Has anyone got eap/tls authentication working with smartcards?
I'm trying to do that but I don't get it work. Below is a part of the radiusd log while trying to logon:
--> User-Name = KARLSSON JONNY XXXXXXXXXX
--> BUF-Name = FINSIGN CA for Citizen
--> subject = /C=FI/O=VRK-FINSIGN Gov. CA/CN=FINSIGN CA for Citizen
--> issuer = /C=FI/O=VRK-FINSIGN Gov. CA/CN=FINSIGN CA for Citizen
--> verify return:1
chain-depth=0,
error=0
--> User-Name = KARLSSON JONNY XXXXXXXXX
--> BUF-Name = KARLSSON JONNY XXXXXXXXX
--> subject = /C=FI/SN=KARLSSON/gn=JONNY/CN=KARLSSON JONNY XXXXXXXX/serialNumber=XXXXXXXXX
--> issuer = /C=FI/O=VRK-FINSIGN Gov. CA/CN=FINSIGN CA for Citizen
--> verify return:1
TLS_accept: SSLv3 read client certificate A
rlm_eap_tls: <<< TLS 1.0 Handshake [length 0086], ClientKeyExchange
TLS_accept: SSLv3 read client key exchange A
rlm_eap_tls: <<< TLS 1.0 Alert [length 0002], fatal handshake_failure
TLS Alert read:fatal:handshake failure
TLS_accept:failed in SSLv3 read certificate verify A
rlm_eap_tls: SSL_read Error
3141:error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure:s3_pkt.c:1037:SSL alert number 40
3141:error:140940E5:SSL routines:SSL3_READ_BYTES:ssl handshake failure:s3_pkt.c:822:
Error code is ..... 5
Error in SSL ..... 5
rlm_eap_tls: BIO_read Error
Error code is ..... 5
Error in SSL ..... 5
rlm_eap: Freeing handler
modcall[authenticate]: module "eap" returns ok
modcall: group authenticate returns ok
Delaying request 73 for 1 seconds
Finished request 73
Going to the next request
Waking up in 3 seconds...
[EMAIL PROTECTED] root]#
I'm using freeradius-0.9.0, Cisco AP 1230B, and windows xp client.
Regards
Jonny Karlsson Arcada - Polytechnic
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
