Re: Alan, can you take a look -> Re: Problem regarding WinXP+Freeradius+EAP-TLS packet sequence

2004-06-09 Thread Alan DeKok
Artur Hecker <[EMAIL PROTECTED]> wrote: > > TLS_accept:error in SSLv3 read client certificate A > > In SSL Handshake Phase > > In SSL Accept mode > > eaptls_process returned 13 > > ok, if i understand it correctly, it could not read the client > certificate (which is quite normal here becau

Alan, can you take a look -> Re: Problem regarding WinXP+Freeradius+EAP-TLS packet sequence

2004-06-09 Thread Artur Hecker
hi Anyway I have tested even without any User-Password entry against XP's "Administrator" login. And surprisingly got same result (that "Success" message before client certificate verification). Am I doing someting wrong? well, imho, it should not behave in a wrong way even if there is a user... i

Re: Problem regarding WinXP+Freeradius+EAP-TLS packet sequence

2004-06-08 Thread ankan
Hi Alan and Artur, I am really new to Freeradius. So I missed the FAQ/README section and have posted the ethreal capture without giving the debugging output. I have no intention to show that freeradius implements a potocol incorrectly. I was just curious about the EAP-TLS packet sequence and g

Re: Alan, to your atttention - Re: Problem regarding WinXP+Freeradius+EAP-TLS packet sequence

2004-06-08 Thread Alan DeKok
Artur Hecker <[EMAIL PROTECTED]> wrote: > actually, IMHO, it's not. even provided with a user-password the TLS > module should not just accept the user. Since he didn't post the debug output, there's no way to tell if the TLS module did *anything*. > alan, what do you think, is it a bug? even

Re: Problem regarding WinXP+Freeradius+EAP-TLS packet sequence

2004-06-08 Thread Alan DeKok
[EMAIL PROTECTED] wrote: > I am attaching following files for better review... > > WINXP ethereal capture (tlscapture in ethereal format, please apply > "eapol" as filter) > from Freeradius : eap.conf,users Which is NOT what the FAQ says to do, for very good reasons. The packet capture is pre

Alan, to your atttention - Re: Problem regarding WinXP+Freeradius+EAP-TLS packet sequence

2004-06-08 Thread Artur Hecker
hi alan, please see the remark in text. [EMAIL PROTECTED] wrote: I am testing EAP-TLS with Windows XP(EAP-TLS supplicant) , Freeradius(running on Redhat 9) and Cisco Aironet 1100 series Access Point. I have done all the required setup and EAP-TLS authentication has been successful with that setup.

Problem regarding WinXP+Freeradius+EAP-TLS packet sequence

2004-06-07 Thread ankan
Hi All, I am testing EAP-TLS with Windows XP(EAP-TLS supplicant) , Freeradius(running on Redhat 9) and Cisco Aironet 1100 series Access Point. I have done all the required setup and EAP-TLS authentication has been successful with that setup. But the problem is within the EAP-TLS packet sequence