Hi Thomas, Before I forget, please when talking about a problem, be sure to include the freeradius version. If in freeradius 3, be sure that in mods-enabled/eap you have commented ca_file and ca_path. I had the same problem in iOS, and I could *swear* it was that. Let me know if it helps. iOS and in particular iPhones are much more picky about this kind of stuff than other platforms. I could swear that for the intermediate certificates Terena is giving was the intermediate chain was not there before iOS 8.0. So I had to build a certificate with the complete chain for the RADIUS service. Regards, Rui Ribeiro https://www.linkedin.com/pub/rui-ribeiro/16/ab8/434
Message: 1 Date: Wed, 1 Oct 2014 13:33:36 +0200 From: "Puzzel" <puzzel1982@gmail.com> To: "'FreeRadius users mailing list'" <freeradius-users@lists.freeradius.org> Subject: Ipad 7.0.4 EAP-TTLS PAP Problem Message-ID: <017701cfdd6b$8b6fe8c0$a24fba40$@com> Content-Type: text/plain; charset="us-ascii"
Hi there,
I've got some issue with ipad device.
I have settings EAP-TTLS PAP with working fine certificate tested on Windows (7,8,8.1), Android etc.
Certificate is from TERENA (Root AdTrust certificate).
When i want to connect from ipad with 7.0.3(11B511) version of firmware i can't connect and in logs i have something like that:
Oct 1 13:06:38 radius radiusd[8232]: TLS Alert read:warning:close notify
Oct 1 13:06:38 radius radiusd[8232]: TLS_accept: failed in SSLv3 read client certificate A
Oct 1 13:06:38 radius radiusd[8232]: rlm_eap: SSL error error:140940E5:SSL routines:SSL3_READ_BYTES:ssl handshake failure
Oct 1 13:06:38 radius radiusd[8232]: SSL: SSL_read failed in a system call (-1), TLS session fails.
Any other systems this certificate work fine.
Tnx for reply
Thomas