Unable to disable TKIP for SoftAP

[shaslam]

It's currently not possible to disable TKIP encryption when configuring SoftAP mode. TKIP is considered insecure so I'd like to explicitly disable it, leaving just CCMP/AES encryption enabled. While TKIP is enabled iOS reports the AP as having "weak security".

There is a CIPHER_TYPE enum in user_interface.h, but the softap_config structure that is passed to wifi_softap_set_config doesn't allow the CIPHER_TYPE to be selected.

ESP8266_NONOS_SDK/include/user_interface.h

Line 338 in 5de39e8

struct softap_config {

The ESP8266_RTOS_SDK has the same issue.

Support has been added to the esp-idf though:

https://github.com/espressif/esp-idf/blob/834afad47e866071ae9e60552f64f25ab9068b48/components/esp_wifi/include/esp_wifi_types.h#L228

Could the same be done here?

[shaslam]

An update for anyone else looking to do the same.

Espressif support pointed out that it is possible to disable TKIP for the ESP8266_RTOS_SDK by modifying the wpa_supplicant code directly, here:

https://github.com/espressif/ESP8266_RTOS_SDK/blob/e716bb876d46938416e1d65aa123fac875745e97/components/wpa_supplicant/src/esp_supplicant/esp_hostap.c#L67

It still looks like it's not possible in NONOS though.

[real-bombinho]

Are there any news regarding disabling TKIP in NONOS?