Is the problem related to this article?

https://httptoolkit.tech/blog/android-11-trust-ca-certificates/

---
Roberto Ullfig - [email protected]
Systems Administrator
Enterprise Applications & Services | Technology Solutions
University of Illinois - Chicago
________________________________
From: radiator <[email protected]> on behalf of Ullfig, 
Roberto Alfredo <[email protected]>
Sent: Tuesday, February 2, 2021 12:17 PM
To: [email protected] <[email protected]>
Subject: Re: [RADIATOR] Androids unable to connect

Also seeing:

Tue Feb  2 11:35:04 2021: ERR: EAP PEAP TLS Handshake unsuccessful:  7075: 1 - 
error:14094418:SSL routines:ssl3_read_bytes:tlsv1 alert unknown ca

Does that mean the client doesn't know about our CA?

---
Roberto Ullfig - [email protected]
Systems Administrator
Enterprise Applications & Services | Technology Solutions
University of Illinois - Chicago
________________________________
From: radiator <[email protected]> on behalf of Ullfig, 
Roberto Alfredo <[email protected]>
Sent: Tuesday, February 2, 2021 11:29 AM
To: [email protected] <[email protected]>
Subject: [RADIATOR] Androids unable to connect

Hello, since an Android update (probably in December), their devices can't 
connect. In the logs I see:

Tue Feb  2 10:48:00 2021: INFO: Using Net::SSLeay 1.55 with SSL/TLS library 
version 0x1000105f (OpenSSL 1.0.1e-fips 11 Feb 2013)Tue Feb  2 10:48:00 2021: 
WARNING: Startup check found OpenSSL version 0x1000105f (OpenSSL 1.0.1e-fips 11 
Feb 2013) while checking for the Heartbleed (CVE-2014-0160) vulnerability. This 
version may be vulnerable. See Radiator reference manual for 
DisabledRuntimeChecks parameter

Tue Feb  2 10:55:54 2021: INFO: Access rejected for xxx: EAP PEAP TLS Handshake 
unsuccessful
Tue Feb  2 10:56:01 2021: ERR: EAP PEAP TLS Handshake unsuccessful:  7075: 1 - 
error:14094438:SSL routines:ssl3_read_bytes:tlsv1 alert internal error

are we running an old TLS that Android no longer supports? Thanks!

---
Roberto Ullfig - [email protected]
Systems Administrator
Enterprise Applications & Services | Technology Solutions
University of Illinois - Chicago
_______________________________________________
radiator mailing list
[email protected]
https://lists.open.com.au/mailman/listinfo/radiator

Reply via email to