Wireless@SGx for Linux users?

[windwaver]

Hi folks, I've tried to search for anything on the internet but couldn't get anything useful.

Have any of you successfully connect to Wireless@SGx from any distro of Linux?

TIA.

 

[firesong]

Hi folks, I've tried to search for anything on the internet but couldn't get anything useful.

Have any of you successfully connect to Wireless@SGx from any distro of Linux?

TIA.

https://zerotypic.medium.com/making-wireless-sgx-work-on-linux-92216c66fdb7
https://github.com/zerotypic/wasg-register
In short, they had to reverse-engineer it. Perhaps we need to write in to IMDA to get them to make it official.

 

[windwaver]

Yeah, I saw that one but it's not official like you said.

BTW, are we still allowed to create an account using a script?

 

[firesong]

Yeah, I saw that one but it's not official like you said.

BTW, are we still allowed to create an account using a script?

No idea. The script does what the app does as it's reverse engineered (and detailed so we can check the processes for ourselves), so it's okay.

Until IMDA and Govtech officially supports Linux (probably never, from the looks of things in Singapore), we've to make do with whatever people can provide. Until IMDA again changes the process cos they like to do these things whimsically. The reality of OSS adoption in Singapore is so poor - to a lot of companies, Windows is de-facto, Macs are already a problem for them. Adding Linux (and products like ChromeOS) would further complicate things. And newsflash, sysadmins don't like being challenged.

Also, sadly, sysadmins from South Asia, where a lot of the staff come from, don't seem to know anything about Linux. They are purely Microsoft-trained and Microsoft-loyal. Many don't even care for the Mac!

This is the primary reason why Microsoft gets Windows and Office out to students cheaply - so they become familiar and entrenched. When they grow up, nearly all will just stick to old habits and what they are familiar.

 

[davidktw]

Hi folks, I've tried to search for anything on the internet but couldn't get anything useful.

Have any of you successfully connect to Wireless@SGx from any distro of Linux?

TIA.

I have managed to connect to Wireless@SGx on my Raspberry PI.
Here is partial of my wpa_supplicant.conf

# cat wpa_supplicant.conf
ctrl_interface=DIR=/var/run/wpa_supplicant GROUP=netdev
update_config=1
country=SG

network={
    ssid="Wireless@SGx"
    priority=0
    key_mgmt=WPA-EAP
    eap=PEAP
    identity="essa-XXXXXXXXXX@m1net.com.sg"
    password=hash:XXXXXXXXXXXXXXXXXXX
    phase1="peaplabel=0"
    phase2="auth=MSCHAPV2"
    ca_cert="/etc/ssl/certs/ca-certificates.crt"
    ca_cert2="/etc/ssl/certs/ca-certificates.crt"
    ca_path="/etc/ssl/certs"
    ca_path2="/etc/ssl/certs"
}

2 things unique to your account will be your identity and your password. The password is NTLM password hash (Read up https://unix.stackexchange.com/ques...pa-supplicant-conf-with-wpa-eap-and-mschap-v2)

As for the identity, I remembered I extracted it via the network communication between my iOS and M1 system using JMeter to monitor the traffic. I just tried, apparently they must have implemented public cert or public key pinning. Even with my JMeter proxy root cert installed, I still cannot monitor the traffic.

UPDATE:

Okay I tried with my M1 mobile number with Singtel, it seems to fire an OTP and also provided the credentials.

$ ./wasg-register.py -r 65XXXXXXXX DDMMYYYY
OTP will be sent to mobile phone number 65XXXXXXXX
Enter OTP to continue: YYYYYY
Credentials:
    userid = essa-XXXXXXXXXXXXXXXXXXXXX@singtel-wsg
    password = WWWWWWWWWWWWWWWWWWWWWWWWWW

I have not tried connecting my RPI using these credentials, as I am not in any area where I have any Wireless@SGx network around. So you will wanna try it yourself.

 

[windwaver]

I have managed to connect to Wireless@SGx on my Raspberry PI.
Here is partial of my wpa_supplicant.conf

# cat wpa_supplicant.conf
ctrl_interface=DIR=/var/run/wpa_supplicant GROUP=netdev
update_config=1
country=SG

network={
    ssid="Wireless@SGx"
    priority=0
    key_mgmt=WPA-EAP
    eap=PEAP
    identity="essa-XXXXXXXXXX@m1net.com.sg"
    password=hash:XXXXXXXXXXXXXXXXXXX
    phase1="peaplabel=0"
    phase2="auth=MSCHAPV2"
    ca_cert="/etc/ssl/certs/ca-certificates.crt"
    ca_cert2="/etc/ssl/certs/ca-certificates.crt"
    ca_path="/etc/ssl/certs"
    ca_path2="/etc/ssl/certs"
}

2 things unique to your account will be your identity and your password. The password is NTLM password hash (Read up https://unix.stackexchange.com/ques...pa-supplicant-conf-with-wpa-eap-and-mschap-v2)

As for the identity, I remembered I extracted it via the network communication between my iOS and M1 system using JMeter to monitor the traffic. I just tried, apparently they must have implemented public cert or public key pinning. Even with my JMeter proxy root cert installed, I still cannot monitor the traffic.

UPDATE:

Okay I tried with my M1 mobile number with Singtel, it seems to fire an OTP and also provided the credentials.

$ ./wasg-register.py -r 65XXXXXXXX DDMMYYYY
OTP will be sent to mobile phone number 65XXXXXXXX
Enter OTP to continue: YYYYYY
Credentials:
    userid = essa-XXXXXXXXXXXXXXXXXXXXX@singtel-wsg
    password = WWWWWWWWWWWWWWWWWWWWWWWWWW

I have not tried connecting my RPI using these credentials, as I am not in any area where I have any Wireless@SGx network around. So you will wanna try it yourself.

Thought we need to create the ID first?

 

[davidktw]

Thought we need to create the ID first?

Registration (Creation) is also done by the script. Read the options of the tool.

 

[uncle_josh]

https://www.wissel.net/blog/2012/03/connecting-to-wirelesssgx-using-ubuntu-linux.html

 

[firesong]

https://www.wissel.net/blog/2012/03/connecting-to-wirelesssgx-using-ubuntu-linux.html

This is a 2012 post though.

Note in the post I linked above, IDA/IMDA changed the protocol. That's why the new post was created. Not sure if this 2012 post is still relevant, but it's why I did not link it.

 

[rykellim]

Here I am, using Ubuntu Linux 22.04 LTS, but unable to log on to Wireless@SGx... any suggestion?

 

[67iyiac]

I tested generating the userid and password using the script. It works like a charm by entering the credentials on a Windows laptop. So it should work for a Linux endpoint if the wifi config is set up correctly.

 

[redheli]

works with ubuntu

 

[Nchlstooo]

Anyone able to guide me on how to create please? i have a linux machine but totally clueless bout it. please help.

 

[leeseng]

https://zerotypic.medium.com/making-wireless-sgx-work-on-linux-92216c66fdb7
https://github.com/zerotypic/wasg-register
In short, they had to reverse-engineer it. Perhaps we need to write in to IMDA to get them to make it official.

This still works under ubuntu 22.04. 90% of the chance that we shall be using retrieve mode. With python code response, "Basically, you connect to the AP using WPA2 Enterprise, Protected EAP (PEAP), MSCHAPv2." or refer section " Logging into Wireless@SGx" in article, https://zerotypic.medium.com/making-wireless-sgx-work-on-linux-92216c66fdb7

The validity shall be 12 month with non-SIM mode.

 

[helloicanseeu]

Bring up dead thread here ... Managed to get wireless sgx on my 2nd hand windows 11 laptop using that python script because the wireless app failed to run properly

 

[The_Davis]

Bring up dead thread here ... Managed to get wireless sgx on my 2nd hand windows 11 laptop using that python script because the wireless app failed to run properly

I can’t get it to work on Oppo tablet

 

[helloicanseeu]

I can’t get it to work on Oppo tablet

hmm, i'm using zero1 sim plan and there's no eap sim enabled so i had to use the sgx wireless app on android to get access, pretty sure sgx wireless on android works, u need to have internet access when u run the app though.

 

[uncle_josh]

Did you install the app ?