Typo in wifi_enterprise README.md (IDFGH-8595)

[smchan514]

Many thanks to the various authors for the wifi_enterprise example. It has been a big help to get me started with WPA-EAP using ESP32. There is however a typo in the command to generate client certificate in README.md in the section Steps to create enterprise openssl certs. The command in question is:

openssl ca -batch -keyfile ca.key -cert ca.pem -in client.csr -key (password) -out client.crt -extensions xpserver_ext -extfile xpextensions

The option -extensions should be xpclient_ext (it was correct prior to commit cd85c79d):

openssl ca -batch -keyfile ca.key -cert ca.pem -in client.csr -key (password) -out client.crt -extensions xpclient_ext -extfile xpextensions

In my tests where I used a Linux AP running hostapd version 2.9.0, having the incorrect X509 extension in the client cert will prevent hostapd from authenticating the client when using EAP-TLS.

Ref:

esp-idf/examples/wifi/wifi_enterprise/README.md

Line 74 in daf3da5

openssl ca -batch -keyfile ca.key -cert ca.pem -in client.csr -key (password) -out client.crt -extensions xpserver_ext -extfile xpextensions

[sarveshb14]

Hi @smchan514 , Thank you for reporting the issue.