MQTT WiFi Relay KRACK Fix

fpaliuc · 2017-10-17T21:29:09.089Z

I think the thermostat firmware must be updated in order to patch the WPA2 vulnerability recently discovered: http://espressif.com/en/media_overview/news/espressif-releases-patches-wifi-vulnerabilities-cert-vu228519#.WeVJZsHgtN0.twitter

glyn.hudson · 2017-10-17T21:35:45.092Z

Thanks, we’re aware of this and working on an update for both WiFi relay, EmonESP, Heat Pump monitor and OpenEVSE ESP8266.

fpaliuc · 2017-10-17T22:09:24.119Z

Glyn, do you happen to have instructions about how to build the esp8266 toolchain in order to have the latest fix?

Thanks!

glyn.hudson · 2017-10-17T22:30:11.219Z

fpaliuc:

Glyn, do you happen to have instructions about how to build the esp8266 toolchain in order to have the latest fix?

Sorry, we’re waiting on @Martin_Harizanov to build the code for us. We’re working on updates for our other ESP8266 hardware that use the ESP8266 Arduino framework. The fix has now been released for this:

github.com/esp8266/Arduino

Firmware Updates for KRACK WPA2 Vulnerability

opened 02:31PM - 16 Oct 17 UTC

closed 12:19AM - 02 Jan 18 UTC

xhdix

type: bug component: SDK

Espressif has released updates for ESP-IDF, ESP8266 RTOS SDK, & ESP8266 NONOS SD…K on their Github page. https://www.bleepingcomputer.com/news/security/list-of-firmware-and-driver-updates-for-krack-wpa2-vulnerability/ https://www.krackattacks.com When will you be upgraded?

Martin_Harizanov · 2017-10-18T18:30:25.244Z

Hi,
It should be a fairly easy fix, just a re-compile under the latest NONOS SDK. There is a few things to consider while switching from 2.0 to 2.1 to make the code compile, but I expect no serious issues. I’ll post here update instructions and the compiled .bin
Cheers

Martin_Harizanov · 2017-10-20T08:19:06.826Z

Hello,

attaching a recompiled binary with latest SDK, upgrade process takes 30 seconds, see below:

OEM_KRACK_FIX.bin (396.5 KB)
fw_update

Cheers!

glyn.hudson · 2017-10-20T12:53:14.236Z

Fantastic! Thanks @Martin_Harizanov

I’ve added the release to the github repo:

github.com

mqtt-wifi-mqtt-single-channel-relay/firmware at master ·...

master/firmware

MQTT WiFi ESP8266 Single Channel Relay. Contribute to openenergymonitor/mqtt-wifi-mqtt-single-channel-relay development by creating an account on GitHub.

Note: current config will not be lost during the update

It’s also possible to update via serial programmer:

esptool.py --port /dev/ttyUSB0 --baud 460800 write_flash --flash_freq 80m --flash_mode qio --flash_size 16m-c1 0x1000 oem.v2088.bin

WiFi relay units sold via the shop will be updated to latest version:

Shop | OpenEnergyMonitor

WiFi MQTT Relay / Thermostat

Open-source hardware tools for energy monitoring and visualisation

Onwards and upwards!

Paul · 2017-10-20T19:54:30.678Z

@Martin_Harizanov - What about the 3 channel relay which was stocked in the shop before the current version.
I assume that’s not so easy to patch, as there doesn’t appear to be a OTA update option.
Firmware version: 0.8.81 / Apr 22 2015 00:22:25.

Paul

Martin_Harizanov · 2017-10-21T15:44:08.726Z

@Paul - That would take some fiddling, keep an eye here: KRACK Vulnerability · Issue #15 · mharizanov/ESP8266_Relay_Board · GitHub