I think the configuration is correct, because I have an Access-Accept when I use an eapol_test to test my server locally (localhost client). But when I use wpa_supplicant with the same configuration in an other host using ubuntu 10.10, I have the error I have mentionned.<br>
<br><br><div class="gmail_quote">2011/5/4 Phil Mayers <span dir="ltr">&lt;<a href="mailto:p.mayers@imperial.ac.uk">p.mayers@imperial.ac.uk</a>&gt;</span><br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div class="im">On 05/04/2011 08:27 PM, Khalid Staili wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
I am using freeradius in a wired network. Th authentication protocol I&#39;m<br>
using is PEAP.<br>
I have configured the server like described in many different sites, but<br>
I have a problem. This is the debug output I have :<br>
</blockquote>
<br></div>
Most &quot;sites on the internet&quot; are wrong. Ignore them.<br>
<br>
Follow the instructions on the FreeRADIUS site.<div class="im"><br>
<br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
[peap] &lt;&lt;&lt; TLS 1.0 Alert [length 0002], fatal decrypt_error<br>
TLS Alert read:fatal:decrypt error<br>
TLS_accept:failed in SSLv3 read client certificate A<br>
rlm_eap: SSL error error:1409441B:SSL routines:SSL3_READ_BYTES:tlsv1<br>
alert decrypt error<br>
SSL: SSL_read failed inside of TLS (-1), TLS session fails.<br>
TLS receive handshake failed during operation<br>
</blockquote>
<br></div>
Yikes.<br>
<br>
What is the client?<br>
<br>
It looks like you&#39;ve got broken crypto somehow. Are you sure you haven&#39;t mangled your certificate &amp; key?<br>
-<br>
List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a><br>
</blockquote></div><br>