Hi all,
I have a setup with freeradius 1.0.0-pre3 (but the older ones also had the
same behaviour), i'm using 802.1x + eap/peap or eap/ttls to auth users on
wireless, everything works fine if I use the windows suplicator (xp sp1),
but when I use intel Pro/Wireless as a suplicator the user can't get
authenticated and on the log i see the following output:
rlm_eap_tls: Length Included
eaptls_verify returned 11
rlm_eap_tls: <<< TLS 1.0 Alert [length 0002], fatal certificate_unknown
TLS Alert read:fatal:certificate unknown
TLS_accept:failed in SSLv3 read client certificate A
20365:error:14094416:SSL routines:SSL3_READ_BYTES:sslv3 alert certificate
unknown:s3_pkt.c:1052:SSL alert number 46
20365:error:140940E5:SSL routines:SSL3_READ_BYTES:ssl handshake
failure:s3_pkt.c:837:
rlm_eap_tls: SSL_read failed in a system call (-1), TLS session fails.
In SSL Handshake Phase
In SSL Accept mode
rlm_eap_tls: BIO_read failed in a system call (-1), TLS session fails.
eaptls_process returned 13
rlm_eap_peap: EAPTLS_HANDLED
rlm_eap: Freeing handler
modcall[authenticate]: module "eap" returns reject for request 7
When using the windows supplicator the output is:
rlm_eap_tls: Length Included
eaptls_verify returned 11
(other): before/accept initialization
TLS_accept: before/accept initialization
rlm_eap_tls: <<< TLS 1.0 Handshake [length 0041], ClientHello
TLS_accept: SSLv3 read client hello A
rlm_eap_tls: >>> TLS 1.0 Handshake [length 004a], ServerHello
TLS_accept: SSLv3 write server hello A
rlm_eap_tls: >>> TLS 1.0 Handshake [length 0b86], Certificate
TLS_accept: SSLv3 write certificate A
rlm_eap_tls: >>> TLS 1.0 Handshake [length 0004], ServerHelloDone
TLS_accept: SSLv3 write server done A
TLS_accept: SSLv3 flush data
TLS_accept:error in SSLv3 read client certificate A
In SSL Handshake Phase
In SSL Accept mode
eaptls_process returned 13
rlm_eap_peap: EAPTLS_HANDLED
modcall[authenticate]: module "eap" returns handled for request 1
And all goes fine...
Anyone has this setup (with intel suplicator) working?
I'm using the latest version of the intel drivers, the wifi card is an
2200BG. I'm trying to use intel software because the with windows it takes a
long time before association, and on the handovers...
Thanks
Nuno Cruz
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
