net: l2: wifi: Refactor certificates processing code into common file

Refactor certificate processing code to eliminate duplication and
enable reuse across modules that require enterprise support.

Signed-off-by: Triveni Danda <triveni.danda@nordicsemi.no>

Author: D-Triveni

include/zephyr/net/wifi_certs.h

@@ -0,0 +1,42 @@
+/*
+ * Copyright (c) 2025 Nordic Semiconductor ASA
+ *
+ * SPDX-License-Identifier: Apache-2.0
+ */
+
+#ifndef WIFI_CREDS_H__
+#define WIFI_CREDS_H__
+
+#include <stdbool.h>
+#include <zephyr/kernel.h>
+#include <zephyr/net/wifi_mgmt.h>
+#include <utils/common.h>
+#include <eap_peer/eap_config.h>
+#include <ctrl_iface_zephyr.h>
+#include <wpa_supplicant/config.h>
+
+ /**
+  * Set Wi-Fi Enterprise credentials.
+  *
+  * Sets up the required credentials for Enterprise mode in both
+  * Access Point and Station modes.
+  *
+  * Certificates typically used:
+  * - CA certificate
+  * - Client certificate
+  * - Client private key
+  * - Server certificate and server key (for AP mode)
+  *
+  * @param iface Network interface
+  * @param AP or Station mode
+  */
+int wifi_set_enterprise_credentials(struct net_if *iface,
+						bool is_ap);
+
+/**
+ * Clear Wi-Fi enterprise credentials
+ * @param Wi-Fi enterprise params
+ */
+void wifi_clear_enterprise_credentials(void);
+
+#endif /* WIFI_CREDS_H__ */

subsys/net/l2/wifi/CMakeLists.txt

@@ -13,6 +13,7 @@ zephyr_library_include_directories_ifdef(
   )
 
 zephyr_library_sources_ifdef(CONFIG_NET_L2_WIFI_MGMT wifi_mgmt.c)
+zephyr_library_sources_ifdef(CONFIG_WIFI_CERTIFICATE_LIB wifi_certs.c)
 zephyr_library_sources_ifdef(CONFIG_NET_L2_WIFI_SHELL wifi_shell.c)
 zephyr_library_sources_ifdef(CONFIG_WIFI_NM wifi_nm.c)
 zephyr_library_sources_ifdef(CONFIG_NET_L2_WIFI_UTILS wifi_utils.c)

subsys/net/l2/wifi/Kconfig

@@ -128,6 +128,10 @@ config WIFI_ENT_IDENTITY_MAX_USERS
 
 if WIFI_NM_WPA_SUPPLICANT_CRYPTO_ENTERPRISE
 
+config WIFI_CERTIFICATE_LIB
+	bool "Process certificates in enterprise mode"
+	default y
+
 config WIFI_SHELL_RUNTIME_CERTIFICATES
 	bool "Provide Wi-Fi enterprise security certificates at run-time"
 	select TLS_CREDENTIALS