Package: wpasupplicant
Version: 2:2.6-18
Severity: important

Hi.

I think since some recent openssl upgrade any WPA-EAP connections no longer 
work:
Oct 18 11:06:26 heisenberg wpa_supplicant[3434]: Successfully initialized 
wpa_supplicant
Oct 18 11:06:26 heisenberg kernel: IPv6: ADDRCONF(NETDEV_UP): wlan0: link is 
not ready
Oct 18 11:06:26 heisenberg dhclient[3452]: Internet Systems Consortium DHCP 
Client 4.3.5
Oct 18 11:06:26 heisenberg dhclient[3452]: Copyright 2004-2016 Internet Systems 
Consortium.
Oct 18 11:06:26 heisenberg dhclient[3452]: All rights reserved.
Oct 18 11:06:26 heisenberg dhclient[3452]: For info, please visit 
https://www.isc.org/software/dhcp/
Oct 18 11:06:26 heisenberg dhclient[3452]: 
Oct 18 11:06:26 heisenberg dhclient[3452]: Listening on 
LPF/wlan0/f8:34:41:76:03:9a
Oct 18 11:06:26 heisenberg dhclient[3452]: Sending on   
LPF/wlan0/f8:34:41:76:03:9a
Oct 18 11:06:26 heisenberg dhclient[3452]: Sending on   Socket/fallback
Oct 18 11:06:26 heisenberg dhclient[3452]: DHCPDISCOVER on wlan0 to 
255.255.255.255 port 67 interval 6
Oct 18 11:06:29 heisenberg wpa_supplicant[3437]: wlan0: SME: Trying to 
authenticate with 00:26:3e:5a:42:89 (SSID='eduroam' freq=5200 MHz)
Oct 18 11:06:29 heisenberg kernel: wlan0: authenticate with 00:26:3e:5a:42:89
Oct 18 11:06:29 heisenberg kernel: wlan0: send auth to 00:26:3e:5a:42:89 (try 
1/3)
Oct 18 11:06:29 heisenberg wpa_supplicant[3437]: wlan0: Trying to associate 
with 00:26:3e:5a:42:89 (SSID='eduroam' freq=5200 MHz)
Oct 18 11:06:29 heisenberg kernel: wlan0: authenticated
Oct 18 11:06:29 heisenberg kernel: wlan0: associate with 00:26:3e:5a:42:89 (try 
1/3)
Oct 18 11:06:29 heisenberg kernel: wlan0: RX AssocResp from 00:26:3e:5a:42:89 
(capab=0x511 status=0 aid=6)
Oct 18 11:06:29 heisenberg wpa_supplicant[3437]: wlan0: Associated with 
00:26:3e:5a:42:89
Oct 18 11:06:29 heisenberg wpa_supplicant[3437]: wlan0: CTRL-EVENT-EAP-STARTED 
EAP authentication started
Oct 18 11:06:29 heisenberg wpa_supplicant[3437]: wlan0: 
CTRL-EVENT-SUBNET-STATUS-UPDATE status=0
Oct 18 11:06:29 heisenberg kernel: wlan0: associated
Oct 18 11:06:29 heisenberg kernel: wlan0: Limiting TX power to 11 (11 - 0) dBm 
as advertised by 00:26:3e:5a:42:89
Oct 18 11:06:29 heisenberg wpa_supplicant[3437]: wlan0: 
CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=21
Oct 18 11:06:29 heisenberg wpa_supplicant[3437]: wlan0: CTRL-EVENT-EAP-METHOD 
EAP vendor 0 method 21 (TTLS) selected
Oct 18 11:06:30 heisenberg wpa_supplicant[3437]: SSL: SSL3 alert: write (local 
SSL3 detected an error):fatal:protocol version
Oct 18 11:06:30 heisenberg wpa_supplicant[3437]: OpenSSL: openssl_handshake - 
SSL_connect error:1425F102:SSL routines:ssl_choose_client_version:unsupported 
protocol
Oct 18 11:06:31 heisenberg wpa_supplicant[3437]: wlan0: CTRL-EVENT-EAP-FAILURE 
EAP authentication failed
Oct 18 11:06:31 heisenberg kernel: wlan0: deauthenticated from 
00:26:3e:5a:42:89 (Reason: 1=UNSPECIFIED)
Oct 18 11:06:31 heisenberg wpa_supplicant[3437]: wlan0: CTRL-EVENT-DISCONNECTED 
bssid=00:26:3e:5a:42:89 reason=1
Oct 18 11:06:31 heisenberg wpa_supplicant[3437]: wlan0: 
CTRL-EVENT-SSID-TEMP-DISABLED id=0 ssid="eduroam" auth_failures=1 duration=10 
reason=AUTH_FAILED
Oct 18 11:06:31 heisenberg wpa_supplicant[3437]: wlan0: 
CTRL-EVENT-REGDOM-CHANGE init=CORE type=WORLD
Oct 18 11:06:31 heisenberg wpa_supplicant[3437]: wlan0: 
CTRL-EVENT-REGDOM-CHANGE init=USER type=COUNTRY alpha2=DE
Oct 18 11:06:32 heisenberg dhclient[3452]: DHCPDISCOVER on wlan0 to 
255.255.255.255 port 67 interval 8
Oct 18 11:06:40 heisenberg dhclient[3452]: DHCPDISCOVER on wlan0 to 
255.255.255.255 port 67 interval 11
Oct 18 11:06:41 heisenberg wpa_supplicant[3437]: wlan0: 
CTRL-EVENT-SSID-REENABLED id=0 ssid="eduroam"
Oct 18 11:06:41 heisenberg wpa_supplicant[3437]: wlan0: SME: Trying to 
authenticate with 00:26:3e:5a:42:88 (SSID='eduroam' freq=2412 MHz)
Oct 18 11:06:41 heisenberg kernel: wlan0: authenticate with 00:26:3e:5a:42:88
Oct 18 11:06:41 heisenberg kernel: wlan0: send auth to 00:26:3e:5a:42:88 (try 
1/3)
Oct 18 11:06:41 heisenberg wpa_supplicant[3437]: wlan0: Trying to associate 
with 00:26:3e:5a:42:88 (SSID='eduroam' freq=2412 MHz)
Oct 18 11:06:41 heisenberg kernel: wlan0: authenticated
Oct 18 11:06:41 heisenberg kernel: wlan0: associate with 00:26:3e:5a:42:88 (try 
1/3)
Oct 18 11:06:41 heisenberg kernel: wlan0: RX AssocResp from 00:26:3e:5a:42:88 
(capab=0x431 status=1 aid=0)
Oct 18 11:06:41 heisenberg kernel: wlan0: 00:26:3e:5a:42:88 denied association 
(code=1)
Oct 18 11:06:41 heisenberg wpa_supplicant[3437]: wlan0: CTRL-EVENT-ASSOC-REJECT 
bssid=00:26:3e:5a:42:88 status_code=1
Oct 18 11:06:41 heisenberg wpa_supplicant[3437]: wlan0: SME: Deauth request to 
the driver failed
Oct 18 11:06:42 heisenberg wpa_supplicant[3437]: wlan0: SME: Trying to 
authenticate with 00:26:3e:5a:d4:88 (SSID='eduroam' freq=2462 MHz)
Oct 18 11:06:42 heisenberg kernel: wlan0: authenticate with 00:26:3e:5a:d4:88
Oct 18 11:06:42 heisenberg kernel: wlan0: send auth to 00:26:3e:5a:d4:88 (try 
1/3)
Oct 18 11:06:42 heisenberg wpa_supplicant[3437]: wlan0: Trying to associate 
with 00:26:3e:5a:d4:88 (SSID='eduroam' freq=2462 MHz)
Oct 18 11:06:42 heisenberg kernel: wlan0: authenticated
Oct 18 11:06:42 heisenberg kernel: wlan0: associate with 00:26:3e:5a:d4:88 (try 
1/3)
Oct 18 11:06:42 heisenberg kernel: wlan0: RX AssocResp from 00:26:3e:5a:d4:88 
(capab=0x431 status=0 aid=4)
Oct 18 11:06:42 heisenberg wpa_supplicant[3437]: wlan0: Associated with 
00:26:3e:5a:d4:88
Oct 18 11:06:42 heisenberg wpa_supplicant[3437]: wlan0: CTRL-EVENT-EAP-STARTED 
EAP authentication started
Oct 18 11:06:42 heisenberg kernel: wlan0: associated
Oct 18 11:06:42 heisenberg wpa_supplicant[3437]: wlan0: 
CTRL-EVENT-SUBNET-STATUS-UPDATE status=0
Oct 18 11:06:42 heisenberg wpa_supplicant[3437]: wlan0: 
CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=21
Oct 18 11:06:42 heisenberg wpa_supplicant[3437]: wlan0: CTRL-EVENT-EAP-METHOD 
EAP vendor 0 method 21 (TTLS) selected
Oct 18 11:06:42 heisenberg wpa_supplicant[3437]: SSL: SSL3 alert: write (local 
SSL3 detected an error):fatal:protocol version
Oct 18 11:06:42 heisenberg wpa_supplicant[3437]: OpenSSL: openssl_handshake - 
SSL_connect error:1425F102:SSL routines:ssl_choose_client_version:unsupported 
protocol
Oct 18 11:06:44 heisenberg wpa_supplicant[3437]: wlan0: CTRL-EVENT-EAP-FAILURE 
EAP authentication failed
Oct 18 11:06:44 heisenberg kernel: wlan0: deauthenticated from 
00:26:3e:5a:d4:88 (Reason: 1=UNSPECIFIED)
Oct 18 11:06:44 heisenberg wpa_supplicant[3437]: wlan0: CTRL-EVENT-DISCONNECTED 
bssid=00:26:3e:5a:d4:88 reason=1
Oct 18 11:06:44 heisenberg wpa_supplicant[3437]: wlan0: 
CTRL-EVENT-SSID-TEMP-DISABLED id=0 ssid="eduroam" auth_failures=2 duration=23 
reason=AUTH_FAILED
Oct 18 11:06:44 heisenberg wpa_supplicant[3437]: wlan0: 
CTRL-EVENT-REGDOM-CHANGE init=CORE type=WORLD
Oct 18 11:06:44 heisenberg wpa_supplicant[3437]: wlan0: 
CTRL-EVENT-REGDOM-CHANGE init=USER type=COUNTRY alpha2=DE


As you can see, there is some error in the SSL handshake.

Any ideas on how to fix this?

Cheers,
Chris.

-- System Information:
Debian Release: buster/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.18.0-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_DE.UTF-8, LC_CTYPE=en_DE.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages wpasupplicant depends on:
ii  adduser           3.118
ii  libc6             2.27-6
ii  libdbus-1-3       1.12.10-1
ii  libnl-3-200       3.4.0-1
ii  libnl-genl-3-200  3.4.0-1
ii  libpcsclite1      1.8.24-1
ii  libreadline7      7.0-5
ii  libssl1.1         1.1.1-1
ii  lsb-base          9.20170808

wpasupplicant recommends no packages.

Versions of packages wpasupplicant suggests:
pn  libengine-pkcs11-openssl  <none>
ii  wpagui                    2:2.6-18

-- no debconf information

Reply via email to