Hi Thomas,

Before I forget, please when talking about a problem, be sure to include the freeradius version.

If in freeradius 3, be sure that in mods-enabled/eap you have commented ca_file and ca_path. I had the same problem in iOS, and I could *swear* it was that. Let me know if it helps.

iOS and in particular iPhones are much more picky about this kind of stuff than other platforms. I could swear that for the intermediate certificates Terena is giving was the intermediate chain was not there before iOS 8.0. So I had to build a certificate with the complete chain for the RADIUS service.

Regards,

Rui Ribeiro

https://www.linkedin.com/pub/rui-ribeiro/16/ab8/434

Message: 1
Date: Wed, 1 Oct 2014 13:33:36 +0200
From: "Puzzel" <puzzel1982@gmail.com>
To: "'FreeRadius users mailing list'"
<freeradius-users@lists.freeradius.org>
Subject: Ipad 7.0.4 EAP-TTLS PAP Problem
Message-ID: <017701cfdd6b$8b6fe8c0$a24fba40$@com>
Content-Type: text/plain; charset="us-ascii"

Hi there,

I've got some issue with ipad device.

I have settings EAP-TTLS PAP with working fine certificate tested on Windows
(7,8,8.1), Android etc.

Certificate is from TERENA (Root AdTrust certificate).

When i want to connect from ipad with 7.0.3(11B511) version of firmware i
can't connect and in logs i have something like that:

Oct 1 13:06:38 radius radiusd[8232]: TLS Alert read:warning:close notify

Oct 1 13:06:38 radius radiusd[8232]: TLS_accept: failed in SSLv3 read
client certificate A

Oct 1 13:06:38 radius radiusd[8232]: rlm_eap: SSL error error:140940E5:SSL
routines:SSL3_READ_BYTES:ssl handshake failure

Oct 1 13:06:38 radius radiusd[8232]: SSL: SSL_read failed in a system call
(-1), TLS session fails.

Any other systems this certificate work fine.

Tnx for reply

Thomas