apache / apache/nuttx

[FEATURE] Fix security fault: plain text WiFi SSID/PASSWORD stored at /data/wapi.conf

Open
#18,710 3 comments 0 reactions 0 assignees View on GitHub
Type: Enhancement
Dominant language
C
Stars
4k
Forks
1.7k
Avg merge
1d 17h
Merged PRs (30d)
237

Description

### Is your feature request related to a problem? Please describe.

Currently the wapi command uses plain text config to save WiFi password:

nsh> cat /data/wapi.conf
{"wlan0":{"mode":2,"auth":4,"cmode":8,"alg":3,"ssid":"Nuttx-IOT","bssid":"e0:1c:fc:00:??:??","psk":"espmint123"}}nsh>

### Describe the solution you'd like

We need to find some alternative to save it in a save way to avoid someone with access to the "nsh>" to find this password.

### Describe alternatives you've considered

_No response_

### Verification

- [x] I have verified before submitting the report.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.