Package: wpasupplicant Version: 2:2.6-18 Severity: important
Hi. I think since some recent openssl upgrade any WPA-EAP connections no longer work: Oct 18 11:06:26 heisenberg wpa_supplicant[3434]: Successfully initialized wpa_supplicant Oct 18 11:06:26 heisenberg kernel: IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready Oct 18 11:06:26 heisenberg dhclient[3452]: Internet Systems Consortium DHCP Client 4.3.5 Oct 18 11:06:26 heisenberg dhclient[3452]: Copyright 2004-2016 Internet Systems Consortium. Oct 18 11:06:26 heisenberg dhclient[3452]: All rights reserved. Oct 18 11:06:26 heisenberg dhclient[3452]: For info, please visit https://www.isc.org/software/dhcp/ Oct 18 11:06:26 heisenberg dhclient[3452]: Oct 18 11:06:26 heisenberg dhclient[3452]: Listening on LPF/wlan0/f8:34:41:76:03:9a Oct 18 11:06:26 heisenberg dhclient[3452]: Sending on LPF/wlan0/f8:34:41:76:03:9a Oct 18 11:06:26 heisenberg dhclient[3452]: Sending on Socket/fallback Oct 18 11:06:26 heisenberg dhclient[3452]: DHCPDISCOVER on wlan0 to 255.255.255.255 port 67 interval 6 Oct 18 11:06:29 heisenberg wpa_supplicant[3437]: wlan0: SME: Trying to authenticate with 00:26:3e:5a:42:89 (SSID='eduroam' freq=5200 MHz) Oct 18 11:06:29 heisenberg kernel: wlan0: authenticate with 00:26:3e:5a:42:89 Oct 18 11:06:29 heisenberg kernel: wlan0: send auth to 00:26:3e:5a:42:89 (try 1/3) Oct 18 11:06:29 heisenberg wpa_supplicant[3437]: wlan0: Trying to associate with 00:26:3e:5a:42:89 (SSID='eduroam' freq=5200 MHz) Oct 18 11:06:29 heisenberg kernel: wlan0: authenticated Oct 18 11:06:29 heisenberg kernel: wlan0: associate with 00:26:3e:5a:42:89 (try 1/3) Oct 18 11:06:29 heisenberg kernel: wlan0: RX AssocResp from 00:26:3e:5a:42:89 (capab=0x511 status=0 aid=6) Oct 18 11:06:29 heisenberg wpa_supplicant[3437]: wlan0: Associated with 00:26:3e:5a:42:89 Oct 18 11:06:29 heisenberg wpa_supplicant[3437]: wlan0: CTRL-EVENT-EAP-STARTED EAP authentication started Oct 18 11:06:29 heisenberg wpa_supplicant[3437]: wlan0: CTRL-EVENT-SUBNET-STATUS-UPDATE status=0 Oct 18 11:06:29 heisenberg kernel: wlan0: associated Oct 18 11:06:29 heisenberg kernel: wlan0: Limiting TX power to 11 (11 - 0) dBm as advertised by 00:26:3e:5a:42:89 Oct 18 11:06:29 heisenberg wpa_supplicant[3437]: wlan0: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=21 Oct 18 11:06:29 heisenberg wpa_supplicant[3437]: wlan0: CTRL-EVENT-EAP-METHOD EAP vendor 0 method 21 (TTLS) selected Oct 18 11:06:30 heisenberg wpa_supplicant[3437]: SSL: SSL3 alert: write (local SSL3 detected an error):fatal:protocol version Oct 18 11:06:30 heisenberg wpa_supplicant[3437]: OpenSSL: openssl_handshake - SSL_connect error:1425F102:SSL routines:ssl_choose_client_version:unsupported protocol Oct 18 11:06:31 heisenberg wpa_supplicant[3437]: wlan0: CTRL-EVENT-EAP-FAILURE EAP authentication failed Oct 18 11:06:31 heisenberg kernel: wlan0: deauthenticated from 00:26:3e:5a:42:89 (Reason: 1=UNSPECIFIED) Oct 18 11:06:31 heisenberg wpa_supplicant[3437]: wlan0: CTRL-EVENT-DISCONNECTED bssid=00:26:3e:5a:42:89 reason=1 Oct 18 11:06:31 heisenberg wpa_supplicant[3437]: wlan0: CTRL-EVENT-SSID-TEMP-DISABLED id=0 ssid="eduroam" auth_failures=1 duration=10 reason=AUTH_FAILED Oct 18 11:06:31 heisenberg wpa_supplicant[3437]: wlan0: CTRL-EVENT-REGDOM-CHANGE init=CORE type=WORLD Oct 18 11:06:31 heisenberg wpa_supplicant[3437]: wlan0: CTRL-EVENT-REGDOM-CHANGE init=USER type=COUNTRY alpha2=DE Oct 18 11:06:32 heisenberg dhclient[3452]: DHCPDISCOVER on wlan0 to 255.255.255.255 port 67 interval 8 Oct 18 11:06:40 heisenberg dhclient[3452]: DHCPDISCOVER on wlan0 to 255.255.255.255 port 67 interval 11 Oct 18 11:06:41 heisenberg wpa_supplicant[3437]: wlan0: CTRL-EVENT-SSID-REENABLED id=0 ssid="eduroam" Oct 18 11:06:41 heisenberg wpa_supplicant[3437]: wlan0: SME: Trying to authenticate with 00:26:3e:5a:42:88 (SSID='eduroam' freq=2412 MHz) Oct 18 11:06:41 heisenberg kernel: wlan0: authenticate with 00:26:3e:5a:42:88 Oct 18 11:06:41 heisenberg kernel: wlan0: send auth to 00:26:3e:5a:42:88 (try 1/3) Oct 18 11:06:41 heisenberg wpa_supplicant[3437]: wlan0: Trying to associate with 00:26:3e:5a:42:88 (SSID='eduroam' freq=2412 MHz) Oct 18 11:06:41 heisenberg kernel: wlan0: authenticated Oct 18 11:06:41 heisenberg kernel: wlan0: associate with 00:26:3e:5a:42:88 (try 1/3) Oct 18 11:06:41 heisenberg kernel: wlan0: RX AssocResp from 00:26:3e:5a:42:88 (capab=0x431 status=1 aid=0) Oct 18 11:06:41 heisenberg kernel: wlan0: 00:26:3e:5a:42:88 denied association (code=1) Oct 18 11:06:41 heisenberg wpa_supplicant[3437]: wlan0: CTRL-EVENT-ASSOC-REJECT bssid=00:26:3e:5a:42:88 status_code=1 Oct 18 11:06:41 heisenberg wpa_supplicant[3437]: wlan0: SME: Deauth request to the driver failed Oct 18 11:06:42 heisenberg wpa_supplicant[3437]: wlan0: SME: Trying to authenticate with 00:26:3e:5a:d4:88 (SSID='eduroam' freq=2462 MHz) Oct 18 11:06:42 heisenberg kernel: wlan0: authenticate with 00:26:3e:5a:d4:88 Oct 18 11:06:42 heisenberg kernel: wlan0: send auth to 00:26:3e:5a:d4:88 (try 1/3) Oct 18 11:06:42 heisenberg wpa_supplicant[3437]: wlan0: Trying to associate with 00:26:3e:5a:d4:88 (SSID='eduroam' freq=2462 MHz) Oct 18 11:06:42 heisenberg kernel: wlan0: authenticated Oct 18 11:06:42 heisenberg kernel: wlan0: associate with 00:26:3e:5a:d4:88 (try 1/3) Oct 18 11:06:42 heisenberg kernel: wlan0: RX AssocResp from 00:26:3e:5a:d4:88 (capab=0x431 status=0 aid=4) Oct 18 11:06:42 heisenberg wpa_supplicant[3437]: wlan0: Associated with 00:26:3e:5a:d4:88 Oct 18 11:06:42 heisenberg wpa_supplicant[3437]: wlan0: CTRL-EVENT-EAP-STARTED EAP authentication started Oct 18 11:06:42 heisenberg kernel: wlan0: associated Oct 18 11:06:42 heisenberg wpa_supplicant[3437]: wlan0: CTRL-EVENT-SUBNET-STATUS-UPDATE status=0 Oct 18 11:06:42 heisenberg wpa_supplicant[3437]: wlan0: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=21 Oct 18 11:06:42 heisenberg wpa_supplicant[3437]: wlan0: CTRL-EVENT-EAP-METHOD EAP vendor 0 method 21 (TTLS) selected Oct 18 11:06:42 heisenberg wpa_supplicant[3437]: SSL: SSL3 alert: write (local SSL3 detected an error):fatal:protocol version Oct 18 11:06:42 heisenberg wpa_supplicant[3437]: OpenSSL: openssl_handshake - SSL_connect error:1425F102:SSL routines:ssl_choose_client_version:unsupported protocol Oct 18 11:06:44 heisenberg wpa_supplicant[3437]: wlan0: CTRL-EVENT-EAP-FAILURE EAP authentication failed Oct 18 11:06:44 heisenberg kernel: wlan0: deauthenticated from 00:26:3e:5a:d4:88 (Reason: 1=UNSPECIFIED) Oct 18 11:06:44 heisenberg wpa_supplicant[3437]: wlan0: CTRL-EVENT-DISCONNECTED bssid=00:26:3e:5a:d4:88 reason=1 Oct 18 11:06:44 heisenberg wpa_supplicant[3437]: wlan0: CTRL-EVENT-SSID-TEMP-DISABLED id=0 ssid="eduroam" auth_failures=2 duration=23 reason=AUTH_FAILED Oct 18 11:06:44 heisenberg wpa_supplicant[3437]: wlan0: CTRL-EVENT-REGDOM-CHANGE init=CORE type=WORLD Oct 18 11:06:44 heisenberg wpa_supplicant[3437]: wlan0: CTRL-EVENT-REGDOM-CHANGE init=USER type=COUNTRY alpha2=DE As you can see, there is some error in the SSL handshake. Any ideas on how to fix this? Cheers, Chris. -- System Information: Debian Release: buster/sid APT prefers unstable-debug APT policy: (500, 'unstable-debug'), (500, 'unstable') Architecture: amd64 (x86_64) Kernel: Linux 4.18.0-2-amd64 (SMP w/4 CPU cores) Locale: LANG=en_DE.UTF-8, LC_CTYPE=en_DE.UTF-8 (charmap=UTF-8), LANGUAGE=en_DE.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages wpasupplicant depends on: ii adduser 3.118 ii libc6 2.27-6 ii libdbus-1-3 1.12.10-1 ii libnl-3-200 3.4.0-1 ii libnl-genl-3-200 3.4.0-1 ii libpcsclite1 1.8.24-1 ii libreadline7 7.0-5 ii libssl1.1 1.1.1-1 ii lsb-base 9.20170808 wpasupplicant recommends no packages. Versions of packages wpasupplicant suggests: pn libengine-pkcs11-openssl <none> ii wpagui 2:2.6-18 -- no debconf information