[chores] OpenWrt: improvements to auth EAP-PEAP/EAP-TTLS

- added the default value of the new auth option and a description for it - added a clarifying code comment in the wireless converter
openwisp · Mar 21, 2022 · 760911c · 760911c
1 parent 5bbdd6b
commit 760911c
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 0 deletions.
diff --git a/netjsonconfig/backends/openwrt/converters/wireless.py b/netjsonconfig/backends/openwrt/converters/wireless.py
@@ -128,6 +128,8 @@ def __intermediate_encryption(self, wireless):
                 and uci['eap_type'] == 'tls'
                 and 'auth' in uci
             ):
+                # remove auth if not needed
+                # (not applicable to EAP-TLS)
                 del uci['auth']
             if 'key' in encryption:
                 uci['key'] = encryption['key']

diff --git a/netjsonconfig/schema.py b/netjsonconfig/schema.py
@@ -626,6 +626,11 @@
                             "EAP-TLS",
                         ]
                     },
+                    "default": "MSCHAPV2",
+                    "description": (
+                        "Defines the phase 2 (inner) authentication method,"
+                        "only applicable if EAP protocol is EAP-PEAP or EAP-TTLS."
+                    ),
                     "propertyOrder": 5,
                 },
                 "identity": {"type": "string", "propertyOrder": 6},