<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7654.12">
<TITLE>No client cert request when configured EAP-TLS-Require-Client-Cert </TITLE>
</HEAD>
<BODY>
<!-- Converted from text/rtf format -->
<P DIR=RTL><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">Hi,</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">I have strange behavior on my freeradius.</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">I try to make it ask for client certificate as part of</FONT></SPAN><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Courier New">EAP-</FONT></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">TTLS</FONT></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New"> authentication.</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">I added the configuration</FONT></SPAN><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Courier New">EAP-TLS-Require-Client-Cert = Yes</FONT></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New"></FONT></SPAN><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Courier New">to users configuration file as control for my username.</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">And got the following LOG</FONT></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New"></FONT></SPAN><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Courier New"> </FONT></SPAN><SPAN LANG="en-us"> </SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New"> TLS_accept: SSLv3 write server done A</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">[ttls] TLS_accept: SSLv3 flush data</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"><B><FONT SIZE=2 FACE="Courier New">[ttls] TLS_accept: Need to read more data: SSLv3 read client certificate</FONT></B></SPAN><SPAN LANG="en-us"><B></B></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">However,</FONT></SPAN><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Courier New">t</FONT></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">he sniffin</FONT></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">g shows no client certificate sending</FONT></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New"> and there is no cert request sent by the server</FONT></SPAN><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">You can see it below</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">Thanks for your help.</FONT></SPAN><SPAN LANG="en-us"></SPAN></P>
</BODY>
</HTML>