OuterIdentity not set

[tichachm]

Hi,
we are testing the App with the new geteduroam portal from the beta branch: https://github.com/geteduroam/letswifi-portal/tree/beta.
On Linux we had a issue with outerIdentity not set.
I could fix that by adding
public function getAnonymousIdentity(): ?string { return substr($this->credentialId,3); // return null; }
in letswifi-portal/src/letswifi/credential/certificatecredential.php
to the portal.

Now there is a fix for Linux: geteduroam/linux-app@61492a1
So I reverted the change in the webportal.

Now I get same problems with Android App (at least with Android 10 and the fixed Version for Android 11 (#146 (comment)).

Note:
Our radius is checking outerIdentity to determine if eap-tls or any other auth-method is used, so if there is no outeridentity set, connection will fail.

Is this a problem with the app or webportal?

[dzolnai]

Hello!

I checked the source code, and we seem to be handling this for EAP-TLS.
However, the code of the Android app differs from the Linux fix.
Here, Linux sets the clientCertificate.subjectCN:
https://github.com/geteduroam/linux-app/blob/main/internal/eap/eap.go#L425

Here, Android sets the clientSideCredential.outerIdentity:

android-app/android/app/src/main/java/app/eduroam/geteduroam/config/PlatformWifiConfigData.kt

Line 201 in 6e145e9

enterpriseConfig.identity = anonymousIdentity

Might this be the cause of the issue?

[tichachm]

Hello @dzolnai,

yes if clientSideCredential.outerIdentity is not set in the config enterpriseConfig.identity is empty, I think