16d029f10f
cloud_discovery: split EST code out into its own tool
...
Fixes: WIFI-14694
Signed-off-by: John Crispin <john@phrozen.org >
2025-07-01 07:18:54 +02:00
John Crispin
bb45e09e8b
cloud_discovery: place intermediate files into the /tmp folder
...
Fixes: WIFI-14694
Signed-off-by: John Crispin <john@phrozen.org >
2025-07-01 07:18:54 +02:00
John Crispin
2798088cec
cloud_discovery: rtrim() the extracted subject
...
this removes trailing \n\n characters
Fixes: WIFI-14694
Signed-off-by: John Crispin <john@phrozen.org >
2025-07-01 07:18:54 +02:00
John Crispin
0db44ca55b
cloud_discovery: add insta EST support
...
Fixes: WIFI-14694
Signed-off-by: John Crispin <john@phrozen.org >
2025-07-01 07:18:54 +02:00
John Crispin
ae5015424b
cloud_discovery: add initial ubus status call
...
Fixes: WIFI-14694
Signed-off-by: John Crispin <john@phrozen.org >
2025-07-01 07:18:54 +02:00
John Crispin
32c7a7ff1d
cloud_discovery: add support for hostname_validation
...
Fixes: WIFI-14694
Signed-off-by: John Crispin <john@phrozen.org >
2025-07-01 07:18:54 +02:00
John Crispin
ce9c896371
cloud_discovery: depend on the certificates package
...
Fixes: WIFI-14694
Signed-off-by: John Crispin <john@phrozen.org >
2025-07-01 07:18:54 +02:00
John Crispin
0008cb20dd
cloud_discovery: add option 138 support
...
Fixes: WIFI-14694
Signed-off-by: John Crispin <john@phrozen.org >
2025-07-01 07:18:54 +02:00
John Crispin
c83ac67492
cloud_discovery: make use of the new TIP cloud discovery server
...
Signed-off-by: John Crispin <john@phrozen.org >
2025-04-10 08:30:15 +02:00
John Crispin
c321d6f6b1
cloud_discovery: correctly convert timeouts to integers
...
Signed-off-by: John Crispin <john@phrozen.org >
2024-11-28 08:56:07 +01:00
John Crispin
09f3dba767
cloud_discovery: add new service
...
Signed-off-by: John Crispin <john@phrozen.org >
2024-11-15 07:50:15 +01:00