Status Update
Comments
dd...@gmail.com <dd...@gmail.com> #2
We are currently using AGP internal task types to flag memory-intensive tasks to enforce a reduced parallelism at execution time. I've raised this separately (with a lot more detail) as a feature request (
cs...@gmail.com <cs...@gmail.com> #4
Another use case that we have is to reactively respond to the creation of APKs and AABs. The new AGP APIs allow us to connect out tasks into the artifact pipeline via wiredWith
but the best we can come up with to receive the completed artifact is to wire in toTransform
. This A) does not guarantee that we will receive the final artifact as more transforms may be applied after our task is called, and B) requires us to copy the input property file/dir to our tasks output property file/dir in order to not break the build cache.
The reactive behavior of the above is the complicating factor.
A non-reactive approach could simply depend upon the task name and then look for a hardcoded path in the build directory (which is still sort of gross, since the build output paths are not documented as public API and change from time to time).
Another approach would be to wire a custom task to consume the output of the build via the built artifacts loader feeding an input property. However, this approach cannot be applied reactively. Either the custom task is included in the build and causes the creation of the binary artifact, or it is not included in the build and never gets invoked.
ju...@gmail.com <ju...@gmail.com> #6
We didn't provide a task wiring helper for that case as there's only one thing to wire, but I can see how the inconsistency can be misleading
an...@gmail.com <an...@gmail.com> #7
WRT variant.artifacts.get(SingleArtifact.APK))
, if the task is included in the build it will cause the creation of the artifact. Our build is currently defined to reactively perform some actions (predominantly some fancy reporting) only if work is actually performed.
We had previously been pushing our build to wire in to task outputs by locating tasks by type and referencing output properties as inputs to tasks registered via task finalizes
or dependsOn
relationships. This started getting more and more fragile as the AGP APIs migration proceeded/matured. I'm to the point now where I think the notion of reactive execution is hostile to the direction/expectations of both Gradle and AGP and want to start moving away from it, yet our build as it currently stands does rely on this behavior.
I bring up this up as a gap only because I don't know if I'll be able to completely refactor our CI pipeline's expectations in time for Gradle 8+.
se...@gmail.com <se...@gmail.com> #8
li...@gmail.com <li...@gmail.com> #9
Another minor functionality gap: We have a build that has test coverage enabled during test execution but then we manually disable the coverage report generation for all project modules as we have a custom coverage report task that creates an aggregate test coverage report for the entire project. This saves us the execution time, I/O, and protects us from Jacoco implementation instabilities.
We're currently using the following to accomplish this:
project.tasks.withType(JacocoReportTask::class.java) {
enabled = false
}
ch...@gmail.com <ch...@gmail.com> #10
Another gap, though my perhaps there's a better way to express this? Some of our builds leverage Flank to run instrumentation tests on Firebase Test Lab. These builds run as a single CI stage so as to afford Gradle the best opportunity to parallelize work. In this context, we have found that prioritizing instrumentation test assembly work early in the build allows the tests to dispatch to FTL earlier, minimizing overall build times. To implement this, we have chosen to be explicit on the inverse side by pushing lint and local unit test execution to be shouldRunAfter
the flank tasks which in turn depend on the instrumentation test assembly, etc.
Specifically:
private fun bumpFlankTask(project: Project, flankTasks: TaskCollection<FlankExecutionTask>) {
listOf(AndroidLintTask::class.java, AndroidLintAnalysisTask::class.java, AndroidUnitTest::class.java)
.forEach {
project.tasks.withType(it).configureEach {
shouldRunAfter(flankTasks)
}
}
}
This seems fairly specific to our project's desires and not necessarily transferable to other projects. I think our best option for the future Gradle 9+ might be to fallback to leveraging task names rather than leveraging task types in a generic fashion. Mentioning it here in case there is a better approach/option once the types are no longer available.
sa...@gmail.com <sa...@gmail.com> #11
Another gap we've found but no longer directly depend upon: when invoking BundleToStandaloneApkTask
the resulting universal APK does not appear to be accessible via the Artifacts API / ArtifactType.APK
- at least as of AGP 7.0.
We are able to no longer directly depend upon it because we are using the task name and a hardcoded build output directory path to locate the APK if/when it gets built. This is another symptom of our reactively defined build implementation. However, if we were to relay on
(phew! I think that's it for now? sorry for the dump, we're just starting to get caught up!)
to...@gmail.com <to...@gmail.com> #12
That last one (
mi...@gmail.com <mi...@gmail.com> #13
Ran into another use case that the API does not yet seem to support: AndroidUnitTest configuration for offline Jacoco instrumentation. Given that we've had to tweak task outputs to get this to work reliably with the build cache it is probably best corrected on the AGP side. Probably easiest just to paste the relevant code here:
/*
* -Djacoco-agent.destfile arg is used to configure the offline mode behavior of jacoco. The offline
* behavior is what is used when dependency module code is executed as it has already been
* instrumented by the jacoco-agent in previous executions. We redirect this to record the offline
* results under the build directory and give it a more explicit/identifiable name (it defaults
* to the project dir as jacoco.exec).
*
* NOTE: Attempts at using JacocoTaskExtension.setDestinationFile were unsuccessful in capturing coverage
*/
project.tasks.withType(AndroidUnitTest::class.java).configureEach {
val execFile = project.layout.buildDirectory.file("jacoco/offlineDependencies.exec").get()
jvmArgs("-Dfile.encoding=UTF-8", "-Djacoco-agent.destfile=${execFile}")
// Register our file as a task output to ensure it is restored via the build cache when execution is avoided
outputs.file(execFile)
doFirst {
// Make sure the coverage file is removed if it exists from a previous run
execFile.asFile.deleteRecursively()
}
}
el...@gmail.com <el...@gmail.com> #14
And one question:
We have some convention plugin code which is applied to many project module. It uses the components extension's onVariants
callback to reactively trigger some data capture but needs to know whether or not minification has been enabled for the build type, configured by a separate convention plugin. We have code similar to the following:
project.plugins.withId("com.android.application") { plugin ->
val extension = project.extensions.getByType(ApplicationAndroidComponentsExtension::class.java)
val android = project.extensions.getByType(ApplicationExtension::class.java)
extension.onVariants { variant ->
...
if (android.buildTypes.getByName(variant.buildType!!).isMinifyEnabled) {
...
}
ApplicationExtension
feels like more of an input API for AGP and not something we should be programmatically querying within the onVariants
callback. Given the exposure of other configuration values (e.g. variant.pseudoLocalesEnabled
as Property<Boolean>
), should isMinifyEnabled
also be exposed?
go...@gmail.com <go...@gmail.com> #15
Alex, can you look at #11 first, then at #13.
ch...@gmail.com <ch...@gmail.com> #16
#14, yes, it should probably be offered in ApplicationVariantBuilder.
go...@gmail.com <go...@gmail.com> #17
Alex and I looked a bit more carefully and we cannot make APK the result of the bundleToAPK task. The reason is that only one task can produce an artifact type at a time.
You cannot have an artifact type being produced by either the normal APK packaging task or the APKFromBundle task depending on what the user requested. In particular, if any script/plugin request the public APK artifact type, which task is supposed to run ?
The only way we can somehow satisfy #11 would be to have another public artifact type called APK_FROM_BUNDLE which would ensure that the bundle is created first, then the APK from the bundle. would that work ?
cm...@gmail.com <cm...@gmail.com> #18
We should really file separate bugs for all these comments. We can't just use a single bug for all of this.
ro...@gmail.com <ro...@gmail.com> #19
I filed the following specific bugs:
->comment #4 Issue 232323922 ->comment #9 Issue 232324065 ->comment #11 Issue 232325458 ->comment #14 Issue 232325329
I have not yet filed anything related to Jacoco, as we probably need to discuss things a bit internally first.
ag...@gmail.com <ag...@gmail.com> #20
We develop a convention plugin which adds some code quality tasks(detekt, checklist, lint) to the build, whenever assemble task is invoked. We achieved this on the old api by obtaining the assemble task provider with BaseVariant.getAssembleProvider() method then adding our tasks as a dependency to it. However, I couldn't find any equivalent method in the new Variant API. I thought of registering a custom Default task, which depends on SingleArtifact.APK and all of our other custom tasks, then host apps could use this new task on their local and CI machines to create apk. However, this method is not optimal since some developers still can run the assemble task directly and bypass our code quality tasks and also, this new task will not be executed when developers run their project on the Android Studio by default. So I would like a way to include some tasks to the artifact creation even if they do not produce or use this artifact. What I can suggest is a way to make artifacts depend on tasks similar to how tasks can depend on artifacts. For instance, something similar to the following would solve our use case:
variant.artifacts.get(SingleArtifact.APK).getTaskProvider().configure {
it.dependsOn("detekt${variant.name.capitalize()}")
}
Currently, what we are doing to solve this problem is the following:
project.extensions.getByType(AndroidComponentsExtension::class.java).onVariants { variant ->
project.afterEvaluate {
project.tasks.named("assemble${variant.name.capitalize()}").configure {
it.dependsOn("detekt${variant.name.capitalize()}")
}
}
}
which I know is not recommended. Therefore, could you consider adding a new api for this case?
Another thing is I couldn't find a way to obtain "lint" task for the current variant without tasks.named("lint${variant.name.capitalize()}"). Could you also create a method to obtain lint task for the current variant, add dependency tasks for it. Adding dependency for lint is important for us since we download our lint configuration with a custom task and we want this configuration to be ready when "lint" needs it. (This case could also be solved by using Provider API in the lint block of the finalizeDsl, however currently the "lintConfig" property is declared as File in this block)
And lastly, it would be nice if InternalArtifactType.JAVA_DOC_DIR was a public artifact. If our convention is applied to a library project, whenever we publish the aar, we also publish its javadoc(and kdoc) to a remote server. For this we need to add custom Javadoc task and configure it properly for the variant. However, I think, this process is a bit complex. I could not properly configure the custom Javadoc task using the new variant api. With the old API I was using the following configuration:
source = variant.getJavaCompileProvider().get().source
classpath += project.files(project.provider { androidExtension.bootClasspath })
classpath += project.files(variant.getJavaCompileProvider().map { it.classpath })
Therefore, making InternalArtifactType.JAVA_DOC_DIR public would greatly simplify our implementation and solve our problems. Currently, only solution I found was to add dependency to "javaDoc${variant.name.capitalize()}Generation" task and hardcode its output path as "intermediates${File.separator}java_doc_dir${File.separator}$componentName". But I know this is really fragile and would love to see an easier and more conventional way to accomplish this.
d....@gmail.com <d....@gmail.com> #21
I'm developing a plugin for external sources compilation into *.so
files.
How can I inject final *.so
files into the final APK/AAR? I saw that AGP has AndroidArtifacts.ArtifactType.JNI{_SHARED}
But I have no idea how to use it and can't find any samples. I also can't put SingleArtifact.APK
because it is transformable but not appendable.
variant.artifacts.use(task)
.wiredWith { it.outputSoFolder }
.toAppendTo(...) // <-- what to put here?
EXTRA: how to add their debug symbols to LLDB during debugging from the plugin (same as Makefiles/CMake does).
go...@gmail.com <go...@gmail.com> #22
AndroidArtifacts.ArtifactType
is internal and not meant to be used by our API. The thing to pass to toAppendTo
would have to be a MultipleArtifact
but we don't expose many of them yet, and none that are useful for your use case.
At some point we may expose the intermediate artifact that is the final folder of all the .so
files, but that may not be what you want either. If it's the final folder, then it's a single folder, so you cannot append to it, and you can only transform it (which means taking the content, processing it, and writing the output in a different folder). This is not efficient when you want to add new files to it.
So, your use case actually is better positioned to use sourcesets rather than inject in an intermediate. We recently introduced
d....@gmail.com <d....@gmail.com> #23
I just ran into a need to modify android test manifests in my convention plugin. I intended to use the artifacts API to do this but it looks like there is no SingleArtifact.*
making this available. As per the AGP 7.2 docs on MERGED_MANIFEST
: "For each module, unit test and android test variants will not have a manifest file available.". Can we please get these added as well?
go...@gmail.com <go...@gmail.com> #25
We are currently using the old AndroidSourceSet
APIs to configure Checkstyle and Detekt for Android projects, as described in this issue:
As far as I can tell, this is not yet covered by the new APIs and this would likely apply to other static analysis tools that need to process source files as well.
d....@gmail.com <d....@gmail.com> #26
I created a new ticket talking about this AndroidSourceSet
use case here:
go...@gmail.com <go...@gmail.com> #27
My project currently uses the javaCompileProvider
and preBuildProvider
APIs of the BaseVariant
class.
Fir the javaCompileProvider
case, we use this mainly in Application projects. We have some custom code generation tasks that we run that require the classpath of the application be available (so we use the output of the task), and that we want to be done "at the same time" before tasks that depend on JavaCompile complete have the code we generate ready as well. Example usage is:
android.applicationVariants.configureEach { variant ->
val customTaskOne = project.tasks.register("customTaskOne${variant.name.capitalized()") {
dependsOn(variant.javaCompileProvider, kotlinCompileTask)
}
val javaCompileOutput = variant.javaCompileProvider.get().destinationDirectory.get().asFile
val codeGenerationAction = CodeGenAction(javaCompileOutput, variant)
variant.javaCompileProvider.configure {
finalizedBy(customTaskOne)
doLast(codeGenerationAction)
}
}
I understand this is a bit janky, but I'm looking to update the code and make sure we're doing things "The Right Way(tm)" going forward. If there's a similar way to accomplish what we're looking for, I'd love to know about it, especially if it's a tool or technique that I'm not familiar with.
For the preBuildProvider
usecase, we're essentially generating some code early on in the process that just needs to be ready. I can likely use some other method of having this task run (as it doesn't really depend on anything else other than being done before the APK is packaged). What would be the suggested way with the new gradle-api
classes to perform this sort of work?
EDIT: I've spent the last few days looking through the .class
file for inclusion in the dex or generate a JSON file for inclusion in the application's assets
.
For reference, all of this is with AGP 7.4.
I tried using the same task for both to see if AGP would know how to handle that:
variant.artifacts
.forScope(ScopedArtifacts.Scope.ALL)
.use(scannerTask)
.toAppend(
ScopedArtifact.CLASSES,
ScannerTask::output
)
variant.artifacts.forScope(ScopedArtifacts.Scope.ALL)
.use(scannerTask)
.toGet(ScopedArtifact.CLASSES,
ScannerTask::allJars,
ScannerTask::allDirectories)
but that led to things just not executing. I didn't see anything with the task name in the --debug
output. So, I went ahead and tried using two tasks: one for toGet
that would scan all the input and generate the .class
file, and one that would then take that output of that scan task and then add it using toAppend
. Attempting to do this led to a circular dependency, leading me to believe that toGet
is ALWAYS executed last.
So, I went ahead and tried using toTransform
:
variant.artifacts.forScope(ScopedArtifacts.Scope.ALL)
.use(scannerTask)
.toTransform(
ScopedArtifact.CLASSES,
ScannerTask::allJars,
ScannerTask::allDirectories,
ScannerTask::output
)
And that worked! The class was generated, and included in the dex
file. The problem was that the API was expecting me to essentially touch every input file and then add them to the output. That sounds like it's going to kill my build times.
Am I on the right track here and maybe just missing an API to use? Or is this use case not supported by the current APIs?
ba...@gmail.com <ba...@gmail.com> #28
You are correct, the toTransform
is the only API you can use in your case because you are trying to get the final version of the artifact in your scannerTask
while also trying to append (from the same Task). Even if you used 2 tasks, you would end up in a circular dependency.
You are also correct this is not going to be great for your build time.
One of the way I can think of would be to make a new version of toTransform
that would be a lot smarter and allow you to tag unchanged jars/directories. I think that would solve your case completely ?
But in the meantime, maybe using a KSP or plain old annotation processor might be another solution, not exactly sure about your constraints.
cw...@gmail.com <cw...@gmail.com> #29
I'm sure I could get that to work, having a sort of incremental toTransform
, though I don't think that would be the ideal solution for my particular use case. My attempt to use toTransform
was based off it allowing me to essentially take a look at every class that's going to end up in the package. I'm not looking to actually modify any of the classes that I scan. With the API you suggested, we would essentially be marking everything we look at as "unchanged", and then attempting to add a new class/asset based on what we saw, or perhaps modifying one or two classes/assets by adding the results of our scans.
My end goal is to essentially "append" to the output using everything previously built as an input. So, maybe not "append", but almost "finalize". That's why we currently use the finalizedBy
and doLast
APIs for the JavaCompile
task. I think my big concern would be using the "transform" API in a way that isn't strictly "transforming". If that's not one that you share, then this certainly would be worth trying out.
But in the meantime, maybe using a KSP or plain old annotation processor might be another solution, not exactly sure about your constraints.
That's certainly one of the avenues I'm investigating. I'm just trying to make sure I've taken a look at and understand all of the options that are available.
yq...@gmail.com <yq...@gmail.com> #30
The problem of a finalize
API is that only one thing can do it. If we expose this as a proper API, then we have to make sure only 1 plugin can do it and fail if 2 plugins try to do it. If we start having several published plugins using that APIs, they will not be compatible with each other.
This is really not a path we want to go down at the moment.
So "transforming" but not actually touching the files is perfectly fine (as long as you do copy them into the output), though you have to realize that the API cannot guarantee that you are last. You have to manage your plugin application order and hope your transform is added last.
ba...@gmail.com <ba...@gmail.com> #31
The problem of a finalize API is that only one thing can do it. If we expose this as a proper API, then we have to make sure only 1 plugin can do it and fail if 2 plugins try to do it. If we start having several published plugins using that APIs, they will not be compatible with each other.
Oh yeah, I absolutely understand the turmoil adding an API like that can cause, especially down the line. I don't blame you at all for not wanting to codify that potential nightmare in the public API. If the "transform" API is built and maintained in such a way that it accounts for folks not always actually wanting to transform classes, I think that would be sufficient.
you have to realize that the API cannot guarantee that you are last.
That's okay. No external dependencies should be using these, as they're strictly internal. We also don't need to worry about other internal plugins using/generating classes that we would be required to scan. We don't need to be "last" as much as we need to be "after compilation but before packaging", which this API would provide us.
e2...@gmail.com <e2...@gmail.com> #32
I have been thinking about this a bit more and it's actually not easy to provide an API where you can identify some untouched inputs as outputs.
The main reason is that Gradle will complain if 2 tasks output the same file/directory, so one way of another, we must copy the inputs into outputs which is probably what you already do. At least we would save the merging step which is an improvement but there would still be a fair amount of I/O.
sa...@gmail.com <sa...@gmail.com> #33
Would it be possible to have a "Read Only" API that allows scanning/reading of the non-generated code for the project which would be followed by tasks that perform this code generation/modification? Something like
variant.artifacts
.forScope(ScopedArtifacts.Scope.ALL)
.scan(scannerTask)
.andOutput(writeTask)
.with(
ScopedArtifact.CLASSES,
ScannerTask::allJars,
ScannerTask::allDirectories,
WriteTask::output
)
So, my scannerTask
would be responsible for running over the classes, and building up the manifest that it wants to generate. Then, the writeTask
would take that manifest and generate code to the output
directory. This way you have a very clear set of processing at output tasks. On my side, I could keep the manifest in memory, since I expect the tasks to be run in a pair (as in, writeTask
wouldn't run if scannerTask
hasn't). If it's better practice, scannerTask
can be used as an input for writeTask
.
I can see the scan
API being useful for any sort of processing on the APK that needs to be done, including any sort of reporting folks might want. It can allow classes to be scanned, but not necessarily modify the output. However, if andOutput
were included, the writeTask
would be added alongside the other code modifying tasks. I think the order here can make sense if the scannerTask
were always to operate on the non-generated, non-modified classes.
I'm not sure if that all makes sense as I'm spitballing.
ke...@gmail.com <ke...@gmail.com> #34
you are still introducing a circular reference, as the Scanner Task wants to have access to all the final CLASSES and generate a manifest that the WriterTask would use to generate a new element of the CLASSES artifact. The fundamental issues here are :
- provide an API that allows to transform but mostly leaving original items unchanged.
- be independent of the Plugin apply order.
mostly something like :
variant.artifacts.forScope(ScopedArtifacts.Scope.ALL) .use(scannerTask) .toGetAndAdd( ScopedArtifact.CLASSES, ScannerTask::allJars, ScannerTask::allDirectories, ScannerTask::output )
but that means you are not guaranteed to have the final version of CLASSES as some other Plugin may add a folder after you...
cm...@gmail.com <cm...@gmail.com> #35
That's why I was trying to phrase it as "non-generated", but I'm not sure how useful that would be outside of my specific use case (and obviously nobody wants to support an API for some weird one-off). For our project, what other plugins might do work after we perform ours doesn't matter, as I can guarantee for my project, in this instance, that things will behave as I expect.
If this is something you think might be worthwhile to add, with the above caveats, that would be swell. We'll likely use it in some form. If it's not something that seems like it would be worth supporting, which is not unreasonable, I'm sure I'll figure out some other solution before the time comes to migrate. Necessity is the mother of invention, after all.
I appreciate the discussion and consideration.
or...@gmail.com <or...@gmail.com> #36
Hi,
I wrote a plugin that generates a wrapper around string resources, so I had a mockable class while still being able to use string resources in viewModels etc.
The way I did this before was to add a dependency on the process<...>Resources task, find the R.jar file, unzip and use a class visitor to extract the string/plural names. Then use codegen to create the wrapper with this data. Then I had to add my task as a dependency on compile<...>Kotlin.
It's taken me a while to get to grips with the new system, just trying to slot my task to run at the correct time, but I've ended up with something like the following:
project.plugins.withType(AppPlugin::class.java) {
val androidComponents = project.extensions.getByType(AndroidComponentsExtension::class.java)
androidComponents.onVariants { variant ->
variant.sources.java?.let { sources ->
val generateStringsTask = project.tasks.register(
"generate${variant.name}Strings",
GenerateVariantStringsTask::class.java,
) {
it.variantPackageName.set(variant.namespace)
it.outputDir.set(project.layout.buildDirectory.dir("generated/source/stringrepository/${variant.name}"))
}
variant.artifacts
.use(generateStringsTask)
.wiredWith(GenerateVariantStringsTask::symbolsFile)
.toListenTo(SingleArtifact.RUNTIME_SYMBOL_LIST)
sources.addGeneratedSourceDirectory(
generateStringsTask,
GenerateVariantStringsTask::outputDir
)
}
}
}
I'll admit, this new way is a hell of a lot easier to get the data I need, The problem is that the amount of exposed artifacts is pretty limited (at least compared to what I've seen for InternalArtifactType).
RUNTIME_SYMBOL_LIST includes transitive dependencies, breaking my generated code as the module's R class can no longer 'see' those transitive resources (with the default APG 8+ non transitive R class setting).
Ideally having a non-transitive version of that artifact (to the local_only_symbol_list file?) would be perfect, but considering my confusing on picking up these new APIs there's a good chance i'm wrong on approach for this.
Any guidance would be very much appreciated.
Thanks
el...@gmail.com <el...@gmail.com> #37
#36, I filed
e2...@gmail.com <e2...@gmail.com> #38
Thank you for the great work you do keep it up please.
cm...@gmail.com <cm...@gmail.com> #39
or...@gmail.com <or...@gmail.com> #40
e2...@gmail.com <e2...@gmail.com> #41
pname:fan.Wifi"
So if you can see it then it may be available in your country (lucky you) but not for
US :(
sa...@gmail.com <sa...@gmail.com> #42
today.
go...@gmail.com <go...@gmail.com> #43
about linux.
I got this from the market. It should still be there.
You need root access to use the program though.
1st post's blog link)
By the way does anyone know of a good site that provides apps for android.
I've been using demonoid, its good, a lot of full version apps. but it would be nice
to find another one.
Gordon.
sa...@gmail.com <sa...@gmail.com> #45
have no knoledge about linux, rooting their phone, etc...
I also want to connect to my University wifi (eduroam) and I can't.
i thing this issue should have more priority.
le...@gmail.com <le...@gmail.com> #46
le...@gmail.com <le...@gmail.com> #47
Does anybody know if the 1.5 update Cupcake will allow the G1 to connect to WPA2-
Enterprise
jn...@gmail.com <jn...@gmail.com> #48
No, cupcake does not implement the GUI necessary to connect to networks secured by
WPA2-Enterprise.
sr...@gmail.com <sr...@gmail.com> #49
fu...@gmail.com <fu...@gmail.com> #50
fu...@gmail.com <fu...@gmail.com> #51
network (eduroam) isn`t supported. I spend really a lot of time at school and the
actual reason why to buy an android phone have been not to pull out laptop so often
at school. Who cares about all other bugs. This makes the phone useless in most
company and school environments, because theese simply do not have simple networks.
Rooting the phone really isn`t an option I want to take. For the warranty reasons, of
course.
el...@gmail.com <el...@gmail.com> #52
wpa_supplicant.conf. I still get timeouts during authentication.
Anyone know if there is a way to properly debug/monitor wpa_supplicant on ADP1?
wpa_cli simply doesn't give much information.
br...@gmail.com <br...@gmail.com> #53
Authenticated using my windows Domain (EAP-MCCHAPv2)
Now if only I could set the Browser proxy settings to get out of the network when
connected to this. I am really confused by this.
pr...@gmail.com <pr...@gmail.com> #54
need to change data/misc/wifi/wpa_supplicant.conf file it should be like:
ctrl_interface=tiwlan0
update_config=1
network={
ssid="your ssid"
scan_ssid=1
proto=RSN
key_mgmt=WPA-EAP
eap=PEAP
identity="user name"
password="password"
}
this is specific to EAP-MCCHAPv2. Now i am able to connect via wifi but since i have
proxy on network need to know how to configure proxy on it.
ei...@gmail.com <ei...@gmail.com> #55
authenticate by Username and Password. Client Certificate would be very good too, but
most of WPA Enterprise enabled networks work with Username/Password.
So when will this be implemented to work without rooting the phone?
Maybe T-Mobile just not has an interest in this Feature and thus there is not much
pressure on it...
fu...@gmail.com <fu...@gmail.com> #56
custommers want. Android phones are made for internet and while there can`t get
connected in many Wi-fi networks, it makes them kind of useless. That`s why I don`t
understand, why nobody is working on this yet.
ck...@gmail.com <ck...@gmail.com> #57
work at Indiana University, which will offer WPA2 Enterprise only as of June 22,
2009. Without any official support I will be forced to root my phone to use wifi on
campus. Cupcake brought with it many nice updates, but many of them were trivial.
Why WPA2 Enterprise support was not included in the Cupcake upgrade is just baffling
to me.
gi...@gmail.com <gi...@gmail.com> #58
wpa_supplicant this seem to be mostly a matter of UI. I think this is one of the main
features Android would really benefit from.
gl...@gmail.com <gl...@gmail.com> #59
first of many who wish to see WPA2-Enterprise support on the android platform.
ad...@gmail.com <ad...@gmail.com> #60
the method D.McEldowney suggests, I get the problem that I cannot create
/sdcard/wpa_supplicant.conf as its a read-only file system? Help?
la...@gmail.com <la...@gmail.com> #61
eduroam? That would be nice.
ke...@gmail.com <ke...@gmail.com> #62
sr...@gmail.com <sr...@gmail.com> #63
star the issue, please, your +1 comment will not magically make the android devs decide
that yes they really need to add this now.
rh...@gmail.com <rh...@gmail.com> #64
and password but each time I try to connect I get an "invalid network password". Anyone solve this?
I'm using a rooted G1 and have added a network profile to wpa_supplicant.
bw...@gmail.com <bw...@gmail.com> #65
Aug or Sept
el...@gmail.com <el...@gmail.com> #66
the defaults as reported in the config file are not that default. The following
config worked for me:
network={
ssid="WLAN"
key_mgmt=IEEE8021X
eap=TTLS
group=WEP104 WEP40
auth_alg=OPEN SHARED
ca_cert="/data/misc/wifi/GTE_CyberTrust_Global_Root.pem"
phase2="auth=PAP"
identity="xxx"
anonymous_identity="xxx"
password="xxx"
}
note: I needed to specify the group and auth_alg entries.
rh...@gmail.com <rh...@gmail.com> #67
2>CTRL-EVENT-EAP-STARTED EAP authentication started
<2>CTRL-EVENT-EAP-METHOD EAP vendor 0 method 25 (PEAP) selected
<2>CTRL-EVENT-EAP-SUCCESS EAP authentication completed successfully
<1>Setting scan request: 0 sec 100000 usec
<2>CTRL-EVENT-DISCONNECTED - Disconnect event - remove keys
<2>CTRL-EVENT-STATE-CHANGE id=0 state=0
<2>CTRL-EVENT-STATE-CHANGE id=0 state=2
It seems to cycle through association to authorization over and over again. Can any one tell me what might
be causing "Disconnect event - remove keys' to be generated?
je...@gmail.com <je...@gmail.com> #68
By not including this, Google are ignoring College users across Europe and beyond -
somebody had better tell them what eduroam is -
What do you have to do to make this happen - don't make me bin my Magic for an i-phone.
va...@gmail.com <va...@gmail.com> #69
I am also targetting a network on
ma...@gmail.com <ma...@gmail.com> #70
je...@gmail.com <je...@gmail.com> #71
av...@gmail.com <av...@gmail.com> #72
are a big market for this phone, and the nation's biggest schools use WPA2
enterprise. As others have pointed out, the OS supports it. Why do users have to root
their phones to connect to their networks?
ma...@gmail.com <ma...@gmail.com> #73
for Google to add this feature to the phone.
If HTC can do that, Google can.
ge...@gmail.com <ge...@gmail.com> #74
-You shouldn't be able to claim wifi support for a device if it doesn't support
established wifi encryption standards. If you wanna make a wifi enabled device - make
sure it can use any standard wifi connection. At least the widespread ones!
- This is a SMARTPHONE for christs sake! How could ANYONE wiht even half a brain
think that WPA(2) Enterprise was not needed? Come on! And it should have been fixed
in weeks. Not months on end wothout even _a single comment_ from a dev/project
member. This is outright embarrasing.
This is not just happening here - it seems to be standard for most of the issues
reported here. The average homemade project run by to fourteen year olf boys have
way, _way_ better issue handling than this. I thought Android was a serious effort -
without the will to fix bugs (This is a BUG, not an enhancement request), any project
is shit. Now get your head out of your asses, make this a priority, and give us an
ETA. Seriously, a enterprise level system that can't connect to most universities and
companies wifi? P-L-E-A-S-E, get a grip. Fast.
/rant
But seriously, a VERY well desverved rant for the dev who probably doesn't even read
this.
ma...@gmail.com <ma...@gmail.com> #75
Please make sure that PEAP-EAP-MSCHAPv2 (username and password to identify the
client) is working.
Many companies/universities use a Cisco 4400 Series WLC and have it configured that way.
Thanks.
ch...@gmail.com <ch...@gmail.com> #76
I attend NYU and they use wpa2 with PEAP-EAP-MSCHAPv2 to authenticate their wireless
network
mi...@gmail.com <mi...@gmail.com> #77
co...@gmail.com <co...@gmail.com> #78
.html. Does this mean a developer could create an interface using this and provide an
app we can download. I assume not becuase some one would have already done this but the
question's got to be asked.
jo...@gmail.com <jo...@gmail.com> #79
Can anyone test if it's possible (using the recent SDK) to create a new WiFi profile
using WPA2 ?
ca...@gmail.com <ca...@gmail.com> #80
ju...@gmail.com <ju...@gmail.com> #81
mi...@gmail.com <mi...@gmail.com> #82
wpa_supplicant to work with wpa enterprise, but galaxy has no root atm.
cv...@gmail.com <cv...@gmail.com> #83
WPA2-Enterprise. 100s of folks have migrated to iphone just because of this. My
company size is 66000, and even if 1% people adopt it, it's a sale of about 6600
gphones. think about it ...
sr...@gmail.com <sr...@gmail.com> #84
ca...@gmail.com <ca...@gmail.com> #85
ju...@gmail.com <ju...@gmail.com> #86
sr...@gmail.com <sr...@gmail.com> #87
ju...@gmail.com <ju...@gmail.com> #88
jo...@gmail.com <jo...@gmail.com> #89
get any TMobile service here. Our team just made our first app for the Android, but
it really hinders development and we can't easily share & demo the app with anyone on
the campus without wifi service.
gs...@gmail.com <gs...@gmail.com> #90
az...@gmail.com <az...@gmail.com> #91
tries to configure but since it takes long time in my office network(sometime upto 90
seconds) to get an IP address probably it times out much before that. Since mine is a
dev phone I tried playing arnd with WPA Supplicant config file too but no help.
I am hoping official support on this feature will be really helpful.
pf...@gmail.com <pf...@gmail.com> #92
this working. It keeps prompting me for a network password to connect, but there
isn't one. Just WPA2 authentication.
Now I have this network showing up, but I can't connect, I can't edit it, and I can't
forget/delete it. Any suggestions?
Thanks,
pd
ri...@gmail.com <ri...@gmail.com> #93
ps...@gmail.com <ps...@gmail.com> #94
I've looked at my logcat output and found no useful hints, and I've also tried to run
wpa_supplication from the command line (so I could run with the -d or -dd options
...), but it's not been able to bind to the tiwlan0 interface.
Thanks,
-- Pat
al...@gmail.com <al...@gmail.com> #95
re...@gmail.com <re...@gmail.com> #96
when it is released so if you're not going to root your phone, have a bit of patience.
bw...@gmail.com <bw...@gmail.com> #97
ch...@gmail.com <ch...@gmail.com> #98
xs...@gmail.com <xs...@gmail.com> #99
ni...@gmail.com <ni...@gmail.com> #100
security). I solved this for my HTC magic using the Wifi Helper app (thanks Fan
Zhang). The phone has wpa2-enterprise support (except in GUI). Add the network info
in the Wifi Helper, reboot the phone and it should work. (I do not know why the wifi
settings in the phone cannot update the network list with these kind of user infos
without reboot).
mi...@gmail.com <mi...@gmail.com> #101
/data/misc/wpa_supplicant.conf, so WifiHelper doesn't work) we (me and other people
in german android forum) get a system freeze and the following logcat output while
connecting to a wpa2-enterprise network:
22:00:05.679: DEBUG/WifiHW(1074): 'DRIVER LINKSPEED' command timed out.
forum link (german):
ma...@gmail.com <ma...@gmail.com> #102
ma...@gmail.com <ma...@gmail.com> #103
uses LEAP with dynamic WEP keys.
ma...@gmail.com <ma...@gmail.com> #104
with an iPhone if this isn't fixed soon. I tried using wifi helper to no avail.
mr...@gmail.com <mr...@gmail.com> #105
ja...@gmail.com <ja...@gmail.com> #106
HTC Hero, to 2.73.405.5, which like th 1.7.x rev in the shipped version, I'm able to
connect to WEP but _still_ cannot connect to a EAP-Enterprise secured network,
patience.exhausted(); argh! connectivity like this should really be a priority!
ph...@gmail.com <ph...@gmail.com> #107
I can connect the network with WPA2 but am not authorised through the proxy.
te...@gmail.com <te...@gmail.com> #108
authentication. However I can't figure out how to get my client certificate onto the
phone where can be selected from the drop-down list of certificates. I copied them to
the SD card, in a random directory. Any other ideas?
sh...@gmail.com <sh...@gmail.com> #109
company's WPA-EAP (PEAP-MSCHAPV2) wireless setup. I got a valid IP address and could
ping various internal hosts. However, I cannot browse to any of the internal web
sites. I can telnet to port 80 and retrieve the raw html output, but browsing to them
just times out. I even tried Opera Mini and got the same result. Not sure why
browsing won't work when I can telnet and ping these sites.
ma...@gmail.com <ma...@gmail.com> #110
ma...@gmail.com <ma...@gmail.com> #111
The network SSID shows up as WPA-EAP secured network.
I set up the connection specifying EAP mode (in my case, TTLS), Phase Authentication
(which is PAP), identity (my username) and wireless password (my account's pwd), but
I do not see any way to import the network's security certificate.
Result: Nothing happens when I press 'Connect'. The network shows as 'Remembered'.
To be noted, a laptop I set up this morning with Ubuntu Jaunty 9.0.4 connects without
problems to my WPA-EAP network exactly using the same parameters above and without
any certificate!
ck...@gmail.com <ck...@gmail.com> #112
supported, but when you go to select a certificate is just says NA. It seems that
the certificate needs to be placed on the phone somewhere so that it appears in this
dialog box.
I cannot find any documentation on this. Anybody know how this works?
cn...@gmail.com <cn...@gmail.com> #113
but i do not know how to use, anybody know about this?
cm...@gmail.com <cm...@gmail.com> #114
lu...@gmail.com <lu...@gmail.com> #115
this is eduroam - a lot of university campus use it. how can it be possible that
android doesn't support it?!
xs...@gmail.com <xs...@gmail.com> #116
ma...@gmail.com <ma...@gmail.com> #117
would you mind illuminaing the rest of us who still cannot figure this out?
thanks!
ba...@gmail.com <ba...@gmail.com> #118
[Deleted User] <[Deleted User]> #119
[Deleted User] <[Deleted User]> #120
authentication and cannot for the life of me connect to my network. I have tried
hand-editing my wpa_supplicant.conf file with the following code block (certain
fields hav3e been altered for privacy):
network={
ssid="myNetwork"
key_mgmt = IEEE8021X
group = WEP104 WEP40
eap = PEAP
phase2 = "auth=MSCHAPV2"
ca_cert="data/misc/wifi/myCert.pem"
identity="xxx"
password="xxx"
}
Am I missing something? I am running CyanogenMod 4.2.1 on top of Android 1.6 with the
latest radio image. The phone will see my network, but identify it as WEP, without
the option to modify it. If I manually create a profile, the phone will never tie the
profile to the network, in other words, my phone will see the profile I created as a
separate network that is always "currently out of range". Any help would be appreciated.
td...@gmail.com <td...@gmail.com> #121
Here's what worked for me at Imperial College if anyone happens to be here.
network={
ssid="Imperial-WPA"
key_mgmt=WPA-EAP
eap=TTLS PEAP TLS
identity="IC\me"
anonymous_identity="IC\me"
password="mypassword"
phase1="peaplabel=0"
phase2="auth=MSCHAPV2"
}
Note that if you don't have access to a computer and are patient you can add this in
one step by running a command like:
echo "
network={
ssid=\"Imperial-WPA\"
key_mgmt=WPA-EAP
eap=TTLS PEAP TLS
identity=\"IC\\me\"
anonymous_identity=\"IC\\me\"
password=\"mypassword\"
phase1=\"peaplabel=0\"
phase2=\"auth=MSCHAPV2\"
}" >> /data/misc/wifi/wpa_supplicant.conf
Or something like that. I might have got the escaping wrong. Also note the two >'s.
ks...@gmail.com <ks...@gmail.com> #122
WiFi implementation, otherwise Android isn't suitable for use on anything resembling
a secure enterprise wireless network. I'm on Sprint and have been tempted to switch
to an Android phone, but key features are missing (e.g. saving apps to SD) and I
won't switch to Android at this time. With props to Cyanogen and others, rooting a
phone -- when possible -- shouldn't be necessary.
pf...@gmail.com <pf...@gmail.com> #123
phone, and using WiFi Helper, and I *still* can't get it to connect to my WPA2
Enterprise network. On the iPod touch, it took less than 5 minutes, and it was
totally obvious.
This is inexcusable.
ti...@gmail.com <ti...@gmail.com> #124
Cannot correctly detect dynamic-WEP, insists it is WEP and asks for WEP key.
Will not allow modification of detected settings.
Will not use manually set settings.
(and why am I not allowed root on MY machine - that is why I choose linux!!!)
wa...@gmail.com <wa...@gmail.com> #125
this out till now. Even with Donut 1.6 I still cant connect to my Company's network.
WE use WPA2 EAP with verisign certifcates. As mentioned before nothing shows up
under certificates and it keeps asking for a password when we dont use one.
I have to praise the iphone for the full WPA2 EAP Support, it takes a min. to get
connected to our network on an iPhone.
Really disappointed from Google in this area.
wi...@gmail.com <wi...@gmail.com> #126
da...@gmail.com <da...@gmail.com> #127
lucky and have access to an alternative while at work but it's open and less than
ideal.
ga...@gmail.com <ga...@gmail.com> #128
(mostly for exchange support I take it). Adding support for other certificates such
as cer should not be too difficult
wi...@gmail.com <wi...@gmail.com> #129
here.
ma...@gmail.com <ma...@gmail.com> #130
network={
ssid="XXX"
scan_ssid=1
key_mgmt=IEEE8021X
auth_alg=OPEN SHARED
eap=LEAP
identity="XXX"
password="XXX"
priority=1
}
I know several people at my company who just got Droid's and they're going to be
pissed off this doesn't work without rooting. Google, get your ass in gear.
tj...@gmail.com <tj...@gmail.com> #131
worked for me using Android 1.6(Donut) on my G1.
to...@aol.com <to...@aol.com> #132
rooted method seems very easy, but 1. I don't how to to root my Droid 2. The GUI
should allow for this. Google, please update.
as...@gmail.com <as...@gmail.com> #133
It uses Dynamic WEP. Right now there is no way for me to either add the relevant
certificates or have the Wi-Fi manager distinguish this Dynamic WEP from normal WEP.
As far as I know, all universities in the Netherlands use Dynamic WEP for EduRoam at
this moment, so it's a major let down.
ad...@gmail.com <ad...@gmail.com> #134
Have you tested the instructions in your link (
Droid phone running Android 2.0? My Droid does not have any "pull down menu of 'EAP
Method'" etc.. When I select a network with 802.1x Enterprise it immediately prompts
for "the credential storage password," but doesn't ask for a username. Same results
when manually adding a network. Can you explain where this pull down menu is, or if
these instructions were written for an older version of Android? Thanks.
og...@gmail.com <og...@gmail.com> #135
specific port (10000)
da...@gmail.com <da...@gmail.com> #136
As root users can specify the user/pwd manually, I think there is just a lack of
Input form. The fact we have to wait that long for such an import feature is just poor.
ed...@gmail.com <ed...@gmail.com> #137
ed...@gmail.com <ed...@gmail.com> #138
Minnesota (WPA2 Enterprise, PEAP, MSCHAP V2). It was much simpler than I expected. Simply copy the file on
your phone at /data/misc/wifi/wpa_supplicant.conf, edit it and delete any existing entries for your access
point that are not working, and then save and overwrite the existing file on your phone. I don't think you need
root to do this. Again, these settings are for the University of Minnesota; you might need to tweak it for your
location.
network={
ssid="your_access_point_name_goes_here"
key_mgmt=WPA-EAP
eap=PEAP
identity="username_goes_here"
password="password_goes_here"
phase2="auth=MSCHAPV2"
}
ed...@gmail.com <ed...@gmail.com> #139
root, and the wifi stopped working (as described in
for me was to chown the owner back to system.wifi as Xykivo recommends:
# chown system.wifi wpa_supplicant.conf
But this also means you DO need have root, which means this issue is still a problem
for some. :(
he...@gmail.com <he...@gmail.com> #140
downloaded the .cer file i am not sure what to do, or why it says "n/a" be default.
I am running android 2.0
br...@gmail.com <br...@gmail.com> #141
ja...@gmail.com <ja...@gmail.com> #142
co...@gmail.com <co...@gmail.com> #143
runs Android 1.5, and cannot connect to my company's network because I cannot get it to
prompt for user and password. Is this supposed to work in Android 2.0?
It seems like the issue is over an year old, and we received no official answer from
Google. More transparency on the issue, please.
br...@gmail.com <br...@gmail.com> #144
3g reception in my building but wifi is everywhere. it would be most beneficial.
ja...@gmail.com <ja...@gmail.com> #145
ja...@gmail.com <ja...@gmail.com> #146
going on for a year already - and the top few most stared thread here.
sy...@gmail.com <sy...@gmail.com> #147
network={
ssid="WLAN"
scan_ssid=1
identity="myid"
ca_cert="/sdcard/ca.der"
password="mypwd"
proto=RSN
key_mgmt=WPA-EAP
eap=PEAP
phase1="peaplabel=0"
phase2="auth=MSCHAPV2"
}
But it doesn't work. My phone simply ignore my setting and shows the wifi, which has
exactly the same SSID, as WPA-EAP. The one I set up appears as "remembered, not in
range". That is to say, WPA2-Enterprise is not supported! Only WPA-Enterprise is!
er...@gmail.com <er...@gmail.com> #148
I have used the GUI to attempt to connect to my institution's wireless using: EAP-TTLS with PAP
The network SSID is broadcast so it's visible to clients to see it's there (on Android it says "Secured via WEP"). However,
the clients do need to have their 802.1x settings configured properly.
If I start from scratch (not having any networks "remembered"), I see my wireless SSID in the list of networks. in
order to set the EAP-TTLS / PAP configurations, however, I have to "add wi-fi network". I set all configuration settings
as such:
SSID: "my-institution-ssid"
Security: 802.1x Enterprise
EAP Method: TTLS
Phase 2 Auhenication: PAP
CA Certificate: n/a
Client Certificate: n/a
Identitiy: my_wireless_uname
Wireless Password: my_wireless_password
After setting all this, it attempts to connect, showing "obtaining ip address" then all of a sudden stops and shows two
networks of the same name (the original "SSID" that's broadcast, and the new setting with the 802.1x settings).
Unfortunately, the original one still says "Secured via WEP" and the new one simply says "Remembered: not in range".
If I try to "change the password" on the 802.1x setting I made, it shows the admin interface, but I need to it all over
again for 802.1x configurations.
Eventually, I end up with a plethora of wireless networks, all with the same SSID, all (but one) saying "Remembered:
out of range" and one saying "Secured via WEP".
I'm just wondering if anybody has any thoughts on how to get this to work. I've communicated with my networking
department, but they I'm the only person on android on the network (most everyone else are on iPhones or
something). Any / all help appreciated!
je...@gmail.com <je...@gmail.com> #149
options offered are great - but also happen to be rarely implemented in most small
to mid-size businesses.
tk...@gmail.com <tk...@gmail.com> #150
PEAP/MSChapv2 setup. There is no way to remove (Forget) the automatically discovered
SSID that matches the one I configured. This is really stupid to not allow editing
properties of auto-discovered SSID's!
ta...@gmail.com <ta...@gmail.com> #151
buy 200 of these phones.
ec...@gmail.com <ec...@gmail.com> #152
produced G1, but G1 is just like its son without parents!
sy...@gmail.com <sy...@gmail.com> #153
It is Priority-Critical! Not medium!
ya...@gmail.com <ya...@gmail.com> #154
authentification and I can't have wifi in college with my handset, wifi would be
really useful for all data consuming apps :(
ho...@gmail.com <ho...@gmail.com> #155
open new doors for the Android OS. Having to hack the OS to enable it is not
something that the majority of users are able to handle, so that should not even be
considered a solution. If you really want to compete with Apple, you would seriously
consider adding this in an upcoming update.
ma...@gmail.com <ma...@gmail.com> #156
this feature along with RSA secure ID support for IPSec/PPTP VPN are stopping me from
going for a Andriod Phone.
xi...@gmail.com <xi...@gmail.com> #157
se...@googlemail.com <se...@googlemail.com> #158
By the way for finding an easier solution i've enclosed our certificate at our school
(and the admin doesn't have a clule there -.-)
od...@gmail.com <od...@gmail.com> #159
SSID: "xxx-sid"
Security: 802.1x Enterprise
EAP Method: PEAP
Phase 2 Auhenication: none
CA Certificate: n/a
Client Certificate: n/a
Identitiy: my_id
Wireless Password: my_password
The result is, I can obtain the ip address from DHCP, from app "static WIFI", both
gateway and dns are correct received. But I can't ping any of server, and can't
access any of website in my office, even I use IP address only.
mi...@gmail.com <mi...@gmail.com> #160
mi...@gmail.com <mi...@gmail.com> #161
le...@gmail.com <le...@gmail.com> #162
horribly.
tb...@gmail.com <tb...@gmail.com> #163
The top of /data/misc/wifi/wpa_supplicant.conf appears to be different (Re: Comment
54 by prakashr82, Jun 02, 2009)
ctrl_interface=DIR=/data/system/wpa_supplicant GROUP=system
update_config=1
network={
ssid="Imperial-WPA"
key_mgmt=WPA-EAP
eap=TTLS PEAP TLS
identity="IC\usrname"
anonymous_identity="IC\usrname"
password="paswrd"
phase1="peaplabel=0"
phase2="auth=MSCHAPV2"
}
The file is much easier to change on your computer with the development tools.
adb -s devicename pull /data/misc/wifi/wpa_supplicant.conf wpa_supplicant.conf
adb -s devicename push wpa_supplicant.conf /data/misc/wifi/wpa_supplicant.conf
(devicenames can be seen from "adb devices" command)
an...@gmail.com <an...@gmail.com> #164
problems on a Nexus One, through a nice GUI. This is good news, right? Or has
everyone been able to do this all along.
My university uses EAP-PEAP/MSCHAPv2. All I had to do was add a network manually,
enter those settings and my username and password. Works just fine.
wm...@gmail.com <wm...@gmail.com> #165
on my new Nexus One out-of-the-box. (The University of Cincinnati.) Seems like it works
in the Nexus One firmware, which is Android 2.1 I think.
j....@gmail.com <j....@gmail.com> #166
WAP EAP who of course can send me a pdf of the helpful process for doing this on an
iPhone but have no knowledge of the bits for doing this on Android - and given the
coding dramas here I can see why! If Android 2.1 has this out of the box, as it seems
from the two comments above, then why is this issue persisting on 2.0 or earlier
android systems? Will this at all be updated so users can simply join these networks,
or will we forever be forced to fiddle round for hours and bug IT people to find that
eventually they'll throw up their hands and say we give up and we end up paying
through the nose to the very phone providers we were trying to escape?!
This comes on the back of yesterday, at my office, finding out that the lack of proxy
support on Android 2.0 is stopping any access there as well! This is so frustrating,
if I hadn't bought the phone in the UK, I'd take it back under the New Zealand
Consumer Guarantees Act for "not meeting the purposes which it was advertised for" -
wifi access - should read wifi access*, *not including wifi requiring WAP, WAP2
Enterprise, *not including proxy-controlled wifi, *not including, where-ever-the-
hell-else-I'm-going-to-find-doesn't-work-with-my-android-phone-access-tomorrow!!
I hereby add my voice to the chorus that hopes I didn't buy a rubbish, rip-off OS
phone.
ct...@gmail.com <ct...@gmail.com> #167
network) have given a lot of Canadian users headaches... but I am happy to report
that I was able to connect at UBC with a Nexus One, Android 2.1. I had to select
manually the PEAP and MSCHAPv2 options, skip the certificates, scroll down further
and enter username/pass. Wait a minute and it authenticates.
The only problem is it takes quite a while to negotiate the connection. My iPod Touch
negotiates it in 5-15 seconds. Nexus One takes up to a minute. If I move to another
room or building on a different access point, it then takes another minute or so to
get its bearings. Unfortunately wireless data remains disabled during this minute, so
apps suddenly can't see the Internet until I'm standing in the same place for long
enough again.
st...@gmail.com <st...@gmail.com> #168
connects faster than my Milestone(droid). Are anyone working on improving this?
fp...@gmail.com <fp...@gmail.com> #169
beggest portuguese universities and polytecnics.
If google does not correct please adopt wifihelper an install standard running as root.
It is a real UI Major design fault since the configuration is inside linux and very
easy to correct. (Android repeats iphone initial PAP lacking). This wifi configuration
is used by many open encryption, Cisco European enterprise and university environments
and circumventing propriaitaire solutions from MS. If Android is open it might be the
first wifi entreprise option.
gc...@gmail.com <gc...@gmail.com> #170
It's ridiculous that my phone can *in theory* connect to my network, but can't do it in practice since It won't
allow me to override a discovered network's settings (see comment 151)!!
This is one the worst UI bad-design-decisions I've seen ...
Come on Google, this can't be more than a few lines of code, all the logic and configuration UI is already inside
the OS...
[Deleted User] <[Deleted User]> #171
as a DER/PEM which installs easy as can be on any windows laptop or pda and a few
other devices. However, the Nexus can only import a .p12 file.
I have done some digging and I can't see how you convert a PEM or DER to a
PFX/PKCS#12 (.p12) file, without having a private key and/or password.
We are not supplied any keys other then the PEM certificate, which is enough to get
us on the network on everything else.
What is the process to get from a PEM to something I can import on the Nexus?
ja...@gmail.com <ja...@gmail.com> #172
At home I'm connecting through WiFi via WPA-2 Personal without any issue.
However at work, they use WPA-2 Enterprise and is using certificates.
Is there a way to get this working too.
Sofar I'm unable to connect.
The only options I see are with user/pass combinations
Reading the above posts make me believe this WPA-2 Enterprise is not implemented in
Android yet.
Will it be in the near future ??
ra...@gmail.com <ra...@gmail.com> #173
should be a fairly easy UI fix, hopefully.
st...@gmail.com <st...@gmail.com> #174
ro...@gmail.com <ro...@gmail.com> #175
ed...@gmail.com <ed...@gmail.com> #176
to advanced settings.
br...@gmail.com <br...@gmail.com> #177
I feel your pain, I was in the same situation until I found a Google Group (Android
Security) that had a solution.
Basically you need to go to the web page containing the x509 CA certificate but the
web server has to send the HTTP Content-Type as application/x-x509-ca-cert and then
the browser will launch the Credential Install thing.
I made a tool that allows you to easily send your CA certificate to your phone:
Hope this helps! (it helped me)
-Brian
ro...@gmail.com <ro...@gmail.com> #178
eduroam. Primary standard is EAP-TSL /PAP, which android just does not support, so
not certificate error, but WIFI protocol...
(something to do with Microsoft license on EAP/PAP, nokia doesnn,'t support it
either...)
al...@gmail.com <al...@gmail.com> #179
for rooted phones it really shouldn't be that hard to include...
er...@gmail.com <er...@gmail.com> #180
802.1x EAP and require a certificate that cannot be imported into the Droid. I have
searched and searched for a fix but can't seem to find an answer. Google what's the
deal here? When will this be addressed? Wifi has been an issue since Nov 2008?? Is
it too difficult for your engineers to figure out or does it just not work period?
Here's some food for thought; Our CIO recently purchased a Droid and had our IT guys
try to configure it for him. Importing a cert was a no go and since he couldn't gain
access to our wireless network, he returned it and purchased one of the other well
known devices (which I will not name) and didn't have a problem. We are talking
about a CIO of a 5k employee company here. If this would have worked out, I can
guarantee you it would have been implemented as a corporate standard PDA. As it
stands now, it sits on the back burner as a non-recommended device. I can't believe
this hasn't been addressed.
sm...@gmail.com <sm...@gmail.com> #181
sm...@gmail.com <sm...@gmail.com> #182
to note that I got mine working using the advice provided by
number 66). To me, the GUI options to check boxes that would add the two elements
missing noted in
should have to root my 500+ phone and void its warranty to get it on my corporate
network!
ad...@gmail.com <ad...@gmail.com> #183
fr...@gmail.com <fr...@gmail.com> #184
such a lifesaver to be able to connect on my Tattoo, I can't see why this hasn't been
sorted out yet. I'm not really willing to root my phone to do the workaround.
Any news of a fix on the horizon at all?
jb...@gmail.com <jb...@gmail.com> #185
returning mine and getting an iPhone or blackberry unfortunately. I liked everything
else about this gadget but being at work so much I need something that will work with
WPA2 enterprise
[Deleted User] <[Deleted User]> #186
though, and my Droid Eris running 2.1 DOES work with the wireless. Just thought i'd
post :D
jo...@gmail.com <jo...@gmail.com> #187
create a phone that it designed to keep you connected wherever you go, but, lets
leave out the capability to connect to the type of network you are most likely to
find in workplace/school. I don't think this is an enhancement, I think it should be
considered a critical bug because it blocks the device from doing what it was meant
to do. The code is after all mostly there, its all in the kernel, someone was just
didn't care enough to write the UI.
ka...@gmail.com <ka...@gmail.com> #188
this guideline (in spanish) of this spanish university. A 1.6 donut version is
required, a eduroam account and a PEM-encoded x509 certificate (check opennSSL for
format convertion)
html
ro...@gmail.com <ro...@gmail.com> #189
eyes on the Samsung Galaxy S, but looks like this would be a dealbreaker for me. It
seems like Google just wants me to get the next gen iphone.
dr...@gmail.com <dr...@gmail.com> #190
phone used: Motorola Droid
environment: WPA2 enterprise, University of Arizona campus wireless network
With android 2.0.1 when trying to connect I would be prompted for a security certificate that I did not have. And consequently could
never connect.
With android 2.1 I seem to be able to connect successfully. I verified that my external IP address is a university IP address (not a Verizon 3G IP) and the speed is what you would expect from a wifi connection. I have only been using Andriod 2.1 for a couple days
but so far so good.
connection settings used for my particular environment:
security: 802.1x enterprise
eap method: peap
phase 2 authentication: mschapv2
ca certificate: <left blank>
client certificate: <left blank>
identity: (university assigned username)
anonymous identity: <left blank>
wireless password: (university assigned password)
jb...@gmail.com <jb...@gmail.com> #191
ba...@gmail.com <ba...@gmail.com> #192
connection. No prompt for a cert. Any ideas?
fu...@gmail.com <fu...@gmail.com> #193
security: 802.1x enterprise
eap method: peap
phase 2 auth: mschapv2
ca cert: <blank or ca cert filled in, doesn't seem to matter>
client cert: <blank>
identity: <windowsdomainname\username>
anonymous identity: <blank>
wireless password: <password>
Says wireless network is out of range, but WEP entries for the same SSID appear.
iPhone 3G S and iPod Touch 2nd gen seem to work just fine. Typical Ubuntu Linux
machines work just fine with the same information filled into wpa_supplicant.
ad...@gmail.com <ad...@gmail.com> #194
ba...@gmail.com <ba...@gmail.com> #195
ca certificate: <left blank>
client certificate: <left blank>
ba...@gmail.com <ba...@gmail.com> #196
and password seems to work for my eduroam account on my HTC Desire - BUT I cannot
seem to change proxy details anywhere... I have even tried this -
[Deleted User] <[Deleted User]> #197
tj...@gmail.com <tj...@gmail.com> #198
je...@gmail.com <je...@gmail.com> #199
why has this issue with so much commentary and requests from numerous parties still
flagged as "New", not yet assigned nor reviewed. Are the devs not willing to take this
on for some other business/political reason? is there support for previous platforms
(e.g. 1.5) or are we just expecting this for future builds only. Seeing as this boils
down to what seems to be a GUI limitation. I take it Google wouldn't want users to keep
resorting to "rooting" phones, or is that the direction they want? Commentaries and
outside opinions welcome, sorry if it's been hashed out before.
av...@gmail.com <av...@gmail.com> #200
Tap the WPA2 ENT network.
It will then ask for you "storage key password something". Enter whatever you want
with enough characters. It will reject. Try connecting again for about 6-8 times.
After 6-8 times it will pop out a new menu which will enable you to enter anonymous
username, username and password. Fill in your username in both anonymous username &
username. It should connect.
Good Luck.
co...@gmail.com <co...@gmail.com> #201
named a little differently. And, with 2.0.1, you select 802.1x to setup your WPA2
Enterprise connection.
bl...@gmail.com <bl...@gmail.com> #202
Comment 151 by ernie.gillis, Dec 11, 2009, only I am using PEAP > MSCHAPV2.
ai...@gmail.com <ai...@gmail.com> #203
eduroam uses EAP TKIP with PAP. Will be fantastic to have it implemented in Android.
Ive heard that wpa_supplicant daemon is not very usable because frecuently
disconnections...
Thanks Android Developers! You are the bests!
Aitor
za...@gmail.com <za...@gmail.com> #204
security: 802.1x enterprise
eap method: peap
phase 2 auth: mschapv2
identity: <userid@university.tld>
anonymous identity: <blank>
wireless password: <password>
works like a charm
se...@gmail.com <se...@gmail.com> #205
getting it rooted, which I did half an hour after he posted it. Anyway, after I
rooted, I did what I thought was the fairly easy process of editing the
wpa_supplicant.conf file with the appropriate details. I also have an Archos 5IT
which has given the ADB user sufficient privileges to edit this file, which worked
perfectly, so I do have experience with this.
Unfortunately it didn't prove anywhere near as easy with the Desire. After pulling
the wpa_supplicant.conf file out, editing it, then pushing it back to the device, it
broke my wifi altogether. The wifi manager at that point wouldn't turn on the
wireless, it wouldn't turn it off, and if you restarted the phone, the power control
icon would stay only half on and just hang. The only consistent way to get back to
fully working is to generally wipe the file, to only the first two, setup lines.
This is incredibly frustrating, because while I don't have a problem with rooting the
phone, when something like this happens, it just proves a ridiculous limitation to
the Android platform. Does anyone have an insight into how or why editing the
wpa_supplicant.conf file would bring down the Wifi manager?
ne...@gmail.com <ne...@gmail.com> #206
I work at 7 schools in Victoria Australia where the wireless systems are WPA2
Enterprise with personal and root certificates. I have just bought an HTC Desire
with Android 2.1.1 and am surprised to find that it will only import .p12
certificates. My personal cert will install but our root cert will not import since
it is not a .p12 and does not require a password. And then, since all our schools
use a proxy server, if I was able to connect, I would be unable to access the
Internet as 2.1 doesn't appear to support proxy settings anywhere, either in the
browser or in the network settings. Unfortunately I retired a Windows Mobile 5 iPaq
device (couldn't cope with the WEP to WPA2 upgrade) for the HTC to find it is
equally useless in the workplace. Please please please Google get this working and
advise if it'll be in the next release or v3 or whatever. Oddly, 1.6 connects to
WPA2 Enterprise with TLS certificates OK - now 2.1 is broken.
ra...@gmail.com <ra...@gmail.com> #207
Desire as I am loathe to buy an iphone... But in this case the iphone OS is more
configurable! :( Please add this support ASAP. *Adds Star* *begs*
jj...@gmail.com <jj...@gmail.com> #208
the WPA2 Enterprise credentials after one incorrect password entry and then on
entering the correct, expanded credentials the connection worked just fine.
th...@gmail.com <th...@gmail.com> #209
da...@gmail.com <da...@gmail.com> #210
Desire. All I did was use standard network username for the wireless user AND the
anonymous user along with normal network password...
je...@gmail.com <je...@gmail.com> #211
userids and passwords in order to use the WiFi.
One of the main reasons for buying the phone (which I love!) is unusable until this
support is provided.
Please, please please. Make it quickly...and then tell me how the hell to update my
phone, because I don't speak Korean.
The phone is an LG KH5200.
ma...@gmail.com <ma...@gmail.com> #212
enterprise with TTLS + PAP), all is working fine, but I saw that there isn't any kind
of option to define the CA that should be checked during connection (it's an
university CA). In this way should be possible to do a MITM attack and gain my
password. There is any way to set the CA certs without rooting the system?
ke...@gmail.com <ke...@gmail.com> #213
use with 802.1x Enterprise PEAP MSCHAPV2 on my Nexus One with Android 2.1 without
rooting the system. Thanks for the service!
he...@gmail.com <he...@gmail.com> #214
he...@gmail.com <he...@gmail.com> #215
method on Android 2.1 and post the results. I suppose this will work fine,
nj...@gmail.com <nj...@gmail.com> #216
Wi-Fi on the phone only prompts for a WEP password. I have certificates on my SD card, but can't find where to
put them. Any assistance would be greatly appreciated. I checked link provided by heartrobber18 on 1 June but
my menus don't appear to be the same.
ge...@gmail.com <ge...@gmail.com> #217
companies WPA2 network. I can easily access unprotected networks though.
ha...@gmail.com <ha...@gmail.com> #219
going to have a 4G... Clean up your act please. Pay some attention to the Enterprise
Solution so people take your toy seriously as a business phone, Nexus one, and not just
a teen toy. I'm really disappointed that I can't do the enterprise wifi? and VPN which
anyone and everyone can do
sm...@gmail.com <sm...@gmail.com> #220
this will work for you.
ctrl_interface=eth0
update_config=1
network={
ssid="put your network's SSID here"
scan_ssid=1
key_mgmt=IEEE8021X
eap=TTLS
identity="put your username here"
password="put your password here"
phase2="auth=PAP"
priority=1
}
sh...@gmail.com <sh...@gmail.com> #221
sa...@gmail.com <sa...@gmail.com> #222
Configuring it was not easy but once done,it worked like a charm.
It will be great if this can be supported by Android.
dj...@gmail.com <dj...@gmail.com> #223
Tut tut.
ne...@gmail.com <ne...@gmail.com> #224
be...@gmail.com <be...@gmail.com> #225
lu...@gmail.com <lu...@gmail.com> #226
Network SSID = (my university's WPA-protected wi-fi network)
Security = WPA-EAP
EAP method = TTLS
Phase 2 authentication = MSCHAP2
CA certificate = N/A
Client certificate = N/A
Private key password (leave blank)
Identity = userid (your AD username)
Anonymous identity (leave blank)
Wireless password (your AD password)
Show password (unchecked)
My unviersity's wi-fi network advertises itself as WPA2-enterprise, and this is technically not WPA2 Enterprise. But this workaround was suggested by one of my university's network engineers as a workaround for Android devices. Also, since it uses a secure password-checking system (CHAP), so it should be reasonably secure. It's also a lot more convenient than entering my university credentials into an SSL webform every time I come back from lunch...
In other words, if you're at a university with a WPA2 wi-fi network, don't give up on this -- WPA2-EAP may be strongly encouraged, but not strictly required.
cl...@gmail.com <cl...@gmail.com> #227
ek...@gmail.com <ek...@gmail.com> #228
cl...@gmail.com <cl...@gmail.com> #229
Goto TAP search for "LEAP Configuration Manager". Download and install IBMLeapMgr.apk. This app will setup a leap profile for you. Works on Android 1.6 and upwards.
You do *not* need to root your phone.
da...@gmail.com <da...@gmail.com> #230
Here's some info that hopefully may help someone.
My environment:
WPA2-Enterprise, PEAP/MSChAPv2
Received an x.509 CA certificate from my admin.
Rooted Nexus One running Froyo FRF72
First problem encountered:
Installing the ca.cer file into my android. I used Brian's (thank you very much) website (
Second problem encountered:
When i selected the network from the "Wireless Networks" settings, it would let me select the settings which were (PEAP, MSCHAPv2, CA Cert) but then when i hit connect, it would try to connect and then instead of prompting me for the username and password, it would fail.
My solution around it:
Instead of selecting the network from the list, i selected "Add Wi-Fi Network" manually. In that screen i could select all of the above options PLUS it also had the option to enter my "identity" and "password". Once i entered that, it connected without any problem.
li...@gmail.com <li...@gmail.com> #231
PEAP network at work connected fine, and then my home TKIP wont work, i got that working again and now when i arrive at work PEAP wont work - asks for a credential store password and then refuses to connect. not the only person who has this problem, another co-worker with a sprint HTC had the same problem. after dumping the store "forget" it seems to work.
sk...@gmail.com <sk...@gmail.com> #232
th...@gmail.com <th...@gmail.com> #233
de...@gmail.com <de...@gmail.com> #234
jo...@gmail.com <jo...@gmail.com> #235
an...@gmail.com <an...@gmail.com> #236
se...@gmail.com <se...@gmail.com> #237
ne...@gmail.com <ne...@gmail.com> #238
da...@gmail.com <da...@gmail.com> #239
um...@gmail.com <um...@gmail.com> #240
jo...@gmail.com <jo...@gmail.com> #241
sa...@gmail.com <sa...@gmail.com> #242
ch...@gmail.com <ch...@gmail.com> #243
When i saw my colleague can access company WIFI, it just make me feel i make a wrong decision to bought Android phone.
Google experts please help to solve this.
ha...@gmail.com <ha...@gmail.com> #244
ch...@gmail.com <ch...@gmail.com> #245
da...@gmail.com <da...@gmail.com> #246
ia...@gmail.com <ia...@gmail.com> #247
un...@gmail.com <un...@gmail.com> #248
ni...@gmail.com <ni...@gmail.com> #249
jo...@gmail.com <jo...@gmail.com> #250
er...@gmail.com <er...@gmail.com> #251
du...@gmail.com <du...@gmail.com> #252
da...@gmail.com <da...@gmail.com> #253
vi...@gmail.com <vi...@gmail.com> #254
vi...@gmail.com <vi...@gmail.com> #255
ch...@gmail.com <ch...@gmail.com> #256
gc...@gmail.com <gc...@gmail.com> #257
se...@gmail.com <se...@gmail.com> #258
ti...@gmail.com <ti...@gmail.com> #259
al...@gmail.com <al...@gmail.com> #260
Thanks, seta2350.
od...@gmail.com <od...@gmail.com> #261
As seta2350 mentioned, I have released an application on the Android Market (Wifi Config Editor) that allows you to edit the WiFi settings as are stored in the internal WPA_Supplicant WITHOUT the need to Root the device.
A number of people have found this to solve their WiFi networking issues.
Let me know if you have any issues with it.
--OddRain
ib...@gmail.com <ib...@gmail.com> #262
sh...@gmail.com <sh...@gmail.com> #263
bo...@gmail.com <bo...@gmail.com> #264
I have installed Wifi Config Editor (free version), but I still cannot config my campus wifi properly. My wifi setting is similar with seta2350 (WPA-EAP PEAP with MSCHAPV2). Can only Wifi Config Editor Pro deal with the problem? If this free version can do, please help me solve the issue.
My campus wifi setting is listed as follows:
SSID sMobileNet
Authentication WPA2-enterprise/WPA-enterprise
Data Encryption AES/TKIP
EAP Type PEAP (EAP-MSCHAPv2)
Trusted Root Certification Authorities Thawte Premium Server CA
Server Certificate
Thank you so much!
pf...@gmail.com <pf...@gmail.com> #265
I must have access to the enterprise part also, and because of the 0.99 fee i can't find it on the app market.
tr...@gmail.com <tr...@gmail.com> #266
Thanks!
@Google, fix the OS please to allow this by default.
ra...@gmail.com <ra...@gmail.com> #267
vn...@gmail.com <vn...@gmail.com> #268
Nikhil
vnikhils@gmail.com
to...@gmail.com <to...@gmail.com> #269
I tried Wifi Config Editor Pro, but still cannot connect. I think it's getting further in the handshake, as the device's error log shows slightly further progress.
ry...@gmail.com <ry...@gmail.com> #270
pf...@gmail.com <pf...@gmail.com> #271
Can't you release the Pro version for free? This should already be included in Froyo.
But until it is , it would be good It the fix was free.
al...@gmail.com <al...@gmail.com> #272
jo...@gmail.com <jo...@gmail.com> #273
ma...@gmail.com <ma...@gmail.com> #274
Considering Android's great start and their huge gains in the smartphone market, it'd be sad to see them lose a large part of their academic-market.
Would it be possible for any Android Developers to reply to our inquiry as to when a fix might be issued?
da...@gmail.com <da...@gmail.com> #275
[Deleted User] <[Deleted User]> #276
sk...@gmail.com <sk...@gmail.com> #277
ya...@gmail.com <ya...@gmail.com> #278
[Deleted User] <[Deleted User]> #279
ma...@gmail.com <ma...@gmail.com> #280
al...@gmail.com <al...@gmail.com> #281
st...@gmail.com <st...@gmail.com> #282
bo...@gmail.com <bo...@gmail.com> #283
bo...@gmail.com <bo...@gmail.com> #284
ma...@gmail.com <ma...@gmail.com> #285
ch...@gmail.com <ch...@gmail.com> #286
network={
ssid="XXX"
scan_ssid=1
key_mgmt=WPA-EAP
eap=PEAP
identity="XXX"
anonymous_identity="XXX"
password="XXX"
phase2="auth=MSCHAPV2"
}
I had some permission issues because I used cp as opposed to cat. When I started WiFi I received and error. The issues were fixed by the following two commands.
chown wifi:wifi wpa_supplicant.conf
cmod 660 wpa_supplicant.conf
Hopefully this issue gets fixed soon.
le...@gmail.com <le...@gmail.com> #287
After discovering a way to enter individual settings into the WPA_Supplicant file, I released a prototype on the Android market which exclusively connects users to the campus's wireless network and only prompts for username and password. We use eap=PEAP and phase2="auth=MSCHAPV2"
Please contact me if you would like a wifi configuration application at developer@john-lee.net
cv...@gmail.com <cv...@gmail.com> #288
Next go into the wifi config editor app and uncheck the WPA_EAP setting in Key Management for the wi-fi network you created. Back out of the app and your wireless should now connect (Note I had to go back to the app twice and uncheck the WPA_EAP setting before it held, after that everything works perfectly).
ra...@gmail.com <ra...@gmail.com> #289
settings:
SSID: give your companys SSID
BSID: leave blank
hidden SSID: not selected
adhoc: not selected
adhoc channel frequency : not selected
key management:select WPA_EAP + IEEE8021x
Auth protocols: select LEAP
Group ciphers: select CCMP
Pairwise ciphers: select CCMP
security protocol: WPA + RSN
enterprise configuration:
EAP: LEAP
Phase 2: blank
identity: your network id
anonymous identity: leave it blank
password: give your network password
Client certificate, CA certificate, and private key: leave blank
dc...@gmail.com <dc...@gmail.com> #290
(at least for people without the need of a CA certificate):
Okay, so I was messing around today trying to get my University WPA2 account working. And I figured out EXACTLY how to do it with just the base Configuration Settings in FROYO (Android 2.2 OTA update).
1. Find SSID for your Enterprise Account (LaTechWPA2 for me)
2. Enter a password..... ??? This is what baffled me forever because Enterprise connections require Username AND Passwords. So here's what you do..... Enter ANY 8 digits into this ridiculous field (testingg is what I used for this baffling question)
3. You will now be taken to a page where you can set your Configuration Settings:
a. EAP=PEAP
b. auth=MSCHAPV2
c. Identity=username
d. Anonymous Identity= (I left blank)
e. Password=password
And then I hit connect and behold, I have WPA2 wifi connectivity
If you need to logon with a CA certificate, you'll probably have to download the Wifi-Advanced-Config-Editor to specify the location of the CA certificate. But for all other who don't require the CA certificate you can now connect fast with no other Apps.
ke...@gmail.com <ke...@gmail.com> #291
1) The certificate is in PKCS#7 format, so I had to extract it to base64 .cer using Windows' Certificate Manager.
2) I used a local webserver to serve up the CA cert via index.php:
<?php header("Content-Type: application/x-x509-ca-cert"); ?>
[insert contents of base64-encoded certificate here, including BEGIN and END lines]
3) I browsed to the web server from my Android phone, and it prompted me to name the certificate for installation.
The certificate is now available for configuration under 802.1X in the wifi settings. Editing wpa_supplicant.conf by hand is unnecessary for this, though it is required if you want to change an /existing/ network profile.
I would very much like to be able to edit existing networks through the GUI, since my password changes every 30 days.
ke...@gmail.com <ke...@gmail.com> #292
ne...@gmail.com <ne...@gmail.com> #293
It was a little bit tricky as you must first create the network as usual using android native wifi editor and use Enterprise network type, than you use the stated application to configure all details for the network as needed, my case they use LEAP and TKIP and it worked with the active directory authentication.
Really helpfull application and in my Android 2.1 I didn't needed to root it so far.
This confirm that look like an UI issue as the OS infrastructure on the phone support it with no issue.
Hope this help.
Regards
le...@gmail.com <le...@gmail.com> #294
The application is best for wireless networks using 8021x with dynamic WEP keys.
aa...@gmail.com <aa...@gmail.com> #295
I cant test my companies Mobile Website without it!!!
wi...@gmail.com <wi...@gmail.com> #296
ma...@gmail.com <ma...@gmail.com> #297
gm...@gmail.com <gm...@gmail.com> #298
du...@yahoo.com <du...@yahoo.com> #299
lu...@gmail.com <lu...@gmail.com> #300
fr...@gmail.com <fr...@gmail.com> #301
My co-workers iphone and ipod touch all worked without any issue, a year ago...
This is really really bad. Android is just not there yet to compete with iOS, no matter how many devices have been sold.
tv...@gmail.com <tv...@gmail.com> #302
and the put in my password and I'm on!
wi...@gmail.com <wi...@gmail.com> #303
th...@gmail.com <th...@gmail.com> #304
ja...@gmail.com <ja...@gmail.com> #305
I set it for 802.1x EAP using PEAP with Phase 2 of MSCHAPV2 and no certificate and then put in my network credentials in Identity as domain\username and then password in password.
We have an invisible network so of course I had to put in the SSID (which is case sensitive) and it works great.
jc...@gmail.com <jc...@gmail.com> #306
WPA-EAP (PEAP)
MSCHAPV2
data encryption: AES
I can create a profile connection and everything works great... UNTIL I need to change my domain password per corperate policy (every 45 days). I can not find a method to accomplish this without forgetting & re-creating the wifi profile. Seems pretty crude. Tried just using the WiFi Advanced Config Editor mentioned in a few posts here... seems to offer a way to change the password but after doing so, device never attempts to use the updated profile - as if it is unaware the network is even available.
be...@gmail.com <be...@gmail.com> #307
pr...@gmail.com <pr...@gmail.com> #308
ch...@gmail.com <ch...@gmail.com> #309
I'm not sure if this will help anyone here or not but it has worked consistently for us since we figured this solution out. I hope the Android development community gets their terminology straightened out however. Users will not think to select 802.1X EAP when attempting to connect to a WPA2 Enterprise network...
an...@gmail.com <an...@gmail.com> #310
st...@gmail.com <st...@gmail.com> #311
js...@gmail.com <js...@gmail.com> #312
However, the wireless fails to disconnect properly after leaving the network - i.e. once I leave the network range, the phone does not automatically switch to the cellular data network, but instead reports that it is still connected to the university wifi. This does not occur with my home wifi network.
sh...@gmail.com <sh...@gmail.com> #313
"What finally ended up working in our University environment was to use the WiFI Config Editor app by OddRain - create a new wi-fi network as you normally would in the android settings area - enter your config information for 802.1x etc (whatever is correct for your environment). You will still see the two SSIDs (one you created and the one that is showing 'Secured by WEP.'
Next go into the wifi config editor app and uncheck the WPA_EAP setting in Key Management for the wi-fi network you created. Back out of the app and your wireless should now connect (Note I had to go back to the app twice and uncheck the WPA_EAP setting before it held, after that everything works perfectly)."
82...@gmail.com <82...@gmail.com> #314
But I have no idea what the "anonymous User" is for.
The rest of the settings are just like Windows mobile.
NOTE: Root certification files are [.crt] files
Perseonal certification files are [.p12] files (just change the windows extension .pfx to .p12) and it works!
Hope that helps!
Galaxy tab
er...@gmail.com <er...@gmail.com> #315
Thanks in advance
Eric
jn...@gmail.com <jn...@gmail.com> #316
Is there an official fix on this yet? It's clearly been an issue for quite some time now
wi...@gmail.com <wi...@gmail.com> #317
I'm also looking at connecting to a WPA-EAP configured network. Actual wpa_supplicant.conf requirements can be seen at
If I try to set up wireless through the GUI, I can sometimes connect, but not often. And usually after a few hours, or maybe a day, it'll plain stop working. It'll keep doing the scanning/connecting/disconnected loop, and I have to remove and re-add the network and hope it works again.
I've tried manual editing /data/misc/wifi/wpa_supplicant.conf and I've noticed two things:
Android adds "8021X" to key management, albeit after WPA-EAP. I don't see how this could cause an issue, but this could be why my phone sits so long while displaying "Connecting ...".
Secondly, Android doesn't specify the password in wpa_supplicant.conf. Now I believe this is meant to be filled in by the credential storage (yes it is enabled and a password has been set). However, if I manually specify the password in wpa_supplicant.conf, my phone connects fine. If the password is not specified, my phone won't connect.
Is it possible that wpa_supplicant is not correctly getting the password from credential storage? That at least seems to be where my issue stems from.
wi...@gmail.com <wi...@gmail.com> #318
I don't know if it would relate to any other people, either.
ko...@gmail.com <ko...@gmail.com> #319
ko...@gmail.com <ko...@gmail.com> #320
Has anyone gotten a tablet device to run with WPA-EAP? I can't get it. I've followed the advice above with the exception of downloading the Advanced Configuration Tool.
Seems Google is really on the cusp of instantly becoming a major player in the PC market altogether (with the upcoming release of the Chromebooks and all) while people can use the same OS on their phones as they can on tablets and netbooks.
We just can't get any of their devices to easily work in the enterprise? This is a major deal-breaker as we are deciding on getting standard mobile devices and our only option now is the iPad because it has this inherent capability. Seriously? iOS is better suited for an office environment than Android? C'mon Google!?
Google needs to make this easy and an inherent part of the OS.
rk...@gmail.com <rk...@gmail.com> #321
ke...@gmail.com <ke...@gmail.com> #322
ar...@gmail.com <ar...@gmail.com> #323
Its now sadly a brick on my desk until Google supports it which Ihope soon.
al...@gmail.com <al...@gmail.com> #324
sa...@gmail.com <sa...@gmail.com> #325
-In Wireless Settings select "Add Network"
-Change the "Security" dropdown to "Enterprise (802.1x)"
-Change "EAP Type" dropdown to appropriate setting (it defualts to PEAP)
-Give it the correct "SSID" (text field at the top)
-Enter your username and password
That's it. Of course it would be awesome to have this work without doing it manually. But for those without a rooted device, hopefully this will help.
le...@googlemail.com <le...@googlemail.com> #326
Will test the trick with manually adding tomorrow in the office..
al...@gmail.com <al...@gmail.com> #327
so please google people fix this issues. you're carrying it since the first android version up to the latest android version. get someone to setup a wpa2 eap secured wiresess conection and fix yout bugs.
there are lots of high priority issues that are less important than this one!
al...@googlemail.com <al...@googlemail.com> #328
Please support WPA Enterprise ..
Please support WPA Enterprise ..
km...@gmail.com <km...@gmail.com> #329
ze...@gmail.com <ze...@gmail.com> #330
but my HTC Sensation 4G does not connect which is running Gingerbread 2.3.4..its actually wierd. Earlier, I was able to use 802.1x Enterprise to atleast manually enter the network and settings. We use PEAP/MSCHAPV2 and it would allow me to enter username and password, but it still never connected....now when I try, it prompts me to enter Credential Storage Password immediately, and I am not sure what to do.
ze...@gmail.com <ze...@gmail.com> #331
be...@gmail.com <be...@gmail.com> #332
Nexus S - Android 2.3
IMHO, access to those advanced settings should be provided « out of the box » by Android
ro...@gmail.com <ro...@gmail.com> #333
Sometimes I have the gsII connected to my router but internet connection doesn't work.
I'll try to explain better what i mean... I start wifi on my gsII and use internet connection without problem. Then I set the phone in standby mode leaving wifi on. When after a while i want to use internet connection, it doesn't work. The telephone is still connected to my router but i can't use internet on the phone.
The only way to make internet connection work is to disable wifi e then reactivate it.
This is really frustrating....
I've got the telephone from three months but only now I'm noticing this problem because first I used to disable the wifi and activate it only when i need it.
Am I the only to have this problem? Is there a solution?
ro...@gmail.com <ro...@gmail.com> #334
ro...@gmail.com <ro...@gmail.com> #335
I have gotten my Android devices to connect to my networks, but only with much frustration and hair-pulling. It should be humiliating to Google how bad their WPA2-Enterprise support is, but they don't seem to care. In addition to Android devices, I have used GNU/Linux, OSX, and Windows computers and Windows Mobile, Nokia Maemo, and Symbian mobile devices on these networks, and Android by far gives me the most problems.
Currently, I experience a similar situation to that described in comment 336. I boot the phone/tablet, manually enable credential storage, and connect to the wifi network. Initially there are no problems, but after a few days, with no error messages or other warnings, the phone/tablet stops communicating with the wifi network, even though it thinks it is still connected. Consequently, I now get no Internet connection on the phone/tablet because it will not attempt to use the cellular connection because it still *thinks* it's on wifi. If I disable and re-enable the phone's wifi, that re-enables cellular connection, but often, the phone will still not re-connect to the wifi network and I have to reboot it.
I have verified using Wireshark on my router/RADIUS server that when the phone/tablet gets jammed into one of these modes, it simply does not even attempt to connect to the network. When the phone/tablet is operating properly, I can see normal RADIUS authentication requests and responses, but when it is stuck in the scan-connect-disconnect loop, there is no request made at all.
I had a Nexus One briefly back in January-March 2010 and I first encountered these problems. I figured that the problem would be solved soon, but then I lost the phone and got a series of crappy Windows Mobile and Symbian devices to replace it. Despite being awfully annoying phone OSes, WinMo and Symbian connected to my network without issue. I was utterly shocked, when I bought my Atrix and Xoom only a few weeks ago, to discover that Google has essentially done nothing to fix these connectivity issues over the last 18 months. This is inexcusable, and once again, I am forced to recommend against Android devices in enterprise use.
er...@gmail.com <er...@gmail.com> #336
hg...@gmail.com <hg...@gmail.com> #337
Come on ! How about a real and simple way of adding custom CAs to our devices ?
It is currently impossible to select a CA from a list to connect to a WPA2-Entreprise network (PEAP).
I first tried with self-signed certificates, and thought that was the issue. Then I used certificates signed par recognized authorities. No more luck.
ph...@gmail.com <ph...@gmail.com> #338
ju...@gmail.com <ju...@gmail.com> #339
I know cisco already have Android support
So why we still do not have it on other Android devices?
This also applies to Ciso VPN Client and Cisco IP Communicator.
gr...@gmail.com <gr...@gmail.com> #340
WPA2 enterprise
PEAP
MSCHQPV2
Are we really expected to learn what these things mean????!
gr...@gmail.com <gr...@gmail.com> #341
WPA2 enterprise
PEAP
MSCHQPV2
Are we really expected to learn what these things mean????!
ci...@gmail.com <ci...@gmail.com> #342
ss...@gmail.com <ss...@gmail.com> #343
gl...@gmail.com <gl...@gmail.com> #344
Hey all. I've got this issue since i brought my Galaxy S2 and FINALLY i have found a solution and I'll share with everyone.
In attach there's the file that solve this issue. I will explain how to fix it.
This was tested in a ROOTED Samsung Galaxy S2 with this specifications: Gingerbread 2.3.6 - ROM; CheckROM RevoHD V4
Wifi Network: EDUROAM (WPA2-Enterprise 802.1x)
Fix steps:
- Download file into SDCARD
- Reboot your phone in recovery mode (THIS WAS DONE WITH ClockWorkMod RECOVERY)
- Install zip from sdcard
- choose zip from internal sdcard
- "find the Wi-Fi_fix.zip"
- Yes - Install Wi-Fi_fix.zip
- Wait for install and reboot
ENJOY YOUR WIRELESS :)
Credits to his owners.
Source:
ka...@gmail.com <ka...@gmail.com> #345
EAP method
phase 2 authentication
CA certificate
user certificate
indentity
anonymous identity
Password
What all should I enter in these fields??
af...@gmail.com <af...@gmail.com> #346
af...@gmail.com <af...@gmail.com> #347
da...@gmail.com <da...@gmail.com> #348
li...@googlemail.com <li...@googlemail.com> #349
i had a n97 (nokia) 2 years back and even that phone has enterprise wpa2 support this is totally amazing that android doesn't support it. i was about to buy a HTC ONE X as my contract is up for renewal in a few months but if i continue to not be able to access wifi i might well be going with an iphone. I feel dirty having admitted that!
ci...@gmail.com <ci...@gmail.com> #350
Try Wifi Ace on google play
li...@googlemail.com <li...@googlemail.com> #351
ag...@gmail.com <ag...@gmail.com> #352
Same problem. Will not reliably connect to EAP networks. Phase 2 authentication method not saved.
ci...@gmail.com <ci...@gmail.com> #353
zh...@gmail.com <zh...@gmail.com> #354
ar...@gmail.com <ar...@gmail.com> #355
wh...@gmail.com <wh...@gmail.com> #356
kl...@gmail.com <kl...@gmail.com> #357
rl...@gmail.com <rl...@gmail.com> #358
jo...@gmail.com <jo...@gmail.com> #359
al...@googlemail.com <al...@googlemail.com> #360
WPA2-Enterprise since LEAP is not supported either
da...@gmail.com <da...@gmail.com> #361
I can't get my Motorola HD Android 4.1.2 to connect to Adelaide university, UniSA or Eduroam.
Tech support says the only phones they can't connect are Motorola and Blackberry. I shouldn't have to root around on this.
ok...@gmail.com <ok...@gmail.com> #362
ok...@gmail.com <ok...@gmail.com> #363
It's purpose is simple: in case of a WPA(2)-EAP environments, including chained environments like eduroam, you need to check the certificate of the RADIUS service before presenting it with credentials of the user. This can be achieved by exposing the 'domain', 'subject_match' and/or 'altsubject_match' features from the wpa_supplicant into the WPA2-Enterprise GUI.
A nicer way would be to extract the current certificate chain mid-validation to the radius server and present it to the user via a pop-up to accept or decline connection. For this to work I believe wpa_supplicant needs to be patched.
These options prevent credential stealing by rogue accesspoints and private freeradius setups in debug mode.
al...@relayhealth.com <al...@relayhealth.com> #364
AS
jm...@rediris.es <jm...@rediris.es> #365
la...@gmail.com <la...@gmail.com> #366
I don´t believe that android doesn't support WPA2 Enterprise with EAS and certificates. I tried everything and nothing worked.
When I try to connect using iPhone works like a charm and ask to download certificates, when I try with Android is a mess. Ps I already installed mannually Tawthe Primary Root CA certificate.
Description
My employer uses one of these (not sure which, but it uses a username as
well as a password and is tied into a single-sign-on system) and my G1
can't even see their wifi network. Other devices on the same desk have
excellent reception.
Office networks such as this cannot use any mode that Android currently
supports, because none of those modes provides the ability to revoke
credentials for one user (when someone leaves the company) without
affecting other users.