EAP testing without AP?

Phil Mayers p.mayers at imperial.ac.uk
Wed Sep 19 10:54:58 CEST 2007


On Wed, 2007-09-19 at 16:40 +0800, ST Wong (ITSC) wrote:
> Thanks for all advice.  Result of testing using eapol_test is okay,
> except error "OpenSSL: tls_connection_handshake - Failed to read
> possible Application Data error:00000000:lib(0):func(0):reason(0)" is
> found:
> 
> ------------------------------- cut here -----------------------
> [snipped]
> SSL: SSL_connect:SSLv3 read finished A
> SSL: (where=0x20 ret=0x1)
> SSL: (where=0x1002 ret=0x1)
> SSL: 0 bytes pending from ssl_out
> OpenSSL: tls_connection_handshake - Failed to read possible Application
> Data error:00000000:lib(0):func(0):reason(0)
> SSL: No data to be sent out
> EAP-TTLS: TLS done, proceed to Phase 2 
> [snipped]
> ------------------------------- cut here -----------------------
> 
> However, the rest of debug message seems to be normal.   I've no idea
> about the cause of this message.  Would anyone pls help?

The cause is OpenSSL is rubbish. Ignore it.

> 
> Besides, I only see radius messages if tcpdump is used during testing.
> Seems TLS packets are encapsulated in EAP message, which is encapsulated
> in radius packets.  Is it correct?

Yes






More information about the Freeradius-Users mailing list