Hi,
I assume you are using 802.1x TLS and you have already imported the
certificate and key in the device using a PFX file.
That PFX contained also the Root CA used to sign the client
certificate and the server certificate you have in your RADIUS.

When setting up the "Enterprise(802.1x) connection you need the
following:
EAP: TLS
Phase 2 authenticaiton: None
CA Certificate: Chose the name of the imported PFX file
Client Certificate: Chose the name of the imported PFX file.
Identity: name of the computer as expected by the RADIUS

If your RADIUS is a Microsoft IAS Server you might need to add "host/"
in the Identity and in the CN of the certificate.
Regards
Jofre

On May 20, 2:31 pm, Chitra <[email protected]> wrote:
> Hi All,
>
>   I am trying to get EAP TLS working on Android.
>
> I have installed the certificate(.p12 format), and I see the
> certificates in /data/misc/keystore
>  as
>
> 1000_CACERT_cert1
> 1000_USRPKEY_cert1
> 1000_USRCERT_cert1
>
> and the wpa_supplicant.conf content is
>
> cat /data/misc/wifi/wpa_supplicant.conf
>
> network={
>         ssid="LinkSys"
>         key_mgmt=WPA-EAP IEEE8021X
>         eap=PEAP
>         ca_cert="keystore://CACERT_cert1"
>         client_cert="keystore://USRCERT_cert1"
>         private_key="keystore://USRPKEY_cert1"
>         priority=6
>
> }
>
> When I try to connect to an AP, in the sniffer I see that the AP
> requests for identity and the station fails to respond.
>
> Can anyone please let me know how can I specify identity information.
>
> Thanks,
> Chitra

Reply via email to