[EAP-PEAP] PEAP Authentication failed

[Phil Mayers]

On 05/04/2011 08:27 PM, Khalid Staili wrote:
> I am using freeradius in a wired network. Th authentication protocol I'm
> using is PEAP.
> I have configured the server like described in many different sites, but
> I have a problem. This is the debug output I have :

Most "sites on the internet" are wrong. Ignore them.

Follow the instructions on the FreeRADIUS site.


> [peap] <<< TLS 1.0 Alert [length 0002], fatal decrypt_error
> TLS Alert read:fatal:decrypt error
> TLS_accept:failed in SSLv3 read client certificate A
> rlm_eap: SSL error error:1409441B:SSL routines:SSL3_READ_BYTES:tlsv1
> alert decrypt error
> SSL: SSL_read failed inside of TLS (-1), TLS session fails.
> TLS receive handshake failed during operation

Yikes.

What is the client?

It looks like you've got broken crypto somehow. Are you sure you haven't 
mangled your certificate & key?