tnt@kalik.net wrote:
Paul Ryszka wrote:
On Mon, 2009-11-23 at 20:37 +0100, Tomas Pelka wrote:
tnt@kalik.net wrote:
Also tried modify wpa_supplicant conf:
- ca_cert="ca.pem" + ca_cert="server.pem"
But with the same result. Because the path is wrong, ie. certificate is not there. Put the correct path to where you have imported the certificate.
Ivan Kalik
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Sorry, but I'm still more than confused.
Problem is on the server site, isn't it? CA and server certs are now in same dir as whole RADIUS configuration, is necessary put certs into "trusted" directory like /etc/ssl/certs?
Thanks for advice.
I think that the idea was to put the full path to certificates in the conf file like : ca_cert="/full/path/to/server.pem"
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Same result, full path on both sites (client/server).
If ca certificate on the client is where ca_cert configuration item is pointing the problem must be with permissions.
Ivan Kalik
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Permissions are now 600 for client.[pem|key] and [ca|server].pem (still using ca and also server certificate on client), but the result is similar. -- Tom Key fingerprint = 06C0 23C6 9EB7 0761 9807 65F4 7F6F 7EAB 496B 28AA Reading configuration file 'test_tls.conf' Line: 1 - start of a new network block eap methods - hexdump(len=16): 00 00 00 00 0d 00 00 00 00 00 00 00 00 00 00 00 eapol_flags=0 (0x0) key_mgmt: 0x8 identity - hexdump_ascii(len=8): 74 65 73 74 75 73 65 72 testuser ca_cert - hexdump_ascii(len=6): 63 61 2e 70 65 6d ca.pem client_cert - hexdump_ascii(len=10): 63 6c 69 65 6e 74 2e 70 65 6d client.pem private_key - hexdump_ascii(len=10): 63 6c 69 65 6e 74 2e 6b 65 79 client.key private_key_passwd - hexdump_ascii(len=8): 77 68 61 74 65 76 65 72 whatever Priority group 0 id=0 ssid='' Authentication server 192.168.56.3:1812 RADIUS local address: 192.168.56.1:58734 EAPOL: SUPP_PAE entering state DISCONNECTED EAPOL: KEY_RX entering state NO_KEY_RECEIVE EAPOL: SUPP_BE entering state INITIALIZE EAP: EAP entering state DISABLED EAPOL: External notification - portValid=0 EAPOL: External notification - portEnabled=1 EAPOL: SUPP_PAE entering state CONNECTING EAPOL: SUPP_BE entering state IDLE EAP: EAP entering state INITIALIZE EAP: EAP entering state IDLE Sending fake EAP-Request-Identity EAPOL: Received EAP-Packet frame EAPOL: SUPP_PAE entering state RESTART EAP: EAP entering state INITIALIZE EAP: EAP entering state IDLE EAPOL: SUPP_PAE entering state AUTHENTICATING EAPOL: SUPP_BE entering state REQUEST EAPOL: getSuppRsp EAP: EAP entering state RECEIVED EAP: Received EAP-Request id=0 method=1 vendor=0 vendorMethod=0 EAP: EAP entering state IDENTITY CTRL-EVENT-EAP-STARTED EAP authentication started EAP: EAP-Request Identity data - hexdump_ascii(len=0): EAP: using real identity - hexdump_ascii(len=8): 74 65 73 74 75 73 65 72 testuser EAP: EAP entering state SEND_RESPONSE EAP: EAP entering state IDLE EAPOL: SUPP_BE entering state RESPONSE EAPOL: txSuppRsp WPA: eapol_test_eapol_send(type=0 len=13) TX EAP -> RADIUS - hexdump(len=13): 02 00 00 0d 01 74 65 73 74 75 73 65 72 Encapsulating EAP message into a RADIUS packet Learned identity from EAP-Response-Identity - hexdump(len=8): 74 65 73 74 75 73 65 72 Sending RADIUS message to authentication server RADIUS message: code=1 (Access-Request) identifier=0 length=124 Attribute 1 (User-Name) length=10 Value: 'testuser' Attribute 4 (NAS-IP-Address) length=6 Value: 127.0.0.1 Attribute 31 (Calling-Station-Id) length=19 Value: '02-00-00-00-00-01' Attribute 12 (Framed-MTU) length=6 Value: 1400 Attribute 61 (NAS-Port-Type) length=6 Value: 19 Attribute 77 (Connect-Info) length=24 Value: 'CONNECT 11Mbps 802.11b' Attribute 79 (EAP-Message) length=15 Value: 02 00 00 0d 01 74 65 73 74 75 73 65 72 Attribute 80 (Message-Authenticator) length=18 Value: 5d 64 3f 0b 7a 1a ef 5f 05 6e 19 d9 aa 5f ba 3e Next RADIUS client retransmit in 3 seconds EAPOL: SUPP_BE entering state RECEIVE Received 64 bytes from RADIUS server Received RADIUS message RADIUS message: code=11 (Access-Challenge) identifier=0 length=64 Attribute 79 (EAP-Message) length=8 Value: 01 01 00 06 0d 20 Attribute 80 (Message-Authenticator) length=18 Value: 39 10 8c b6 97 43 96 2a 70 0b 04 28 1a 45 e3 45 Attribute 24 (State) length=18 Value: 02 fd d1 c8 02 fc dc 44 d6 5e bd 48 c2 50 0b b5 STA 02:00:00:00:00:01: Received RADIUS packet matched with a pending request, round trip time 0.00 sec RADIUS packet matching with station decapsulated EAP packet (code=1 id=1 len=6) from RADIUS server: EAP-Request-TLS (13) EAPOL: Received EAP-Packet frame EAPOL: SUPP_BE entering state REQUEST EAPOL: getSuppRsp EAP: EAP entering state RECEIVED EAP: Received EAP-Request id=1 method=13 vendor=0 vendorMethod=0 EAP: EAP entering state GET_METHOD EAP: Initialize selected EAP method: vendor 0 method 13 (TLS) TLS: using phase1 config options TLS: Trusted root certificate(s) loaded OpenSSL: tls_connection_client_cert - SSL_use_certificate_file (DER) failed error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag OpenSSL: pending error: error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error OpenSSL: pending error: error:140C800D:SSL routines:SSL_use_certificate_file:ASN1 lib OpenSSL: SSL_use_certificate_file (PEM) --> OK OpenSSL: tls_connection_private_key - SSL_use_PrivateKey_File (DER) failed error:0D094068:asn1 encoding routines:d2i_ASN1_SET:bad tag OpenSSL: pending error: error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag OpenSSL: pending error: error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error OpenSSL: pending error: error:0D09A00D:asn1 encoding routines:d2i_PrivateKey:ASN1 lib OpenSSL: pending error: error:140CB00D:SSL routines:SSL_use_PrivateKey_file:ASN1 lib OpenSSL: SSL_use_PrivateKey_File (PEM) --> OK SSL: Private key loaded successfully CTRL-EVENT-EAP-METHOD EAP vendor 0 method 13 (TLS) selected EAP: EAP entering state METHOD SSL: Received packet(len=6) - Flags 0x20 EAP-TLS: Start SSL: (where=0x10 ret=0x1) SSL: (where=0x1001 ret=0x1) SSL: SSL_connect:before/connect initialization SSL: (where=0x1001 ret=0x1) SSL: SSL_connect:SSLv3 write client hello A SSL: (where=0x1002 ret=0xffffffff) SSL: SSL_connect:error in SSLv3 read server hello A SSL: SSL_connect - want more data SSL: 93 bytes pending from ssl_out SSL: 93 bytes left to be sent out (of total 93 bytes) EAP: method process -> ignore=FALSE methodState=MAY_CONT decision=FAIL EAP: EAP entering state SEND_RESPONSE EAP: EAP entering state IDLE EAPOL: SUPP_BE entering state RESPONSE EAPOL: txSuppRsp WPA: eapol_test_eapol_send(type=0 len=99) TX EAP -> RADIUS - hexdump(len=99): 02 01 00 63 0d 00 16 03 01 00 58 01 00 00 54 03 01 4b 11 b6 a4 de b0 54 e0 86 90 99 34 ea 43 6e f7 8e 23 9e ce f1 99 c3 f2 cc 4e 70 a8 77 35 50 50 00 00 26 00 39 00 38 00 35 00 16 00 13 00 0a 00 33 00 32 00 2f 00 05 00 04 00 15 00 12 00 09 00 14 00 11 00 08 00 06 00 03 02 01 00 00 04 00 23 00 00 Encapsulating EAP message into a RADIUS packet Copied RADIUS State Attribute Sending RADIUS message to authentication server RADIUS message: code=1 (Access-Request) identifier=1 length=228 Attribute 1 (User-Name) length=10 Value: 'testuser' Attribute 4 (NAS-IP-Address) length=6 Value: 127.0.0.1 Attribute 31 (Calling-Station-Id) length=19 Value: '02-00-00-00-00-01' Attribute 12 (Framed-MTU) length=6 Value: 1400 Attribute 61 (NAS-Port-Type) length=6 Value: 19 Attribute 77 (Connect-Info) length=24 Value: 'CONNECT 11Mbps 802.11b' Attribute 79 (EAP-Message) length=101 Value: 02 01 00 63 0d 00 16 03 01 00 58 01 00 00 54 03 01 4b 11 b6 a4 de b0 54 e0 86 90 99 34 ea 43 6e f7 8e 23 9e ce f1 99 c3 f2 cc 4e 70 a8 77 35 50 50 00 00 26 00 39 00 38 00 35 00 16 00 13 00 0a 00 33 00 32 00 2f 00 05 00 04 00 15 00 12 00 09 00 14 00 11 00 08 00 06 00 03 02 01 00 00 04 00 23 00 00 Attribute 24 (State) length=18 Value: 02 fd d1 c8 02 fc dc 44 d6 5e bd 48 c2 50 0b b5 Attribute 80 (Message-Authenticator) length=18 Value: de f0 f4 f3 c7 a8 df ff 9a d9 ab 58 fd 00 47 29 Next RADIUS client retransmit in 3 seconds EAPOL: SUPP_BE entering state RECEIVE Received 1090 bytes from RADIUS server Received RADIUS message RADIUS message: code=11 (Access-Challenge) identifier=1 length=1090 Attribute 79 (EAP-Message) length=255 Value: 01 02 04 00 0d c0 00 00 0b 57 16 03 01 00 30 02 00 00 2c 03 01 4b 08 d9 5b cc 3e c4 94 28 f9 64 e6 4e ab 0a 10 d4 65 ac f8 c3 28 70 ae 64 3c f4 b8 5a cc c3 d3 00 00 39 01 00 04 00 23 00 00 16 03 01 08 5e 0b 00 08 5a 00 08 57 00 03 a6 30 82 03 a2 30 82 02 8a a0 03 02 01 02 02 01 01 30 0d 06 09 2a 86 48 86 f7 0d 01 01 04 05 00 30 81 93 31 0b 30 09 06 03 55 04 06 13 02 46 52 31 0f 30 0d 06 03 55 04 08 13 06 52 61 64 69 75 73 31 12 30 10 06 03 55 04 07 13 09 53 6f 6d 65 77 68 65 72 65 31 15 30 13 06 03 55 04 0a 13 0c 45 78 61 6d 70 6c 65 20 49 6e 63 2e 31 20 30 1e 06 09 2a 86 48 86 f7 0d 01 09 01 16 11 61 64 6d 69 6e 40 65 78 61 6d 70 6c 65 2e 63 6f 6d 31 26 30 24 06 03 55 04 03 13 1d 45 78 61 6d 70 6c 65 20 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 Attribute 79 (EAP-Message) length=255 Value: 68 6f 72 69 74 79 30 1e 17 0d 30 39 31 31 31 38 30 31 31 32 30 30 5a 17 0d 31 30 31 31 31 38 30 31 31 32 30 30 5a 30 7c 31 0b 30 09 06 03 55 04 06 13 02 46 52 31 0f 30 0d 06 03 55 04 08 13 06 52 61 64 69 75 73 31 15 30 13 06 03 55 04 0a 13 0c 45 78 61 6d 70 6c 65 20 49 6e 63 2e 31 23 30 21 06 03 55 04 03 13 1a 45 78 61 6d 70 6c 65 20 53 65 72 76 65 72 20 43 65 72 74 69 66 69 63 61 74 65 31 20 30 1e 06 09 2a 86 48 86 f7 0d 01 09 01 16 11 61 64 6d 69 6e 40 65 78 61 6d 70 6c 65 2e 63 6f 6d 30 82 01 22 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 82 01 0f 00 30 82 01 0a 02 82 01 01 00 95 4c 61 4a 6e db a4 90 37 df 91 56 ba 8d b3 01 57 e0 70 8b a5 da 06 61 7d 92 45 f6 eb 34 87 0f d2 ba b3 6b 77 74 cf 1f 3f bb 17 52 65 7b 7f a3 04 1b 73 8b 6b 27 f2 c2 Attribute 79 (EAP-Message) length=255 Value: 33 d8 69 12 33 fe 86 19 0d fd 08 b3 ad 8e e9 87 84 65 06 29 94 0e 36 59 68 2e 7e bc 36 de 79 94 04 eb dd 83 0a 1c 26 4f 65 ea 80 cf e8 19 87 62 d6 c4 63 d6 d7 70 64 fc ae 27 af f8 4d 2c 8a 90 d2 2a 77 5c 93 62 c4 0c 21 71 21 d2 4b 36 fe e5 b8 44 83 01 ae bc 5f 0a 7c 61 25 37 14 ec df 4e be c1 1f cb 53 6f c8 ee aa 3c 6d 4e f0 e1 4e ab 30 38 d6 7c d0 63 6a 20 94 92 41 fc 44 a1 b6 d8 a5 58 6a 4e d5 8e f8 8c 2e f2 7c fa 19 c5 73 34 c3 7b dd 4e 53 7c 87 01 b4 6e 7b 49 d6 c2 29 92 59 a6 12 d9 06 9b 8a d9 f5 74 4f 3c 76 83 e5 8f 3e bc 07 88 2b 5b 60 71 a8 90 c8 34 69 92 1d d9 67 47 0c cc de 24 d9 7b 02 03 01 00 01 a3 17 30 15 30 13 06 03 55 1d 25 04 0c 30 0a 06 08 2b 06 01 05 05 07 03 01 30 0d 06 09 2a 86 48 86 f7 0d 01 01 04 05 00 03 82 01 01 00 aa 9f 4e Attribute 79 (EAP-Message) length=255 Value: 26 42 3d 73 f1 7a 9c 59 35 d6 7a 59 9e 65 87 b9 57 dc 1f 1d 96 7e da c9 e7 c1 f9 08 ab 44 9d 6d 08 1f 02 d3 68 e6 e6 5e db 91 2d d3 10 ca 35 8e 17 00 cc d1 cd b1 5e ca 32 2f 56 ee 66 38 ec 68 a3 14 35 e4 93 6c cd fd 54 3c 28 37 0c 5e d7 c8 c3 2b ae 67 a1 34 cf 91 6a 4f 41 24 1d cf 6e 9f 01 b5 7e 61 dd ea bc da 29 20 92 e7 aa 0d 77 bd 37 f5 51 b8 63 57 07 34 aa fd 49 b4 c1 d8 dd 3c bc 03 50 bd 76 e6 ef 11 6c 69 fc d0 dc 73 55 58 11 7e 02 84 88 f4 81 6e f5 e6 44 a9 6e 88 79 b8 a8 b3 89 89 f1 13 e3 b8 aa 42 c3 4d 6e 45 74 a0 80 6b 7d de 15 1b 2c 70 85 ab 14 ec 40 12 50 da e0 9a fe 28 02 b8 7b 15 40 fb eb 31 3f 89 0d 63 cf b7 ee 30 7a 68 1f db 30 e9 27 6b 0c 7f 51 67 b1 64 d6 ea 5f f6 bb 8c 13 2f e6 46 93 90 cf b1 7f 83 09 cf 18 0f 6f b8 65 ad 11 bf 9b Attribute 79 (EAP-Message) length=14 Value: 00 04 ab 30 82 04 a7 30 82 03 8f a0 Attribute 80 (Message-Authenticator) length=18 Value: f1 b7 a9 75 c6 ae 06 3b bf 8d 3c fd 99 3f f8 8a Attribute 24 (State) length=18 Value: 02 fd d1 c8 03 ff dc 44 d6 5e bd 48 c2 50 0b b5 STA 02:00:00:00:00:01: Received RADIUS packet matched with a pending request, round trip time 0.01 sec RADIUS packet matching with station decapsulated EAP packet (code=1 id=2 len=1024) from RADIUS server: EAP-Request-TLS (13) EAPOL: Received EAP-Packet frame EAPOL: SUPP_BE entering state REQUEST EAPOL: getSuppRsp EAP: EAP entering state RECEIVED EAP: Received EAP-Request id=2 method=13 vendor=0 vendorMethod=0 EAP: EAP entering state METHOD SSL: Received packet(len=1024) - Flags 0xc0 SSL: TLS Message Length: 2903 SSL: Need 1889 bytes more input data SSL: Building ACK (type=13 id=2 ver=0) EAP: method process -> ignore=FALSE methodState=MAY_CONT decision=FAIL EAP: EAP entering state SEND_RESPONSE EAP: EAP entering state IDLE EAPOL: SUPP_BE entering state RESPONSE EAPOL: txSuppRsp WPA: eapol_test_eapol_send(type=0 len=6) TX EAP -> RADIUS - hexdump(len=6): 02 02 00 06 0d 00 Encapsulating EAP message into a RADIUS packet Copied RADIUS State Attribute Sending RADIUS message to authentication server RADIUS message: code=1 (Access-Request) identifier=2 length=135 Attribute 1 (User-Name) length=10 Value: 'testuser' Attribute 4 (NAS-IP-Address) length=6 Value: 127.0.0.1 Attribute 31 (Calling-Station-Id) length=19 Value: '02-00-00-00-00-01' Attribute 12 (Framed-MTU) length=6 Value: 1400 Attribute 61 (NAS-Port-Type) length=6 Value: 19 Attribute 77 (Connect-Info) length=24 Value: 'CONNECT 11Mbps 802.11b' Attribute 79 (EAP-Message) length=8 Value: 02 02 00 06 0d 00 Attribute 24 (State) length=18 Value: 02 fd d1 c8 03 ff dc 44 d6 5e bd 48 c2 50 0b b5 Attribute 80 (Message-Authenticator) length=18 Value: 30 5b 46 56 f3 cc 24 22 e3 a2 0f 48 13 9d 2a 7d Next RADIUS client retransmit in 3 seconds EAPOL: SUPP_BE entering state RECEIVE Received 1090 bytes from RADIUS server Received RADIUS message RADIUS message: code=11 (Access-Challenge) identifier=2 length=1090 Attribute 79 (EAP-Message) length=255 Value: 01 03 04 00 0d c0 00 00 0b 57 03 02 01 02 02 09 00 bc 77 76 7d e6 94 86 75 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 30 81 93 31 0b 30 09 06 03 55 04 06 13 02 46 52 31 0f 30 0d 06 03 55 04 08 13 06 52 61 64 69 75 73 31 12 30 10 06 03 55 04 07 13 09 53 6f 6d 65 77 68 65 72 65 31 15 30 13 06 03 55 04 0a 13 0c 45 78 61 6d 70 6c 65 20 49 6e 63 2e 31 20 30 1e 06 09 2a 86 48 86 f7 0d 01 09 01 16 11 61 64 6d 69 6e 40 65 78 61 6d 70 6c 65 2e 63 6f 6d 31 26 30 24 06 03 55 04 03 13 1d 45 78 61 6d 70 6c 65 20 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 30 1e 17 0d 30 39 31 31 31 38 30 31 31 32 30 30 5a 17 0d 31 30 31 31 31 38 30 31 31 32 30 30 5a 30 81 93 31 0b 30 09 06 03 55 04 06 13 02 46 52 31 0f 30 0d 06 03 55 04 08 13 06 52 61 64 69 Attribute 79 (EAP-Message) length=255 Value: 75 73 31 12 30 10 06 03 55 04 07 13 09 53 6f 6d 65 77 68 65 72 65 31 15 30 13 06 03 55 04 0a 13 0c 45 78 61 6d 70 6c 65 20 49 6e 63 2e 31 20 30 1e 06 09 2a 86 48 86 f7 0d 01 09 01 16 11 61 64 6d 69 6e 40 65 78 61 6d 70 6c 65 2e 63 6f 6d 31 26 30 24 06 03 55 04 03 13 1d 45 78 61 6d 70 6c 65 20 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 30 82 01 22 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 82 01 0f 00 30 82 01 0a 02 82 01 01 00 d2 6b 05 1f 32 80 f5 3d a9 06 c2 71 97 31 9f c1 9e b0 e1 0c 22 28 ae 67 f2 39 33 0a 98 29 a3 32 e6 07 95 bd 13 70 34 e0 5d ee da 14 d6 85 6d e7 62 96 45 dc db ad 65 b9 6f c2 e9 1c 9f 0f 79 ee 81 be 4c 0c cd 7a 3a d4 d3 c8 05 95 8f 02 f0 25 2c f2 8a 82 72 96 1e 0d 2a 94 c8 46 e0 cb 55 10 ed b4 af 0e 85 Attribute 79 (EAP-Message) length=255 Value: be 9f 24 8a a8 04 41 45 05 7f a0 4e 04 bb a2 07 96 ec 7a 87 7e d2 c4 e1 61 cb f6 02 5d ea f1 fd 48 c8 ee 77 cf 0e 95 a5 e8 fe 49 50 da 5c 1d 01 d5 3e 90 d7 11 38 bc 2c d9 24 a2 40 e4 01 a4 26 f2 bc d3 47 d2 a1 59 02 c0 29 bd b4 fd a7 3c cd f1 da 13 1d 71 8d 09 89 18 2d d7 69 2b a7 b3 9f 54 40 0c b7 e5 3d aa 64 e1 da 42 ff 6d f0 c1 3b 14 f3 d1 6a 72 2e f2 36 f2 40 93 60 7e f6 8d e2 d5 77 10 89 33 ce 2b 3e 68 73 83 e7 c4 f2 12 68 77 c5 92 d7 fe e7 41 9a 2a 3a f5 02 03 01 00 01 a3 81 fb 30 81 f8 30 1d 06 03 55 1d 0e 04 16 04 14 21 9e d2 12 b2 83 61 c8 36 40 d4 b1 50 73 d9 c3 0e 5a 2f b6 30 81 c8 06 03 55 1d 23 04 81 c0 30 81 bd 80 14 21 9e d2 12 b2 83 61 c8 36 40 d4 b1 50 73 d9 c3 0e 5a 2f b6 a1 81 99 a4 81 96 30 81 93 31 0b 30 09 06 03 55 04 06 13 02 Attribute 79 (EAP-Message) length=255 Value: 46 52 31 0f 30 0d 06 03 55 04 08 13 06 52 61 64 69 75 73 31 12 30 10 06 03 55 04 07 13 09 53 6f 6d 65 77 68 65 72 65 31 15 30 13 06 03 55 04 0a 13 0c 45 78 61 6d 70 6c 65 20 49 6e 63 2e 31 20 30 1e 06 09 2a 86 48 86 f7 0d 01 09 01 16 11 61 64 6d 69 6e 40 65 78 61 6d 70 6c 65 2e 63 6f 6d 31 26 30 24 06 03 55 04 03 13 1d 45 78 61 6d 70 6c 65 20 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 82 09 00 bc 77 76 7d e6 94 86 75 30 0c 06 03 55 1d 13 04 05 30 03 01 01 ff 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 82 01 01 00 6d 5f ef de fc 84 0c fc ba 63 95 1a 85 0a ff f9 49 ee d1 ea d3 b3 7f 79 91 2b 72 7c b7 15 ec ca aa 51 8d 60 d7 9d 27 b1 03 4d 31 a6 39 49 4a a9 d0 ce 39 2a c7 46 4f 20 27 44 03 8c c7 55 91 3c 3e 3a e7 26 00 9c b9 50 Attribute 79 (EAP-Message) length=14 Value: 15 38 a6 bd de ef 7a e2 07 db 90 bb Attribute 80 (Message-Authenticator) length=18 Value: 32 08 97 3e 70 6f 8f ce c1 7e 0d 28 7c 60 2a cc Attribute 24 (State) length=18 Value: 02 fd d1 c8 00 fe dc 44 d6 5e bd 48 c2 50 0b b5 STA 02:00:00:00:00:01: Received RADIUS packet matched with a pending request, round trip time 0.00 sec RADIUS packet matching with station decapsulated EAP packet (code=1 id=3 len=1024) from RADIUS server: EAP-Request-TLS (13) EAPOL: Received EAP-Packet frame EAPOL: SUPP_BE entering state REQUEST EAPOL: getSuppRsp EAP: EAP entering state RECEIVED EAP: Received EAP-Request id=3 method=13 vendor=0 vendorMethod=0 EAP: EAP entering state METHOD SSL: Received packet(len=1024) - Flags 0xc0 SSL: TLS Message Length: 2903 SSL: Need 875 bytes more input data SSL: Building ACK (type=13 id=3 ver=0) EAP: method process -> ignore=FALSE methodState=MAY_CONT decision=FAIL EAP: EAP entering state SEND_RESPONSE EAP: EAP entering state IDLE EAPOL: SUPP_BE entering state RESPONSE EAPOL: txSuppRsp WPA: eapol_test_eapol_send(type=0 len=6) TX EAP -> RADIUS - hexdump(len=6): 02 03 00 06 0d 00 Encapsulating EAP message into a RADIUS packet Copied RADIUS State Attribute Sending RADIUS message to authentication server RADIUS message: code=1 (Access-Request) identifier=3 length=135 Attribute 1 (User-Name) length=10 Value: 'testuser' Attribute 4 (NAS-IP-Address) length=6 Value: 127.0.0.1 Attribute 31 (Calling-Station-Id) length=19 Value: '02-00-00-00-00-01' Attribute 12 (Framed-MTU) length=6 Value: 1400 Attribute 61 (NAS-Port-Type) length=6 Value: 19 Attribute 77 (Connect-Info) length=24 Value: 'CONNECT 11Mbps 802.11b' Attribute 79 (EAP-Message) length=8 Value: 02 03 00 06 0d 00 Attribute 24 (State) length=18 Value: 02 fd d1 c8 00 fe dc 44 d6 5e bd 48 c2 50 0b b5 Attribute 80 (Message-Authenticator) length=18 Value: 75 da 56 b9 90 3a 34 d1 2f 5b bb 40 e6 92 cb 29 Next RADIUS client retransmit in 3 seconds EAPOL: SUPP_BE entering state RECEIVE Received 949 bytes from RADIUS server Received RADIUS message RADIUS message: code=11 (Access-Challenge) identifier=3 length=949 Attribute 79 (EAP-Message) length=255 Value: 01 04 03 75 0d 80 00 00 0b 57 70 17 d5 2f 69 aa 63 de e7 6a a3 7a d0 2a a6 13 ad 1a c6 3f bd 93 19 ae d4 e9 48 c3 f4 bc 09 f9 b7 10 45 bb 9d cf 58 38 6c b7 49 d3 df 8e fb 67 cc 98 38 3a db 69 6a e0 1d cd 5a 90 01 41 dc 2f b9 55 16 ee ad aa a1 88 bd 91 f5 69 59 c6 bc f8 17 25 2b 4c 76 ba f7 d8 59 e7 fd 95 3d 85 e9 e8 81 95 69 69 17 da 24 01 80 0c 6a ca 25 47 9e b1 4d eb f0 72 7c c4 8f 6e 6e 43 b3 ed be 22 51 fa 58 7a aa a6 c1 f4 22 8d 14 93 e9 b9 f6 7e 28 5a 68 38 4c 32 73 f3 cf ac a8 cf 89 56 94 84 98 ca 91 0d 8d dd 16 5c 21 05 bb 0a 32 21 16 03 01 02 0d 0c 00 02 09 00 80 ea 9b 19 de 5c 8f 48 f0 56 f3 d0 b0 c2 b1 40 3f f2 f7 d3 bd 47 67 3f 9e 44 b7 44 cf 3e 12 0a 24 ce 7a 16 b9 7c dd 7a 99 d7 3d 74 db 5a 6d d5 05 70 d9 79 13 6e 59 ab a7 c3 ac 05 cd Attribute 79 (EAP-Message) length=255 Value: a0 fa 71 35 12 c6 44 ab 1d 89 e8 d2 d8 27 b8 db 03 4e f0 79 6e de b9 46 98 7f 17 ac 0b ed ee 7f a7 d4 3a d5 5c c7 96 fc e5 18 87 fe 6e 61 58 8d cb ca 56 73 6a fc 4c e3 f9 79 23 e8 6d 99 0c 52 d0 94 6c 4b 00 01 02 00 80 c1 0b 3b c5 27 d5 9c ac 3b 2f f5 c0 f9 24 67 e8 b2 6f cb 01 62 9f 4b 9f 05 18 b8 29 2b 9f 43 50 af e3 63 37 6b 97 8a 89 be ac 33 a6 34 84 34 9e c7 d5 47 41 dc c3 43 42 5c 58 98 a8 fd e7 b1 d0 db 12 64 1e 1b db b9 11 26 f1 98 7b 80 7b 04 fa 5c dd ef 85 fb 34 bc ba 43 f5 d0 21 a0 cf 4c c0 e4 52 dd 4d 68 f2 6d 8f 53 89 4e 3a 22 61 47 c3 12 ba 17 f7 da c7 72 15 d6 55 bd db 0a 73 32 4d 01 00 93 1a 69 37 5c 4e e5 f6 4c a2 3b a4 45 d8 b7 b2 2a 30 7b 76 c6 56 c1 34 78 62 e6 28 42 d9 79 74 04 60 4e 18 28 81 57 ea 0f 51 0e 8a d3 5f 34 42 6c 88 Attribute 79 (EAP-Message) length=255 Value: 7c 9c 2f d7 dd 89 e7 ef 7b 8c 3f 7b 2c 22 e1 ab e0 3b 8d 9a 22 40 97 dc 31 59 97 57 13 9c 17 fb 36 97 62 e7 56 42 d9 67 02 bc 16 89 0e ee 04 55 5b 5c 99 69 64 71 7d fd bb d1 cd 1c ad 12 5a 61 84 44 76 0a 82 e5 ca b9 dc f9 f6 97 67 47 fd 26 7e e5 ed c3 b2 21 df dc 35 7e fc 00 64 7b a4 e5 b9 13 26 c6 dd 1b ca 07 a0 35 ba ed 45 05 0c 2a 04 31 e1 c9 e5 3e e7 e9 d3 36 bd 85 01 96 fb f5 7f d9 4f 21 38 3c 97 a8 d7 f1 06 89 88 02 1f 35 ff 31 d3 a3 3e 9f 08 b0 6d 17 cb 9b 5b 92 fe 82 46 6e c9 79 53 66 ce 58 38 d6 27 51 46 20 4e 13 e8 93 f5 30 53 40 2a 40 ff dd c4 d4 9c 8a 93 88 b5 2a 0c cb 0a 31 3d ee 7f 01 46 77 6a 96 16 03 01 00 a8 0d 00 00 a0 05 03 04 01 02 40 00 98 00 96 30 81 93 31 0b 30 09 06 03 55 04 06 13 02 46 52 31 0f 30 0d 06 03 55 04 08 13 06 52 Attribute 79 (EAP-Message) length=128 Value: 61 64 69 75 73 31 12 30 10 06 03 55 04 07 13 09 53 6f 6d 65 77 68 65 72 65 31 15 30 13 06 03 55 04 0a 13 0c 45 78 61 6d 70 6c 65 20 49 6e 63 2e 31 20 30 1e 06 09 2a 86 48 86 f7 0d 01 09 01 16 11 61 64 6d 69 6e 40 65 78 61 6d 70 6c 65 2e 63 6f 6d 31 26 30 24 06 03 55 04 03 13 1d 45 78 61 6d 70 6c 65 20 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 0e 00 00 00 Attribute 80 (Message-Authenticator) length=18 Value: 25 53 ae 49 85 0a 64 e1 3c c1 4d f7 a9 cb 89 63 Attribute 24 (State) length=18 Value: 02 fd d1 c8 01 f9 dc 44 d6 5e bd 48 c2 50 0b b5 STA 02:00:00:00:00:01: Received RADIUS packet matched with a pending request, round trip time 0.00 sec RADIUS packet matching with station decapsulated EAP packet (code=1 id=4 len=885) from RADIUS server: EAP-Request-TLS (13) EAPOL: Received EAP-Packet frame EAPOL: SUPP_BE entering state REQUEST EAPOL: getSuppRsp EAP: EAP entering state RECEIVED EAP: Received EAP-Request id=4 method=13 vendor=0 vendorMethod=0 EAP: EAP entering state METHOD SSL: Received packet(len=885) - Flags 0x80 SSL: TLS Message Length: 2903 SSL: (where=0x1001 ret=0x1) SSL: SSL_connect:SSLv3 read server hello A TLS: tls_verify_cb - preverify_ok=1 err=0 (ok) depth=1 buf='/C=FR/ST=Radius/L=Somewhere/O=Example Inc./emailAddress=admin@example.com/CN=Example Certificate Authority' TLS: tls_verify_cb - preverify_ok=1 err=0 (ok) depth=0 buf='/C=FR/ST=Radius/O=Example Inc./CN=Example Server Certificate/emailAddress=admin@example.com' SSL: (where=0x1001 ret=0x1) SSL: SSL_connect:SSLv3 read server certificate A SSL: (where=0x1001 ret=0x1) SSL: SSL_connect:SSLv3 read server key exchange A SSL: (where=0x1001 ret=0x1) SSL: SSL_connect:SSLv3 read server certificate request A SSL: (where=0x1001 ret=0x1) SSL: SSL_connect:SSLv3 read server done A SSL: (where=0x1001 ret=0x1) SSL: SSL_connect:SSLv3 write client certificate A SSL: (where=0x1001 ret=0x1) SSL: SSL_connect:SSLv3 write client key exchange A SSL: (where=0x1001 ret=0x1) SSL: SSL_connect:SSLv3 write certificate verify A SSL: (where=0x1001 ret=0x1) SSL: SSL_connect:SSLv3 write change cipher spec A SSL: (where=0x1001 ret=0x1) SSL: SSL_connect:SSLv3 write finished A SSL: (where=0x1001 ret=0x1) SSL: SSL_connect:SSLv3 flush data SSL: (where=0x1002 ret=0xffffffff) SSL: SSL_connect:error in SSLv3 read server session ticket A SSL: SSL_connect - want more data SSL: 1379 bytes pending from ssl_out SSL: 1379 bytes left to be sent out (of total 1379 bytes) EAP: method process -> ignore=FALSE methodState=MAY_CONT decision=FAIL EAP: EAP entering state SEND_RESPONSE EAP: EAP entering state IDLE EAPOL: SUPP_BE entering state RESPONSE EAPOL: txSuppRsp WPA: eapol_test_eapol_send(type=0 len=1385) TX EAP -> RADIUS - hexdump(len=1385): 02 04 05 69 0d 00 16 03 01 03 8d 0b 00 03 89 00 03 86 00 03 83 30 82 03 7f 30 82 02 67 a0 03 02 01 02 02 01 02 30 0d 06 09 2a 86 48 86 f7 0d 01 01 04 05 00 30 7c 31 0b 30 09 06 03 55 04 06 13 02 46 52 31 0f 30 0d 06 03 55 04 08 13 06 52 61 64 69 75 73 31 15 30 13 06 03 55 04 0a 13 0c 45 78 61 6d 70 6c 65 20 49 6e 63 2e 31 23 30 21 06 03 55 04 03 13 1a 45 78 61 6d 70 6c 65 20 53 65 72 76 65 72 20 43 65 72 74 69 66 69 63 61 74 65 31 20 30 1e 06 09 2a 86 48 86 f7 0d 01 09 01 16 11 61 64 6d 69 6e 40 65 78 61 6d 70 6c 65 2e 63 6f 6d 30 1e 17 0d 30 39 31 31 31 38 30 31 32 34 35 30 5a 17 0d 31 30 31 31 31 38 30 31 32 34 35 30 5a 30 71 31 0b 30 09 06 03 55 04 06 13 02 46 52 31 0f 30 0d 06 03 55 04 08 13 06 52 61 64 69 75 73 31 15 30 13 06 03 55 04 0a 13 0c 45 78 61 6d 70 6c 65 20 49 6e 63 2e 31 19 30 17 06 03 55 04 03 14 10 75 73 65 72 40 65 78 61 6d 70 6c 65 2e 63 6f 6d 31 1f 30 1d 06 09 2a 86 48 86 f7 0d 01 09 01 16 10 75 73 65 72 40 65 78 61 6d 70 6c 65 2e 63 6f 6d 30 82 01 22 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 82 01 0f 00 30 82 01 0a 02 82 01 01 00 f1 98 f4 db 9f 00 25 91 c4 ee 95 55 80 62 5e 6c 64 26 ca ce 17 60 f8 12 29 f3 83 88 59 59 8f 78 7b f8 c3 98 7f 7a 00 88 cc 2d 0b 87 93 7e c3 dd 7d 2c f8 0d 4d 03 30 34 8d 3d 4c 03 6a ad 47 42 67 13 d1 86 3a 19 29 a0 51 e7 a5 f8 5e 02 ee bc 61 ee c8 d2 1e 56 83 a5 57 49 83 20 5b 10 6a 6e 81 f8 7f 1b 40 cb c3 3b fa 76 24 1b e7 c9 02 52 8f dd 10 42 ed cf de 87 b7 6e 23 ac ce 03 ed d3 3e 22 ef 48 7f 83 3a 80 db 5c dc f1 3c 51 aa 73 bb 77 40 3c 5c 70 ae a1 9b 3f 65 74 c4 72 bc 1a e0 5b 4d ff a3 cb 74 bf 60 06 d0 3d 06 73 43 b1 26 7f 6e 7c 11 6e 97 ad d5 d6 16 6e 0e 2f af 1f b5 44 3a db d4 25 0c 96 ce b7 25 a6 3a aa a6 3d 4a c6 f9 bb 05 19 ea 9d a7 27 32 8c e1 ac 2c 88 75 34 d5 9c f4 f0 c4 19 47 0e de 1a 5f 5e 03 35 dd 10 e0 a9 d2 2e db e4 04 68 39 56 73 42 77 c5 02 03 01 00 01 a3 17 30 15 30 13 06 03 55 1d 25 04 0c 30 0a 06 08 2b 06 01 05 05 07 03 02 30 0d 06 09 2a 86 48 86 f7 0d 01 01 04 05 00 03 82 01 01 00 93 a9 14 af 05 f3 ff 1c 83 b6 7b 4a ab f1 c2 0b 35 14 fc 19 8b c7 9f 3b 1a bc 2e be 72 5f c6 71 f3 d2 94 bd 3c b5 1f 95 b4 28 7d 0d ca a1 bf 6d e8 6a 60 2f a4 ca 3c 46 15 e6 f9 7a 48 91 dd 00 ef 1d 71 b0 53 ce 54 73 82 56 e9 32 52 12 c7 bd 68 be 65 e6 de 04 51 41 c7 d5 2a 23 60 70 56 22 ae 72 ee e8 f1 27 35 a5 1c 6d cd 87 ca d4 5c d2 c4 a6 2a 0f 38 87 03 66 d6 51 b5 88 ae fa 2d f8 bb 9b db af 35 29 24 7f 75 16 6f 07 bc 07 64 5b 84 13 58 fd dc 2c 35 ff 91 62 59 a5 10 60 b8 c5 40 e3 ff ef 7d b0 98 99 96 b8 d8 9e 73 7b 49 85 92 29 82 5d dd db 15 38 ba fc 76 77 f3 2c 3f cc 12 b9 35 a3 9a 33 f2 da 3f be 9a 4b 48 09 6d 04 d2 36 ad 8e b5 fa 31 d8 22 e7 85 fc 33 d4 a5 34 46 ca 2f 97 f4 f8 97 c0 38 f0 79 eb ee e1 79 f8 9e 9e e4 98 40 5d 26 ca 51 c9 33 af fc ed 3d c4 16 03 01 00 86 10 00 00 82 00 80 de e8 da 5e 2e f6 51 d5 2a c3 72 97 dc 86 9c 35 5c 6f af ca 9c 82 ef d7 e9 01 25 0a 59 24 b5 da 4e 6d d4 c2 65 9e 56 d5 7d 62 37 33 c7 24 91 82 43 d8 a2 d7 44 bf c6 0e 5f 15 2a cd 04 d4 a8 f7 f6 d3 14 42 50 32 b7 51 53 24 e9 91 ab 3f 82 ed 62 a2 bf 77 86 71 52 c2 f5 f5 3e 08 98 a5 1c 57 69 59 85 b2 92 81 98 a4 59 0c 44 1d 08 67 ed 14 8e a8 5d 3d e7 80 83 75 54 3e 6c 66 8c 41 64 8d 16 03 01 01 06 0f 00 01 02 01 00 cc 51 30 ee 43 c1 04 a8 c5 04 24 9f 32 57 38 d1 e8 d4 d4 a2 36 94 bb 77 eb f3 f8 3f 16 17 02 67 b0 00 b1 47 d7 86 eb 10 18 72 96 22 27 0a e7 04 05 5a f7 7d 41 08 52 b3 2f 04 17 5d dc ee 80 ca ab 9f 29 66 73 f5 7c a3 b1 09 68 d7 bd d6 1c c8 a4 d3 7f 59 31 09 be 77 d9 18 2b 31 5e cf b2 8f 1b 62 be ac e2 4f 92 c2 e3 25 8a ce 4d e3 4b f9 a4 9f 95 b5 81 58 ab ac 44 95 ef 6c 3f eb 90 16 be 74 6f 76 8e d6 ab 25 2d 73 1e b6 66 56 73 3c 2f 49 3d 4f 69 5b 74 48 18 cf d3 d7 fb dc 36 fc 28 71 60 cd 69 05 13 62 6a 46 d5 34 6e 2e 0a cc 86 89 65 2c a7 cd 75 2a 2a 58 1f 11 d0 90 2b 18 c4 e4 83 06 f4 66 5a 75 08 80 93 d0 5d 54 b4 8b d7 e0 69 40 ff f7 11 f6 9d bc 66 87 5f 8c de 89 a8 ef 33 9c 1f 26 b2 fe 8d 0a 46 79 c8 c4 2e 46 1b 0d 59 4f 4f 94 df b0 ff 01 93 05 7a cb a4 a4 14 03 01 00 01 01 16 03 01 00 30 45 a9 6e 8c 15 cf 78 7d 80 43 bd 91 90 52 04 ae 33 26 aa 94 bb 2f 1c e4 5d d4 e8 f7 a6 b6 1c 5b 79 cc de 87 ee 0b 41 d5 0c 38 28 dc 5a 43 79 9b Encapsulating EAP message into a RADIUS packet Copied RADIUS State Attribute Sending RADIUS message to authentication server RADIUS message: code=1 (Access-Request) identifier=4 length=1524 Attribute 1 (User-Name) length=10 Value: 'testuser' Attribute 4 (NAS-IP-Address) length=6 Value: 127.0.0.1 Attribute 31 (Calling-Station-Id) length=19 Value: '02-00-00-00-00-01' Attribute 12 (Framed-MTU) length=6 Value: 1400 Attribute 61 (NAS-Port-Type) length=6 Value: 19 Attribute 77 (Connect-Info) length=24 Value: 'CONNECT 11Mbps 802.11b' Attribute 79 (EAP-Message) length=255 Value: 02 04 05 69 0d 00 16 03 01 03 8d 0b 00 03 89 00 03 86 00 03 83 30 82 03 7f 30 82 02 67 a0 03 02 01 02 02 01 02 30 0d 06 09 2a 86 48 86 f7 0d 01 01 04 05 00 30 7c 31 0b 30 09 06 03 55 04 06 13 02 46 52 31 0f 30 0d 06 03 55 04 08 13 06 52 61 64 69 75 73 31 15 30 13 06 03 55 04 0a 13 0c 45 78 61 6d 70 6c 65 20 49 6e 63 2e 31 23 30 21 06 03 55 04 03 13 1a 45 78 61 6d 70 6c 65 20 53 65 72 76 65 72 20 43 65 72 74 69 66 69 63 61 74 65 31 20 30 1e 06 09 2a 86 48 86 f7 0d 01 09 01 16 11 61 64 6d 69 6e 40 65 78 61 6d 70 6c 65 2e 63 6f 6d 30 1e 17 0d 30 39 31 31 31 38 30 31 32 34 35 30 5a 17 0d 31 30 31 31 31 38 30 31 32 34 35 30 5a 30 71 31 0b 30 09 06 03 55 04 06 13 02 46 52 31 0f 30 0d 06 03 55 04 08 13 06 52 61 64 69 75 73 31 15 30 13 06 03 55 04 0a 13 0c Attribute 79 (EAP-Message) length=255 Value: 45 78 61 6d 70 6c 65 20 49 6e 63 2e 31 19 30 17 06 03 55 04 03 14 10 75 73 65 72 40 65 78 61 6d 70 6c 65 2e 63 6f 6d 31 1f 30 1d 06 09 2a 86 48 86 f7 0d 01 09 01 16 10 75 73 65 72 40 65 78 61 6d 70 6c 65 2e 63 6f 6d 30 82 01 22 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 82 01 0f 00 30 82 01 0a 02 82 01 01 00 f1 98 f4 db 9f 00 25 91 c4 ee 95 55 80 62 5e 6c 64 26 ca ce 17 60 f8 12 29 f3 83 88 59 59 8f 78 7b f8 c3 98 7f 7a 00 88 cc 2d 0b 87 93 7e c3 dd 7d 2c f8 0d 4d 03 30 34 8d 3d 4c 03 6a ad 47 42 67 13 d1 86 3a 19 29 a0 51 e7 a5 f8 5e 02 ee bc 61 ee c8 d2 1e 56 83 a5 57 49 83 20 5b 10 6a 6e 81 f8 7f 1b 40 cb c3 3b fa 76 24 1b e7 c9 02 52 8f dd 10 42 ed cf de 87 b7 6e 23 ac ce 03 ed d3 3e 22 ef 48 7f 83 3a 80 db 5c dc f1 3c 51 aa 73 bb 77 40 3c Attribute 79 (EAP-Message) length=255 Value: 5c 70 ae a1 9b 3f 65 74 c4 72 bc 1a e0 5b 4d ff a3 cb 74 bf 60 06 d0 3d 06 73 43 b1 26 7f 6e 7c 11 6e 97 ad d5 d6 16 6e 0e 2f af 1f b5 44 3a db d4 25 0c 96 ce b7 25 a6 3a aa a6 3d 4a c6 f9 bb 05 19 ea 9d a7 27 32 8c e1 ac 2c 88 75 34 d5 9c f4 f0 c4 19 47 0e de 1a 5f 5e 03 35 dd 10 e0 a9 d2 2e db e4 04 68 39 56 73 42 77 c5 02 03 01 00 01 a3 17 30 15 30 13 06 03 55 1d 25 04 0c 30 0a 06 08 2b 06 01 05 05 07 03 02 30 0d 06 09 2a 86 48 86 f7 0d 01 01 04 05 00 03 82 01 01 00 93 a9 14 af 05 f3 ff 1c 83 b6 7b 4a ab f1 c2 0b 35 14 fc 19 8b c7 9f 3b 1a bc 2e be 72 5f c6 71 f3 d2 94 bd 3c b5 1f 95 b4 28 7d 0d ca a1 bf 6d e8 6a 60 2f a4 ca 3c 46 15 e6 f9 7a 48 91 dd 00 ef 1d 71 b0 53 ce 54 73 82 56 e9 32 52 12 c7 bd 68 be 65 e6 de 04 51 41 c7 d5 2a 23 60 70 56 Attribute 79 (EAP-Message) length=255 Value: 22 ae 72 ee e8 f1 27 35 a5 1c 6d cd 87 ca d4 5c d2 c4 a6 2a 0f 38 87 03 66 d6 51 b5 88 ae fa 2d f8 bb 9b db af 35 29 24 7f 75 16 6f 07 bc 07 64 5b 84 13 58 fd dc 2c 35 ff 91 62 59 a5 10 60 b8 c5 40 e3 ff ef 7d b0 98 99 96 b8 d8 9e 73 7b 49 85 92 29 82 5d dd db 15 38 ba fc 76 77 f3 2c 3f cc 12 b9 35 a3 9a 33 f2 da 3f be 9a 4b 48 09 6d 04 d2 36 ad 8e b5 fa 31 d8 22 e7 85 fc 33 d4 a5 34 46 ca 2f 97 f4 f8 97 c0 38 f0 79 eb ee e1 79 f8 9e 9e e4 98 40 5d 26 ca 51 c9 33 af fc ed 3d c4 16 03 01 00 86 10 00 00 82 00 80 de e8 da 5e 2e f6 51 d5 2a c3 72 97 dc 86 9c 35 5c 6f af ca 9c 82 ef d7 e9 01 25 0a 59 24 b5 da 4e 6d d4 c2 65 9e 56 d5 7d 62 37 33 c7 24 91 82 43 d8 a2 d7 44 bf c6 0e 5f 15 2a cd 04 d4 a8 f7 f6 d3 14 42 50 32 b7 51 53 24 e9 91 ab 3f 82 ed 62 Attribute 79 (EAP-Message) length=255 Value: a2 bf 77 86 71 52 c2 f5 f5 3e 08 98 a5 1c 57 69 59 85 b2 92 81 98 a4 59 0c 44 1d 08 67 ed 14 8e a8 5d 3d e7 80 83 75 54 3e 6c 66 8c 41 64 8d 16 03 01 01 06 0f 00 01 02 01 00 cc 51 30 ee 43 c1 04 a8 c5 04 24 9f 32 57 38 d1 e8 d4 d4 a2 36 94 bb 77 eb f3 f8 3f 16 17 02 67 b0 00 b1 47 d7 86 eb 10 18 72 96 22 27 0a e7 04 05 5a f7 7d 41 08 52 b3 2f 04 17 5d dc ee 80 ca ab 9f 29 66 73 f5 7c a3 b1 09 68 d7 bd d6 1c c8 a4 d3 7f 59 31 09 be 77 d9 18 2b 31 5e cf b2 8f 1b 62 be ac e2 4f 92 c2 e3 25 8a ce 4d e3 4b f9 a4 9f 95 b5 81 58 ab ac 44 95 ef 6c 3f eb 90 16 be 74 6f 76 8e d6 ab 25 2d 73 1e b6 66 56 73 3c 2f 49 3d 4f 69 5b 74 48 18 cf d3 d7 fb dc 36 fc 28 71 60 cd 69 05 13 62 6a 46 d5 34 6e 2e 0a cc 86 89 65 2c a7 cd 75 2a 2a 58 1f 11 d0 90 2b 18 c4 e4 83 Attribute 79 (EAP-Message) length=122 Value: 06 f4 66 5a 75 08 80 93 d0 5d 54 b4 8b d7 e0 69 40 ff f7 11 f6 9d bc 66 87 5f 8c de 89 a8 ef 33 9c 1f 26 b2 fe 8d 0a 46 79 c8 c4 2e 46 1b 0d 59 4f 4f 94 df b0 ff 01 93 05 7a cb a4 a4 14 03 01 00 01 01 16 03 01 00 30 45 a9 6e 8c 15 cf 78 7d 80 43 bd 91 90 52 04 ae 33 26 aa 94 bb 2f 1c e4 5d d4 e8 f7 a6 b6 1c 5b 79 cc de 87 ee 0b 41 d5 0c 38 28 dc 5a 43 79 9b Attribute 24 (State) length=18 Value: 02 fd d1 c8 01 f9 dc 44 d6 5e bd 48 c2 50 0b b5 Attribute 80 (Message-Authenticator) length=18 Value: 01 21 97 27 f4 96 aa 76 06 0c de 03 3a ed 35 43 Next RADIUS client retransmit in 3 seconds EAPOL: SUPP_BE entering state RECEIVE Received 44 bytes from RADIUS server Received RADIUS message RADIUS message: code=3 (Access-Reject) identifier=4 length=44 Attribute 79 (EAP-Message) length=6 Value: 04 04 00 04 Attribute 80 (Message-Authenticator) length=18 Value: da 7c 1b e9 7c d4 2e 79 6e 81 28 35 da 9d ff 51 STA 02:00:00:00:00:01: Received RADIUS packet matched with a pending request, round trip time 1.00 sec RADIUS packet matching with station decapsulated EAP packet (code=4 id=4 len=4) from RADIUS server: EAP Failure EAPOL: Received EAP-Packet frame EAPOL: SUPP_BE entering state REQUEST EAPOL: getSuppRsp EAP: EAP entering state RECEIVED EAP: Received EAP-Failure EAP: EAP entering state FAILURE CTRL-EVENT-EAP-FAILURE EAP authentication failed EAPOL: SUPP_PAE entering state HELD EAPOL: SUPP_BE entering state RECEIVE EAPOL: SUPP_BE entering state FAIL EAPOL: SUPP_BE entering state IDLE eapol_sm_cb: success=0 EAPOL: EAP key not available EAP: deinitialize previously used EAP method (13, TLS) at EAP deinit ENGINE: engine deinit MPPE keys OK: 0 mismatch: 1 FAILURE Reading configuration file 'test_tls.conf' Line: 1 - start of a new network block eap methods - hexdump(len=16): 00 00 00 00 0d 00 00 00 00 00 00 00 00 00 00 00 eapol_flags=0 (0x0) key_mgmt: 0x8 identity - hexdump_ascii(len=8): 74 65 73 74 75 73 65 72 testuser ca_cert - hexdump_ascii(len=10): 73 65 72 76 65 72 2e 70 65 6d server.pem client_cert - hexdump_ascii(len=10): 63 6c 69 65 6e 74 2e 70 65 6d client.pem private_key - hexdump_ascii(len=10): 63 6c 69 65 6e 74 2e 6b 65 79 client.key private_key_passwd - hexdump_ascii(len=8): 77 68 61 74 65 76 65 72 whatever Priority group 0 id=0 ssid='' Authentication server 192.168.56.3:1812 RADIUS local address: 192.168.56.1:50761 EAPOL: SUPP_PAE entering state DISCONNECTED EAPOL: KEY_RX entering state NO_KEY_RECEIVE EAPOL: SUPP_BE entering state INITIALIZE EAP: EAP entering state DISABLED EAPOL: External notification - portValid=0 EAPOL: External notification - portEnabled=1 EAPOL: SUPP_PAE entering state CONNECTING EAPOL: SUPP_BE entering state IDLE EAP: EAP entering state INITIALIZE EAP: EAP entering state IDLE Sending fake EAP-Request-Identity EAPOL: Received EAP-Packet frame EAPOL: SUPP_PAE entering state RESTART EAP: EAP entering state INITIALIZE EAP: EAP entering state IDLE EAPOL: SUPP_PAE entering state AUTHENTICATING EAPOL: SUPP_BE entering state REQUEST EAPOL: getSuppRsp EAP: EAP entering state RECEIVED EAP: Received EAP-Request id=0 method=1 vendor=0 vendorMethod=0 EAP: EAP entering state IDENTITY CTRL-EVENT-EAP-STARTED EAP authentication started EAP: EAP-Request Identity data - hexdump_ascii(len=0): EAP: using real identity - hexdump_ascii(len=8): 74 65 73 74 75 73 65 72 testuser EAP: EAP entering state SEND_RESPONSE EAP: EAP entering state IDLE EAPOL: SUPP_BE entering state RESPONSE EAPOL: txSuppRsp WPA: eapol_test_eapol_send(type=0 len=13) TX EAP -> RADIUS - hexdump(len=13): 02 00 00 0d 01 74 65 73 74 75 73 65 72 Encapsulating EAP message into a RADIUS packet Learned identity from EAP-Response-Identity - hexdump(len=8): 74 65 73 74 75 73 65 72 Sending RADIUS message to authentication server RADIUS message: code=1 (Access-Request) identifier=0 length=124 Attribute 1 (User-Name) length=10 Value: 'testuser' Attribute 4 (NAS-IP-Address) length=6 Value: 127.0.0.1 Attribute 31 (Calling-Station-Id) length=19 Value: '02-00-00-00-00-01' Attribute 12 (Framed-MTU) length=6 Value: 1400 Attribute 61 (NAS-Port-Type) length=6 Value: 19 Attribute 77 (Connect-Info) length=24 Value: 'CONNECT 11Mbps 802.11b' Attribute 79 (EAP-Message) length=15 Value: 02 00 00 0d 01 74 65 73 74 75 73 65 72 Attribute 80 (Message-Authenticator) length=18 Value: f8 08 e8 ba f5 14 86 4c 13 12 81 7e e8 89 3d 80 Next RADIUS client retransmit in 3 seconds EAPOL: SUPP_BE entering state RECEIVE Received 64 bytes from RADIUS server Received RADIUS message RADIUS message: code=11 (Access-Challenge) identifier=0 length=64 Attribute 79 (EAP-Message) length=8 Value: 01 01 00 06 0d 20 Attribute 80 (Message-Authenticator) length=18 Value: 4b e7 c1 0c 34 ee 68 7b 6d 4a 14 75 0d a1 f1 50 Attribute 24 (State) length=18 Value: 0c 56 3a f1 0c 57 37 75 37 be f7 5b b8 50 2a a0 STA 02:00:00:00:00:01: Received RADIUS packet matched with a pending request, round trip time 0.00 sec RADIUS packet matching with station decapsulated EAP packet (code=1 id=1 len=6) from RADIUS server: EAP-Request-TLS (13) EAPOL: Received EAP-Packet frame EAPOL: SUPP_BE entering state REQUEST EAPOL: getSuppRsp EAP: EAP entering state RECEIVED EAP: Received EAP-Request id=1 method=13 vendor=0 vendorMethod=0 EAP: EAP entering state GET_METHOD EAP: Initialize selected EAP method: vendor 0 method 13 (TLS) TLS: using phase1 config options TLS: Trusted root certificate(s) loaded OpenSSL: tls_connection_client_cert - SSL_use_certificate_file (DER) failed error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag OpenSSL: pending error: error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error OpenSSL: pending error: error:140C800D:SSL routines:SSL_use_certificate_file:ASN1 lib OpenSSL: SSL_use_certificate_file (PEM) --> OK OpenSSL: tls_connection_private_key - SSL_use_PrivateKey_File (DER) failed error:0D094068:asn1 encoding routines:d2i_ASN1_SET:bad tag OpenSSL: pending error: error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag OpenSSL: pending error: error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error OpenSSL: pending error: error:0D09A00D:asn1 encoding routines:d2i_PrivateKey:ASN1 lib OpenSSL: pending error: error:140CB00D:SSL routines:SSL_use_PrivateKey_file:ASN1 lib OpenSSL: SSL_use_PrivateKey_File (PEM) --> OK SSL: Private key loaded successfully CTRL-EVENT-EAP-METHOD EAP vendor 0 method 13 (TLS) selected EAP: EAP entering state METHOD SSL: Received packet(len=6) - Flags 0x20 EAP-TLS: Start SSL: (where=0x10 ret=0x1) SSL: (where=0x1001 ret=0x1) SSL: SSL_connect:before/connect initialization SSL: (where=0x1001 ret=0x1) SSL: SSL_connect:SSLv3 write client hello A SSL: (where=0x1002 ret=0xffffffff) SSL: SSL_connect:error in SSLv3 read server hello A SSL: SSL_connect - want more data SSL: 93 bytes pending from ssl_out SSL: 93 bytes left to be sent out (of total 93 bytes) EAP: method process -> ignore=FALSE methodState=MAY_CONT decision=FAIL EAP: EAP entering state SEND_RESPONSE EAP: EAP entering state IDLE EAPOL: SUPP_BE entering state RESPONSE EAPOL: txSuppRsp WPA: eapol_test_eapol_send(type=0 len=99) TX EAP -> RADIUS - hexdump(len=99): 02 01 00 63 0d 00 16 03 01 00 58 01 00 00 54 03 01 4b 11 b7 fd d3 31 e4 61 14 f6 ca b5 04 84 4c d7 01 91 0b a0 06 58 cf cb 6f 9c 37 01 07 c8 47 1a 00 00 26 00 39 00 38 00 35 00 16 00 13 00 0a 00 33 00 32 00 2f 00 05 00 04 00 15 00 12 00 09 00 14 00 11 00 08 00 06 00 03 02 01 00 00 04 00 23 00 00 Encapsulating EAP message into a RADIUS packet Copied RADIUS State Attribute Sending RADIUS message to authentication server RADIUS message: code=1 (Access-Request) identifier=1 length=228 Attribute 1 (User-Name) length=10 Value: 'testuser' Attribute 4 (NAS-IP-Address) length=6 Value: 127.0.0.1 Attribute 31 (Calling-Station-Id) length=19 Value: '02-00-00-00-00-01' Attribute 12 (Framed-MTU) length=6 Value: 1400 Attribute 61 (NAS-Port-Type) length=6 Value: 19 Attribute 77 (Connect-Info) length=24 Value: 'CONNECT 11Mbps 802.11b' Attribute 79 (EAP-Message) length=101 Value: 02 01 00 63 0d 00 16 03 01 00 58 01 00 00 54 03 01 4b 11 b7 fd d3 31 e4 61 14 f6 ca b5 04 84 4c d7 01 91 0b a0 06 58 cf cb 6f 9c 37 01 07 c8 47 1a 00 00 26 00 39 00 38 00 35 00 16 00 13 00 0a 00 33 00 32 00 2f 00 05 00 04 00 15 00 12 00 09 00 14 00 11 00 08 00 06 00 03 02 01 00 00 04 00 23 00 00 Attribute 24 (State) length=18 Value: 0c 56 3a f1 0c 57 37 75 37 be f7 5b b8 50 2a a0 Attribute 80 (Message-Authenticator) length=18 Value: ac 91 0e 69 c4 41 c0 c0 c6 36 9e dd a8 1d 28 71 Next RADIUS client retransmit in 3 seconds EAPOL: SUPP_BE entering state RECEIVE Received 1090 bytes from RADIUS server Received RADIUS message RADIUS message: code=11 (Access-Challenge) identifier=1 length=1090 Attribute 79 (EAP-Message) length=255 Value: 01 02 04 00 0d c0 00 00 0b 57 16 03 01 00 30 02 00 00 2c 03 01 4b 08 da b4 b2 87 1b c2 e3 de 1f 10 53 f5 b9 3e 5b 21 d2 32 7c 3c 3c 4f b9 4c 9d 4e ae f6 c4 ca 00 00 39 01 00 04 00 23 00 00 16 03 01 08 5e 0b 00 08 5a 00 08 57 00 03 a6 30 82 03 a2 30 82 02 8a a0 03 02 01 02 02 01 01 30 0d 06 09 2a 86 48 86 f7 0d 01 01 04 05 00 30 81 93 31 0b 30 09 06 03 55 04 06 13 02 46 52 31 0f 30 0d 06 03 55 04 08 13 06 52 61 64 69 75 73 31 12 30 10 06 03 55 04 07 13 09 53 6f 6d 65 77 68 65 72 65 31 15 30 13 06 03 55 04 0a 13 0c 45 78 61 6d 70 6c 65 20 49 6e 63 2e 31 20 30 1e 06 09 2a 86 48 86 f7 0d 01 09 01 16 11 61 64 6d 69 6e 40 65 78 61 6d 70 6c 65 2e 63 6f 6d 31 26 30 24 06 03 55 04 03 13 1d 45 78 61 6d 70 6c 65 20 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 Attribute 79 (EAP-Message) length=255 Value: 68 6f 72 69 74 79 30 1e 17 0d 30 39 31 31 31 38 30 31 31 32 30 30 5a 17 0d 31 30 31 31 31 38 30 31 31 32 30 30 5a 30 7c 31 0b 30 09 06 03 55 04 06 13 02 46 52 31 0f 30 0d 06 03 55 04 08 13 06 52 61 64 69 75 73 31 15 30 13 06 03 55 04 0a 13 0c 45 78 61 6d 70 6c 65 20 49 6e 63 2e 31 23 30 21 06 03 55 04 03 13 1a 45 78 61 6d 70 6c 65 20 53 65 72 76 65 72 20 43 65 72 74 69 66 69 63 61 74 65 31 20 30 1e 06 09 2a 86 48 86 f7 0d 01 09 01 16 11 61 64 6d 69 6e 40 65 78 61 6d 70 6c 65 2e 63 6f 6d 30 82 01 22 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 82 01 0f 00 30 82 01 0a 02 82 01 01 00 95 4c 61 4a 6e db a4 90 37 df 91 56 ba 8d b3 01 57 e0 70 8b a5 da 06 61 7d 92 45 f6 eb 34 87 0f d2 ba b3 6b 77 74 cf 1f 3f bb 17 52 65 7b 7f a3 04 1b 73 8b 6b 27 f2 c2 Attribute 79 (EAP-Message) length=255 Value: 33 d8 69 12 33 fe 86 19 0d fd 08 b3 ad 8e e9 87 84 65 06 29 94 0e 36 59 68 2e 7e bc 36 de 79 94 04 eb dd 83 0a 1c 26 4f 65 ea 80 cf e8 19 87 62 d6 c4 63 d6 d7 70 64 fc ae 27 af f8 4d 2c 8a 90 d2 2a 77 5c 93 62 c4 0c 21 71 21 d2 4b 36 fe e5 b8 44 83 01 ae bc 5f 0a 7c 61 25 37 14 ec df 4e be c1 1f cb 53 6f c8 ee aa 3c 6d 4e f0 e1 4e ab 30 38 d6 7c d0 63 6a 20 94 92 41 fc 44 a1 b6 d8 a5 58 6a 4e d5 8e f8 8c 2e f2 7c fa 19 c5 73 34 c3 7b dd 4e 53 7c 87 01 b4 6e 7b 49 d6 c2 29 92 59 a6 12 d9 06 9b 8a d9 f5 74 4f 3c 76 83 e5 8f 3e bc 07 88 2b 5b 60 71 a8 90 c8 34 69 92 1d d9 67 47 0c cc de 24 d9 7b 02 03 01 00 01 a3 17 30 15 30 13 06 03 55 1d 25 04 0c 30 0a 06 08 2b 06 01 05 05 07 03 01 30 0d 06 09 2a 86 48 86 f7 0d 01 01 04 05 00 03 82 01 01 00 aa 9f 4e Attribute 79 (EAP-Message) length=255 Value: 26 42 3d 73 f1 7a 9c 59 35 d6 7a 59 9e 65 87 b9 57 dc 1f 1d 96 7e da c9 e7 c1 f9 08 ab 44 9d 6d 08 1f 02 d3 68 e6 e6 5e db 91 2d d3 10 ca 35 8e 17 00 cc d1 cd b1 5e ca 32 2f 56 ee 66 38 ec 68 a3 14 35 e4 93 6c cd fd 54 3c 28 37 0c 5e d7 c8 c3 2b ae 67 a1 34 cf 91 6a 4f 41 24 1d cf 6e 9f 01 b5 7e 61 dd ea bc da 29 20 92 e7 aa 0d 77 bd 37 f5 51 b8 63 57 07 34 aa fd 49 b4 c1 d8 dd 3c bc 03 50 bd 76 e6 ef 11 6c 69 fc d0 dc 73 55 58 11 7e 02 84 88 f4 81 6e f5 e6 44 a9 6e 88 79 b8 a8 b3 89 89 f1 13 e3 b8 aa 42 c3 4d 6e 45 74 a0 80 6b 7d de 15 1b 2c 70 85 ab 14 ec 40 12 50 da e0 9a fe 28 02 b8 7b 15 40 fb eb 31 3f 89 0d 63 cf b7 ee 30 7a 68 1f db 30 e9 27 6b 0c 7f 51 67 b1 64 d6 ea 5f f6 bb 8c 13 2f e6 46 93 90 cf b1 7f 83 09 cf 18 0f 6f b8 65 ad 11 bf 9b Attribute 79 (EAP-Message) length=14 Value: 00 04 ab 30 82 04 a7 30 82 03 8f a0 Attribute 80 (Message-Authenticator) length=18 Value: 34 dd 6e c5 15 b0 28 b4 e5 e3 d2 a3 bd 05 f2 1e Attribute 24 (State) length=18 Value: 0c 56 3a f1 0d 54 37 75 37 be f7 5b b8 50 2a a0 STA 02:00:00:00:00:01: Received RADIUS packet matched with a pending request, round trip time 0.05 sec RADIUS packet matching with station decapsulated EAP packet (code=1 id=2 len=1024) from RADIUS server: EAP-Request-TLS (13) EAPOL: Received EAP-Packet frame EAPOL: SUPP_BE entering state REQUEST EAPOL: getSuppRsp EAP: EAP entering state RECEIVED EAP: Received EAP-Request id=2 method=13 vendor=0 vendorMethod=0 EAP: EAP entering state METHOD SSL: Received packet(len=1024) - Flags 0xc0 SSL: TLS Message Length: 2903 SSL: Need 1889 bytes more input data SSL: Building ACK (type=13 id=2 ver=0) EAP: method process -> ignore=FALSE methodState=MAY_CONT decision=FAIL EAP: EAP entering state SEND_RESPONSE EAP: EAP entering state IDLE EAPOL: SUPP_BE entering state RESPONSE EAPOL: txSuppRsp WPA: eapol_test_eapol_send(type=0 len=6) TX EAP -> RADIUS - hexdump(len=6): 02 02 00 06 0d 00 Encapsulating EAP message into a RADIUS packet Copied RADIUS State Attribute Sending RADIUS message to authentication server RADIUS message: code=1 (Access-Request) identifier=2 length=135 Attribute 1 (User-Name) length=10 Value: 'testuser' Attribute 4 (NAS-IP-Address) length=6 Value: 127.0.0.1 Attribute 31 (Calling-Station-Id) length=19 Value: '02-00-00-00-00-01' Attribute 12 (Framed-MTU) length=6 Value: 1400 Attribute 61 (NAS-Port-Type) length=6 Value: 19 Attribute 77 (Connect-Info) length=24 Value: 'CONNECT 11Mbps 802.11b' Attribute 79 (EAP-Message) length=8 Value: 02 02 00 06 0d 00 Attribute 24 (State) length=18 Value: 0c 56 3a f1 0d 54 37 75 37 be f7 5b b8 50 2a a0 Attribute 80 (Message-Authenticator) length=18 Value: 11 6d ae 37 c2 18 db 5f b0 3a 8d 5d 79 5b f4 88 Next RADIUS client retransmit in 3 seconds EAPOL: SUPP_BE entering state RECEIVE Received 1090 bytes from RADIUS server Received RADIUS message RADIUS message: code=11 (Access-Challenge) identifier=2 length=1090 Attribute 79 (EAP-Message) length=255 Value: 01 03 04 00 0d c0 00 00 0b 57 03 02 01 02 02 09 00 bc 77 76 7d e6 94 86 75 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 30 81 93 31 0b 30 09 06 03 55 04 06 13 02 46 52 31 0f 30 0d 06 03 55 04 08 13 06 52 61 64 69 75 73 31 12 30 10 06 03 55 04 07 13 09 53 6f 6d 65 77 68 65 72 65 31 15 30 13 06 03 55 04 0a 13 0c 45 78 61 6d 70 6c 65 20 49 6e 63 2e 31 20 30 1e 06 09 2a 86 48 86 f7 0d 01 09 01 16 11 61 64 6d 69 6e 40 65 78 61 6d 70 6c 65 2e 63 6f 6d 31 26 30 24 06 03 55 04 03 13 1d 45 78 61 6d 70 6c 65 20 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 30 1e 17 0d 30 39 31 31 31 38 30 31 31 32 30 30 5a 17 0d 31 30 31 31 31 38 30 31 31 32 30 30 5a 30 81 93 31 0b 30 09 06 03 55 04 06 13 02 46 52 31 0f 30 0d 06 03 55 04 08 13 06 52 61 64 69 Attribute 79 (EAP-Message) length=255 Value: 75 73 31 12 30 10 06 03 55 04 07 13 09 53 6f 6d 65 77 68 65 72 65 31 15 30 13 06 03 55 04 0a 13 0c 45 78 61 6d 70 6c 65 20 49 6e 63 2e 31 20 30 1e 06 09 2a 86 48 86 f7 0d 01 09 01 16 11 61 64 6d 69 6e 40 65 78 61 6d 70 6c 65 2e 63 6f 6d 31 26 30 24 06 03 55 04 03 13 1d 45 78 61 6d 70 6c 65 20 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 30 82 01 22 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 82 01 0f 00 30 82 01 0a 02 82 01 01 00 d2 6b 05 1f 32 80 f5 3d a9 06 c2 71 97 31 9f c1 9e b0 e1 0c 22 28 ae 67 f2 39 33 0a 98 29 a3 32 e6 07 95 bd 13 70 34 e0 5d ee da 14 d6 85 6d e7 62 96 45 dc db ad 65 b9 6f c2 e9 1c 9f 0f 79 ee 81 be 4c 0c cd 7a 3a d4 d3 c8 05 95 8f 02 f0 25 2c f2 8a 82 72 96 1e 0d 2a 94 c8 46 e0 cb 55 10 ed b4 af 0e 85 Attribute 79 (EAP-Message) length=255 Value: be 9f 24 8a a8 04 41 45 05 7f a0 4e 04 bb a2 07 96 ec 7a 87 7e d2 c4 e1 61 cb f6 02 5d ea f1 fd 48 c8 ee 77 cf 0e 95 a5 e8 fe 49 50 da 5c 1d 01 d5 3e 90 d7 11 38 bc 2c d9 24 a2 40 e4 01 a4 26 f2 bc d3 47 d2 a1 59 02 c0 29 bd b4 fd a7 3c cd f1 da 13 1d 71 8d 09 89 18 2d d7 69 2b a7 b3 9f 54 40 0c b7 e5 3d aa 64 e1 da 42 ff 6d f0 c1 3b 14 f3 d1 6a 72 2e f2 36 f2 40 93 60 7e f6 8d e2 d5 77 10 89 33 ce 2b 3e 68 73 83 e7 c4 f2 12 68 77 c5 92 d7 fe e7 41 9a 2a 3a f5 02 03 01 00 01 a3 81 fb 30 81 f8 30 1d 06 03 55 1d 0e 04 16 04 14 21 9e d2 12 b2 83 61 c8 36 40 d4 b1 50 73 d9 c3 0e 5a 2f b6 30 81 c8 06 03 55 1d 23 04 81 c0 30 81 bd 80 14 21 9e d2 12 b2 83 61 c8 36 40 d4 b1 50 73 d9 c3 0e 5a 2f b6 a1 81 99 a4 81 96 30 81 93 31 0b 30 09 06 03 55 04 06 13 02 Attribute 79 (EAP-Message) length=255 Value: 46 52 31 0f 30 0d 06 03 55 04 08 13 06 52 61 64 69 75 73 31 12 30 10 06 03 55 04 07 13 09 53 6f 6d 65 77 68 65 72 65 31 15 30 13 06 03 55 04 0a 13 0c 45 78 61 6d 70 6c 65 20 49 6e 63 2e 31 20 30 1e 06 09 2a 86 48 86 f7 0d 01 09 01 16 11 61 64 6d 69 6e 40 65 78 61 6d 70 6c 65 2e 63 6f 6d 31 26 30 24 06 03 55 04 03 13 1d 45 78 61 6d 70 6c 65 20 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 82 09 00 bc 77 76 7d e6 94 86 75 30 0c 06 03 55 1d 13 04 05 30 03 01 01 ff 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 82 01 01 00 6d 5f ef de fc 84 0c fc ba 63 95 1a 85 0a ff f9 49 ee d1 ea d3 b3 7f 79 91 2b 72 7c b7 15 ec ca aa 51 8d 60 d7 9d 27 b1 03 4d 31 a6 39 49 4a a9 d0 ce 39 2a c7 46 4f 20 27 44 03 8c c7 55 91 3c 3e 3a e7 26 00 9c b9 50 Attribute 79 (EAP-Message) length=14 Value: 15 38 a6 bd de ef 7a e2 07 db 90 bb Attribute 80 (Message-Authenticator) length=18 Value: 57 3d 87 39 57 68 c6 c1 4d d8 d8 f7 d6 61 92 be Attribute 24 (State) length=18 Value: 0c 56 3a f1 0e 55 37 75 37 be f7 5b b8 50 2a a0 STA 02:00:00:00:00:01: Received RADIUS packet matched with a pending request, round trip time 0.00 sec RADIUS packet matching with station decapsulated EAP packet (code=1 id=3 len=1024) from RADIUS server: EAP-Request-TLS (13) EAPOL: Received EAP-Packet frame EAPOL: SUPP_BE entering state REQUEST EAPOL: getSuppRsp EAP: EAP entering state RECEIVED EAP: Received EAP-Request id=3 method=13 vendor=0 vendorMethod=0 EAP: EAP entering state METHOD SSL: Received packet(len=1024) - Flags 0xc0 SSL: TLS Message Length: 2903 SSL: Need 875 bytes more input data SSL: Building ACK (type=13 id=3 ver=0) EAP: method process -> ignore=FALSE methodState=MAY_CONT decision=FAIL EAP: EAP entering state SEND_RESPONSE EAP: EAP entering state IDLE EAPOL: SUPP_BE entering state RESPONSE EAPOL: txSuppRsp WPA: eapol_test_eapol_send(type=0 len=6) TX EAP -> RADIUS - hexdump(len=6): 02 03 00 06 0d 00 Encapsulating EAP message into a RADIUS packet Copied RADIUS State Attribute Sending RADIUS message to authentication server RADIUS message: code=1 (Access-Request) identifier=3 length=135 Attribute 1 (User-Name) length=10 Value: 'testuser' Attribute 4 (NAS-IP-Address) length=6 Value: 127.0.0.1 Attribute 31 (Calling-Station-Id) length=19 Value: '02-00-00-00-00-01' Attribute 12 (Framed-MTU) length=6 Value: 1400 Attribute 61 (NAS-Port-Type) length=6 Value: 19 Attribute 77 (Connect-Info) length=24 Value: 'CONNECT 11Mbps 802.11b' Attribute 79 (EAP-Message) length=8 Value: 02 03 00 06 0d 00 Attribute 24 (State) length=18 Value: 0c 56 3a f1 0e 55 37 75 37 be f7 5b b8 50 2a a0 Attribute 80 (Message-Authenticator) length=18 Value: cb af 18 2b f2 9f 57 84 2f da ad 3d 14 4c 28 25 Next RADIUS client retransmit in 3 seconds EAPOL: SUPP_BE entering state RECEIVE Received 949 bytes from RADIUS server Received RADIUS message RADIUS message: code=11 (Access-Challenge) identifier=3 length=949 Attribute 79 (EAP-Message) length=255 Value: 01 04 03 75 0d 80 00 00 0b 57 70 17 d5 2f 69 aa 63 de e7 6a a3 7a d0 2a a6 13 ad 1a c6 3f bd 93 19 ae d4 e9 48 c3 f4 bc 09 f9 b7 10 45 bb 9d cf 58 38 6c b7 49 d3 df 8e fb 67 cc 98 38 3a db 69 6a e0 1d cd 5a 90 01 41 dc 2f b9 55 16 ee ad aa a1 88 bd 91 f5 69 59 c6 bc f8 17 25 2b 4c 76 ba f7 d8 59 e7 fd 95 3d 85 e9 e8 81 95 69 69 17 da 24 01 80 0c 6a ca 25 47 9e b1 4d eb f0 72 7c c4 8f 6e 6e 43 b3 ed be 22 51 fa 58 7a aa a6 c1 f4 22 8d 14 93 e9 b9 f6 7e 28 5a 68 38 4c 32 73 f3 cf ac a8 cf 89 56 94 84 98 ca 91 0d 8d dd 16 5c 21 05 bb 0a 32 21 16 03 01 02 0d 0c 00 02 09 00 80 ea 9b 19 de 5c 8f 48 f0 56 f3 d0 b0 c2 b1 40 3f f2 f7 d3 bd 47 67 3f 9e 44 b7 44 cf 3e 12 0a 24 ce 7a 16 b9 7c dd 7a 99 d7 3d 74 db 5a 6d d5 05 70 d9 79 13 6e 59 ab a7 c3 ac 05 cd Attribute 79 (EAP-Message) length=255 Value: a0 fa 71 35 12 c6 44 ab 1d 89 e8 d2 d8 27 b8 db 03 4e f0 79 6e de b9 46 98 7f 17 ac 0b ed ee 7f a7 d4 3a d5 5c c7 96 fc e5 18 87 fe 6e 61 58 8d cb ca 56 73 6a fc 4c e3 f9 79 23 e8 6d 99 0c 52 d0 94 6c 4b 00 01 02 00 80 4e e8 b5 a1 95 10 83 e6 4d 11 1a a2 b9 30 fe f4 e3 5d 62 1b 57 11 f8 72 8f c7 52 fe 04 d6 c5 20 ac c0 33 0f 7a 9b 61 2e a7 01 23 1a 75 75 cb 2d a5 ac 05 ac 37 2e c5 da a3 6b 3e ba 0e b7 a5 2a 88 a4 cc 6e 31 31 e4 16 81 4d dc 34 28 84 c2 0a 41 76 04 ef c0 27 bb 4e 44 ac 62 93 c0 17 a3 d6 a1 10 d4 45 26 49 8e 45 ed 75 3f 45 b0 93 0b fb f5 2c 59 3d f3 63 8a a2 30 ba 51 95 70 7a 71 8d 01 00 91 52 cb 92 74 d5 a1 2a 01 f2 fd 49 0a 3d 86 73 59 d5 46 57 15 b2 04 6c 9a c1 d0 b1 cb e3 8f bf da 06 2d 64 d4 4d 2f 53 b9 c6 ca e8 dd 03 8c 40 c0 d7 Attribute 79 (EAP-Message) length=255 Value: 24 67 2e 49 13 06 80 58 d7 0c 6f 94 5e 06 1b 66 4e 54 be db df ac 00 d6 02 98 a5 dd 48 fa 8f 9a ff cc 9c b2 09 9f cd f8 bc 3e cd e0 e3 d3 5f a5 e2 a2 87 f2 32 9d ae 19 c6 ce 02 d5 f9 32 eb 16 73 c3 ae 26 0e 79 97 55 55 e9 53 02 84 6f ab 22 a2 f8 58 d4 88 af b4 25 e4 63 6b c5 1a cf c0 96 73 64 87 1f 30 99 4e c6 86 a7 e9 06 ea 69 e1 21 d1 bf 5b 34 e9 4e 2b 1a 0b 78 8a bb d6 fc 1c 69 c3 77 94 87 1b 58 e8 87 ff dc 7a fc bd 02 6e dd 94 f1 c3 21 9a 12 e2 2e c2 22 9b 94 7e fd 75 8a 3f b5 07 a8 b5 08 a5 be 25 37 c3 50 2b 72 c4 61 17 f9 10 f5 65 61 39 b9 5f 01 f8 71 51 2e 61 ed 4f cc 53 11 a8 33 4b 1c 7a c7 c3 d9 ee 4f 16 03 01 00 a8 0d 00 00 a0 05 03 04 01 02 40 00 98 00 96 30 81 93 31 0b 30 09 06 03 55 04 06 13 02 46 52 31 0f 30 0d 06 03 55 04 08 13 06 52 Attribute 79 (EAP-Message) length=128 Value: 61 64 69 75 73 31 12 30 10 06 03 55 04 07 13 09 53 6f 6d 65 77 68 65 72 65 31 15 30 13 06 03 55 04 0a 13 0c 45 78 61 6d 70 6c 65 20 49 6e 63 2e 31 20 30 1e 06 09 2a 86 48 86 f7 0d 01 09 01 16 11 61 64 6d 69 6e 40 65 78 61 6d 70 6c 65 2e 63 6f 6d 31 26 30 24 06 03 55 04 03 13 1d 45 78 61 6d 70 6c 65 20 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 0e 00 00 00 Attribute 80 (Message-Authenticator) length=18 Value: 70 65 87 7b 2d 2d 71 3f 3f 93 4b 62 a1 c6 32 b5 Attribute 24 (State) length=18 Value: 0c 56 3a f1 0f 52 37 75 37 be f7 5b b8 50 2a a0 STA 02:00:00:00:00:01: Received RADIUS packet matched with a pending request, round trip time 0.00 sec RADIUS packet matching with station decapsulated EAP packet (code=1 id=4 len=885) from RADIUS server: EAP-Request-TLS (13) EAPOL: Received EAP-Packet frame EAPOL: SUPP_BE entering state REQUEST EAPOL: getSuppRsp EAP: EAP entering state RECEIVED EAP: Received EAP-Request id=4 method=13 vendor=0 vendorMethod=0 EAP: EAP entering state METHOD SSL: Received packet(len=885) - Flags 0x80 SSL: TLS Message Length: 2903 SSL: (where=0x1001 ret=0x1) SSL: SSL_connect:SSLv3 read server hello A TLS: Certificate verification failed, error 19 (self signed certificate in certificate chain) depth 1 for '/C=FR/ST=Radius/L=Somewhere/O=Example Inc./emailAddress=admin@example.com/CN=Example Certificate Authority' SSL: (where=0x4008 ret=0x230) SSL: SSL3 alert: write (local SSL3 detected an error):fatal:unknown CA SSL: (where=0x1002 ret=0xffffffff) SSL: SSL_connect:error in SSLv3 read server certificate B OpenSSL: tls_connection_handshake - SSL_connect error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed SSL: 7 bytes pending from ssl_out SSL: Failed - tls_out available to report error SSL: 7 bytes left to be sent out (of total 7 bytes) EAP-TLS: TLS processing failed EAP: method process -> ignore=FALSE methodState=DONE decision=FAIL EAP: EAP entering state SEND_RESPONSE EAP: EAP entering state IDLE EAPOL: SUPP_BE entering state RESPONSE EAPOL: txSuppRsp WPA: eapol_test_eapol_send(type=0 len=13) TX EAP -> RADIUS - hexdump(len=13): 02 04 00 0d 0d 00 15 03 01 00 02 02 30 Encapsulating EAP message into a RADIUS packet Copied RADIUS State Attribute Sending RADIUS message to authentication server RADIUS message: code=1 (Access-Request) identifier=4 length=142 Attribute 1 (User-Name) length=10 Value: 'testuser' Attribute 4 (NAS-IP-Address) length=6 Value: 127.0.0.1 Attribute 31 (Calling-Station-Id) length=19 Value: '02-00-00-00-00-01' Attribute 12 (Framed-MTU) length=6 Value: 1400 Attribute 61 (NAS-Port-Type) length=6 Value: 19 Attribute 77 (Connect-Info) length=24 Value: 'CONNECT 11Mbps 802.11b' Attribute 79 (EAP-Message) length=15 Value: 02 04 00 0d 0d 00 15 03 01 00 02 02 30 Attribute 24 (State) length=18 Value: 0c 56 3a f1 0f 52 37 75 37 be f7 5b b8 50 2a a0 Attribute 80 (Message-Authenticator) length=18 Value: 60 e3 4d 49 f5 d0 8b be 51 1e b1 ef e9 cd 1e e7 Next RADIUS client retransmit in 3 seconds EAPOL: SUPP_BE entering state RECEIVE Received 44 bytes from RADIUS server Received RADIUS message RADIUS message: code=3 (Access-Reject) identifier=4 length=44 Attribute 79 (EAP-Message) length=6 Value: 04 04 00 04 Attribute 80 (Message-Authenticator) length=18 Value: 02 34 fa a0 2e 16 a8 f8 40 c0 65 c6 59 48 33 72 STA 02:00:00:00:00:01: Received RADIUS packet matched with a pending request, round trip time 1.00 sec RADIUS packet matching with station decapsulated EAP packet (code=4 id=4 len=4) from RADIUS server: EAP Failure EAPOL: Received EAP-Packet frame EAPOL: SUPP_BE entering state REQUEST EAPOL: getSuppRsp EAP: EAP entering state RECEIVED EAP: Received EAP-Failure EAP: EAP entering state FAILURE CTRL-EVENT-EAP-FAILURE EAP authentication failed EAPOL: SUPP_PAE entering state HELD EAPOL: SUPP_BE entering state RECEIVE EAPOL: SUPP_BE entering state FAIL EAPOL: SUPP_BE entering state IDLE eapol_sm_cb: success=0 EAPOL: EAP key not available EAP: deinitialize previously used EAP method (13, TLS) at EAP deinit ENGINE: engine deinit MPPE keys OK: 0 mismatch: 1 FAILURE FreeRADIUS Version 2.1.7, for host i486-pc-linux-gnu, built on Nov 18 2009 at 00:32:07 Copyright (C) 1999-2009 The FreeRADIUS server project and contributors. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. You may redistribute copies of FreeRADIUS under the terms of the GNU General Public License v2. Starting - reading configuration files ... including configuration file /etc/freeradius/radiusd.conf including configuration file /etc/freeradius/proxy.conf including configuration file /etc/freeradius/clients.conf including files in directory /etc/freeradius/modules/ including configuration file /etc/freeradius/modules/radutmp including configuration file /etc/freeradius/modules/acct_unique including configuration file /etc/freeradius/modules/perl including configuration file /etc/freeradius/modules/pam including configuration file /etc/freeradius/modules/detail.example.com including configuration file /etc/freeradius/modules/attr_filter including configuration file /etc/freeradius/modules/mac2ip including configuration file /etc/freeradius/modules/cui including configuration file /etc/freeradius/modules/sqlcounter_expire_on_login including configuration file /etc/freeradius/modules/expr including configuration file /etc/freeradius/modules/smsotp including configuration file /etc/freeradius/modules/linelog including configuration file /etc/freeradius/modules/policy including configuration file /etc/freeradius/modules/checkval including configuration file /etc/freeradius/modules/preprocess including configuration file /etc/freeradius/modules/files including configuration file /etc/freeradius/modules/mac2vlan including configuration file /etc/freeradius/modules/counter including configuration file /etc/freeradius/modules/otp including configuration file /etc/freeradius/modules/chap including configuration file /etc/freeradius/modules/inner-eap including configuration file /etc/freeradius/modules/realm including configuration file /etc/freeradius/modules/sql_log including configuration file /etc/freeradius/modules/passwd including configuration file /etc/freeradius/modules/detail including configuration file /etc/freeradius/modules/detail.log including configuration file /etc/freeradius/modules/echo including configuration file /etc/freeradius/modules/always including configuration file /etc/freeradius/modules/sradutmp including configuration file /etc/freeradius/modules/pap including configuration file /etc/freeradius/modules/attr_rewrite including configuration file /etc/freeradius/modules/mschap including configuration file /etc/freeradius/modules/logintime including configuration file /etc/freeradius/modules/expiration including configuration file /etc/freeradius/modules/smbpasswd including configuration file /etc/freeradius/modules/krb5 including configuration file /etc/freeradius/modules/exec including configuration file /etc/freeradius/modules/digest including configuration file /etc/freeradius/modules/unix including configuration file /etc/freeradius/modules/etc_group including configuration file /etc/freeradius/modules/ippool including configuration file /etc/freeradius/modules/wimax including configuration file /etc/freeradius/modules/ldap including configuration file /etc/freeradius/eap.conf including configuration file /etc/freeradius/policy.conf including files in directory /etc/freeradius/sites-enabled/ including configuration file /etc/freeradius/sites-enabled/control-socket including configuration file /etc/freeradius/sites-enabled/inner-tunnel including configuration file /etc/freeradius/sites-enabled/default group = freerad user = freerad including dictionary file /etc/freeradius/dictionary main { prefix = "/usr" localstatedir = "/var" logdir = "/var/log/freeradius" libdir = "/usr/lib/freeradius" radacctdir = "/var/log/freeradius/radacct" hostname_lookups = no max_request_time = 30 cleanup_delay = 5 max_requests = 1024 allow_core_dumps = no pidfile = "/var/run/freeradius/freeradius.pid" checkrad = "/usr/sbin/checkrad" debug_level = 0 proxy_requests = yes log { stripped_names = no auth = no auth_badpass = no auth_goodpass = no } security { max_attributes = 200 reject_delay = 1 status_server = yes } } radiusd: #### Loading Realms and Home Servers #### proxy server { retry_delay = 5 retry_count = 3 default_fallback = no dead_time = 120 wake_all_if_all_dead = no } home_server localhost { ipaddr = 127.0.0.1 port = 1812 type = "auth" secret = "testing123" response_window = 20 max_outstanding = 65536 require_message_authenticator = no zombie_period = 40 status_check = "status-server" ping_interval = 30 check_interval = 30 num_answers_to_alive = 3 num_pings_to_alive = 3 revive_interval = 120 status_check_timeout = 4 irt = 2 mrt = 16 mrc = 5 mrd = 30 } home_server_pool my_auth_failover { type = fail-over home_server = localhost } realm example.com { auth_pool = my_auth_failover } realm LOCAL { } radiusd: #### Loading Clients #### client localhost { ipaddr = 127.0.0.1 require_message_authenticator = no secret = "testing123" nastype = "other" } client 192.168.56.0/24 { require_message_authenticator = no secret = "testing123" shortname = "test-network" } radiusd: #### Instantiating modules #### instantiate { Module: Linked to module rlm_exec Module: Instantiating exec exec { wait = no input_pairs = "request" shell_escape = yes } Module: Linked to module rlm_expr Module: Instantiating expr Module: Linked to module rlm_expiration Module: Instantiating expiration expiration { reply-message = "Password Has Expired " } Module: Linked to module rlm_logintime Module: Instantiating logintime logintime { reply-message = "You are calling outside your allowed timespan " minimum-timeout = 60 } } radiusd: #### Loading Virtual Servers #### server inner-tunnel { modules { Module: Checking authenticate {...} for more modules to load Module: Linked to module rlm_pap Module: Instantiating pap pap { encryption_scheme = "auto" auto_header = no } Module: Linked to module rlm_chap Module: Instantiating chap Module: Linked to module rlm_mschap Module: Instantiating mschap mschap { use_mppe = yes require_encryption = no require_strong = no with_ntdomain_hack = no } Module: Linked to module rlm_unix Module: Instantiating unix unix { radwtmp = "/var/log/freeradius/radwtmp" } Module: Linked to module rlm_eap Module: Instantiating eap eap { default_eap_type = "tls" timer_expire = 60 ignore_unknown_eap_types = no cisco_accounting_username_bug = no max_sessions = 2048 } Module: Linked to sub-module rlm_eap_md5 Module: Instantiating eap-md5 Module: Linked to sub-module rlm_eap_leap Module: Instantiating eap-leap Module: Linked to sub-module rlm_eap_gtc Module: Instantiating eap-gtc gtc { challenge = "Password: " auth_type = "PAP" } Module: Linked to sub-module rlm_eap_tls Module: Instantiating eap-tls tls { rsa_key_exchange = no dh_key_exchange = yes rsa_key_length = 512 dh_key_length = 512 verify_depth = 0 pem_file_type = yes private_key_file = "/etc/freeradius/certs/server.key" certificate_file = "/etc/freeradius/certs/server.pem" CA_file = "/etc/freeradius/certs/ca.pem" private_key_password = "whatever" dh_file = "/etc/freeradius/certs/dh" random_file = "/etc/freeradius/certs/random" fragment_size = 1024 include_length = yes check_crl = no cipher_list = "DEFAULT" cache { enable = yes lifetime = 24 max_entries = 255 } } Module: Linked to sub-module rlm_eap_ttls Module: Instantiating eap-ttls ttls { default_eap_type = "md5" copy_request_to_tunnel = no use_tunneled_reply = no virtual_server = "inner-tunnel" include_length = yes } Module: Linked to sub-module rlm_eap_peap Module: Instantiating eap-peap peap { default_eap_type = "mschapv2" copy_request_to_tunnel = no use_tunneled_reply = no proxy_tunneled_request_as_eap = yes virtual_server = "inner-tunnel" } Module: Linked to sub-module rlm_eap_mschapv2 Module: Instantiating eap-mschapv2 mschapv2 { with_ntdomain_hack = no } Module: Checking authorize {...} for more modules to load Module: Linked to module rlm_realm Module: Instantiating suffix realm suffix { format = "suffix" delimiter = "@" ignore_default = no ignore_null = no } Module: Linked to module rlm_files Module: Instantiating files files { usersfile = "/etc/freeradius/users" acctusersfile = "/etc/freeradius/acct_users" preproxy_usersfile = "/etc/freeradius/preproxy_users" compat = "no" } Module: Checking session {...} for more modules to load Module: Linked to module rlm_radutmp Module: Instantiating radutmp radutmp { filename = "/var/log/freeradius/radutmp" username = "%{User-Name}" case_sensitive = yes check_with_nas = yes perm = 384 callerid = yes } Module: Checking post-proxy {...} for more modules to load Module: Checking post-auth {...} for more modules to load Module: Linked to module rlm_attr_filter Module: Instantiating attr_filter.access_reject attr_filter attr_filter.access_reject { attrsfile = "/etc/freeradius/attrs.access_reject" key = "%{User-Name}" } } # modules } # server server { modules { Module: Checking authenticate {...} for more modules to load Module: Checking authorize {...} for more modules to load Module: Linked to module rlm_preprocess Module: Instantiating preprocess preprocess { huntgroups = "/etc/freeradius/huntgroups" hints = "/etc/freeradius/hints" with_ascend_hack = no ascend_channels_per_line = 23 with_ntdomain_hack = no with_specialix_jetstream_hack = no with_cisco_vsa_hack = no with_alvarion_vsa_hack = no } Module: Checking preacct {...} for more modules to load Module: Linked to module rlm_acct_unique Module: Instantiating acct_unique acct_unique { key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port" } Module: Checking accounting {...} for more modules to load Module: Linked to module rlm_detail Module: Instantiating detail detail { detailfile = "/var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d" header = "%t" detailperm = 384 dirperm = 493 locking = no log_packet_header = no } Module: Instantiating attr_filter.accounting_response attr_filter attr_filter.accounting_response { attrsfile = "/etc/freeradius/attrs.accounting_response" key = "%{User-Name}" } Module: Checking session {...} for more modules to load Module: Checking post-proxy {...} for more modules to load Module: Checking post-auth {...} for more modules to load } # modules } # server radiusd: #### Opening IP addresses and Ports #### listen { type = "auth" ipaddr = * port = 0 } listen { type = "acct" ipaddr = * port = 0 } listen { type = "control" listen { socket = "/var/run/freeradius/freeradius.sock" } } Listening on authentication address * port 1812 Listening on accounting address * port 1813 Listening on command file /var/run/freeradius/freeradius.sock Listening on proxy address * port 1814 Ready to process requests. rad_recv: Access-Request packet from host 192.168.56.1 port 58734, id=0, length=124 User-Name = "testuser" NAS-IP-Address = 127.0.0.1 Calling-Station-Id = "02-00-00-00-00-01" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 11Mbps 802.11b" EAP-Message = 0x0200000d017465737475736572 Message-Authenticator = 0x5d643f0b7a1aef5f056e19d9aa5fba3e +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] No '@' in User-Name = "testuser", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] returns noop [eap] EAP packet type response id 0 length 13 [eap] No EAP Start, assuming it's an on-going EAP conversation ++[eap] returns updated ++[unix] returns notfound [files] users: Matched entry testuser at line 205 ++[files] returns ok ++[expiration] returns noop ++[logintime] returns noop [pap] Found existing Auth-Type, not changing it. ++[pap] returns noop Found Auth-Type = EAP +- entering group authenticate {...} [eap] EAP Identity [eap] processing type tls [tls] Flushing SSL sessions (of #0) [tls] Requiring client certificate [tls] Initiate [tls] Start returned 1 ++[eap] returns handled Sending Access-Challenge of id 0 to 192.168.56.1 port 58734 EAP-Message = 0x010100060d20 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x02fdd1c802fcdc44d65ebd48c2500bb5 Finished request 0. Going to the next request Waking up in 4.9 seconds. rad_recv: Access-Request packet from host 192.168.56.1 port 58734, id=1, length=228 User-Name = "testuser" NAS-IP-Address = 127.0.0.1 Calling-Station-Id = "02-00-00-00-00-01" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 11Mbps 802.11b" EAP-Message = 0x020100630d0016030100580100005403014b11b6a4deb054e086909934ea436ef78e239ecef199c3f2cc4e70a87735505000002600390038003500160013000a00330032002f0005000400150012000900140011000800060003020100000400230000 State = 0x02fdd1c802fcdc44d65ebd48c2500bb5 Message-Authenticator = 0xdef0f4f3c7a8dfff9ad9ab58fd004729 +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] No '@' in User-Name = "testuser", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] returns noop [eap] EAP packet type response id 1 length 99 [eap] No EAP Start, assuming it's an on-going EAP conversation ++[eap] returns updated ++[unix] returns notfound [files] users: Matched entry testuser at line 205 ++[files] returns ok ++[expiration] returns noop ++[logintime] returns noop [pap] Found existing Auth-Type, not changing it. ++[pap] returns noop Found Auth-Type = EAP +- entering group authenticate {...} [eap] Request found, released from the list [eap] EAP/tls [eap] processing type tls [tls] Authenticate [tls] processing EAP-TLS [tls] eaptls_verify returned 7 [tls] Done initial handshake [tls] (other): before/accept initialization [tls] TLS_accept: before/accept initialization [tls] <<< TLS 1.0 Handshake [length 0058], ClientHello [tls] TLS_accept: SSLv3 read client hello A [tls] >>> TLS 1.0 Handshake [length 0030], ServerHello [tls] TLS_accept: SSLv3 write server hello A [tls] >>> TLS 1.0 Handshake [length 085e], Certificate [tls] TLS_accept: SSLv3 write certificate A [tls] >>> TLS 1.0 Handshake [length 020d], ServerKeyExchange [tls] TLS_accept: SSLv3 write key exchange A [tls] >>> TLS 1.0 Handshake [length 00a8], CertificateRequest [tls] TLS_accept: SSLv3 write certificate request A [tls] TLS_accept: SSLv3 flush data [tls] TLS_accept: Need to read more data: SSLv3 read client certificate A In SSL Handshake Phase In SSL Accept mode [tls] eaptls_process returned 13 ++[eap] returns handled Sending Access-Challenge of id 1 to 192.168.56.1 port 58734 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x0004ab308204a73082038fa0 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x02fdd1c803ffdc44d65ebd48c2500bb5 Finished request 1. Going to the next request Waking up in 4.9 seconds. rad_recv: Access-Request packet from host 192.168.56.1 port 58734, id=2, length=135 User-Name = "testuser" NAS-IP-Address = 127.0.0.1 Calling-Station-Id = "02-00-00-00-00-01" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 11Mbps 802.11b" EAP-Message = 0x020200060d00 State = 0x02fdd1c803ffdc44d65ebd48c2500bb5 Message-Authenticator = 0x305b4656f3cc2422e3a20f48139d2a7d +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] No '@' in User-Name = "testuser", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] returns noop [eap] EAP packet type response id 2 length 6 [eap] No EAP Start, assuming it's an on-going EAP conversation ++[eap] returns updated ++[unix] returns notfound [files] users: Matched entry testuser at line 205 ++[files] returns ok ++[expiration] returns noop ++[logintime] returns noop [pap] Found existing Auth-Type, not changing it. ++[pap] returns noop Found Auth-Type = EAP +- entering group authenticate {...} [eap] Request found, released from the list [eap] EAP/tls [eap] processing type tls [tls] Authenticate [tls] processing EAP-TLS [tls] Received TLS ACK [tls] ACK handshake fragment handler [tls] eaptls_verify returned 1 [tls] eaptls_process returned 13 ++[eap] returns handled Sending Access-Challenge of id 2 to 192.168.56.1 port 58734 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x1538a6bddeef7ae207db90bb Message-Authenticator = 0x00000000000000000000000000000000 State = 0x02fdd1c800fedc44d65ebd48c2500bb5 Finished request 2. Going to the next request Waking up in 4.9 seconds. rad_recv: Access-Request packet from host 192.168.56.1 port 58734, id=3, length=135 User-Name = "testuser" NAS-IP-Address = 127.0.0.1 Calling-Station-Id = "02-00-00-00-00-01" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 11Mbps 802.11b" EAP-Message = 0x020300060d00 State = 0x02fdd1c800fedc44d65ebd48c2500bb5 Message-Authenticator = 0x75da56b9903a34d12f5bbb40e692cb29 +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] No '@' in User-Name = "testuser", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] returns noop [eap] EAP packet type response id 3 length 6 [eap] No EAP Start, assuming it's an on-going EAP conversation ++[eap] returns updated ++[unix] returns notfound [files] users: Matched entry testuser at line 205 ++[files] returns ok ++[expiration] returns noop ++[logintime] returns noop [pap] Found existing Auth-Type, not changing it. ++[pap] returns noop Found Auth-Type = EAP +- entering group authenticate {...} [eap] Request found, released from the list [eap] EAP/tls [eap] processing type tls [tls] Authenticate [tls] processing EAP-TLS [tls] Received TLS ACK [tls] ACK handshake fragment handler [tls] eaptls_verify returned 1 [tls] eaptls_process returned 13 ++[eap] returns handled Sending Access-Challenge of id 3 to 192.168.56.1 port 58734 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x61646975733112301006035504071309536f6d65776865726531153013060355040a130c4578616d706c6520496e632e3120301e06092a864886f70d010901161161646d696e406578616d706c652e636f6d312630240603550403131d4578616d706c6520436572746966696361746520417574686f726974790e000000 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x02fdd1c801f9dc44d65ebd48c2500bb5 Finished request 3. Going to the next request Waking up in 4.9 seconds. rad_recv: Access-Request packet from host 192.168.56.1 port 58734, id=4, length=1524 User-Name = "testuser" NAS-IP-Address = 127.0.0.1 Calling-Station-Id = "02-00-00-00-00-01" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 11Mbps 802.11b" EAP-Message = 0x020405690d00160301038d0b0003890003860003833082037f30820267a003020102020102300d06092a864886f70d0101040500307c310b3009060355040613024652310f300d0603550408130652616469757331153013060355040a130c4578616d706c6520496e632e312330210603550403131a4578616d706c65205365727665722043657274696669636174653120301e06092a864886f70d010901161161646d696e406578616d706c652e636f6d301e170d3039313131383031323435305a170d3130313131383031323435305a3071310b3009060355040613024652310f300d0603550408130652616469757331153013060355040a130c EAP-Message = 0x4578616d706c6520496e632e311930170603550403141075736572406578616d706c652e636f6d311f301d06092a864886f70d010901161075736572406578616d706c652e636f6d30820122300d06092a864886f70d01010105000382010f003082010a0282010100f198f4db9f002591c4ee955580625e6c6426cace1760f81229f3838859598f787bf8c3987f7a0088cc2d0b87937ec3dd7d2cf80d4d0330348d3d4c036aad47426713d1863a1929a051e7a5f85e02eebc61eec8d21e5683a5574983205b106a6e81f87f1b40cbc33bfa76241be7c902528fdd1042edcfde87b76e23acce03edd33e22ef487f833a80db5cdcf13c51aa73bb77403c EAP-Message = 0x5c70aea19b3f6574c472bc1ae05b4dffa3cb74bf6006d03d067343b1267f6e7c116e97add5d6166e0e2faf1fb5443adbd4250c96ceb725a63aaaa63d4ac6f9bb0519ea9da727328ce1ac2c887534d59cf4f0c419470ede1a5f5e0335dd10e0a9d22edbe404683956734277c50203010001a317301530130603551d25040c300a06082b06010505070302300d06092a864886f70d0101040500038201010093a914af05f3ff1c83b67b4aabf1c20b3514fc198bc79f3b1abc2ebe725fc671f3d294bd3cb51f95b4287d0dcaa1bf6de86a602fa4ca3c4615e6f97a4891dd00ef1d71b053ce54738256e9325212c7bd68be65e6de045141c7d52a23607056 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x06f4665a75088093d05d54b48bd7e06940fff711f69dbc66875f8cde89a8ef339c1f26b2fe8d0a4679c8c42e461b0d594f4f94dfb0ff0193057acba4a4140301000101160301003045a96e8c15cf787d8043bd91905204ae3326aa94bb2f1ce45dd4e8f7a6b61c5b79ccde87ee0b41d50c3828dc5a43799b State = 0x02fdd1c801f9dc44d65ebd48c2500bb5 Message-Authenticator = 0x01219727f496aa76060cde033aed3543 +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] No '@' in User-Name = "testuser", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] returns noop [eap] EAP packet type response id 4 length 253 [eap] No EAP Start, assuming it's an on-going EAP conversation ++[eap] returns updated ++[unix] returns notfound [files] users: Matched entry testuser at line 205 ++[files] returns ok ++[expiration] returns noop ++[logintime] returns noop [pap] Found existing Auth-Type, not changing it. ++[pap] returns noop Found Auth-Type = EAP +- entering group authenticate {...} [eap] Request found, released from the list [eap] EAP/tls [eap] processing type tls [tls] Authenticate [tls] processing EAP-TLS [tls] eaptls_verify returned 7 [tls] Done initial handshake [tls] <<< TLS 1.0 Handshake [length 038d], Certificate --> verify error:num=20:unable to get local issuer certificate [tls] >>> TLS 1.0 Alert [length 0002], fatal unknown_ca TLS Alert write:fatal:unknown CA TLS_accept:error in SSLv3 read client certificate B rlm_eap: SSL error error:140890B2:SSL routines:SSL3_GET_CLIENT_CERTIFICATE:no certificate returned SSL: SSL_read failed in a system call (-1), TLS session fails. TLS receive handshake failed during operation [tls] eaptls_process returned 4 [eap] Handler failed in EAP/tls [eap] Failed in EAP select ++[eap] returns invalid Failed to authenticate the user. Using Post-Auth-Type Reject +- entering group REJECT {...} [attr_filter.access_reject] expand: %{User-Name} -> testuser attr_filter: Matched entry DEFAULT at line 11 ++[attr_filter.access_reject] returns updated Delaying reject of request 4 for 1 seconds Going to the next request Waking up in 0.9 seconds. Sending delayed reject for request 4 Sending Access-Reject of id 4 to 192.168.56.1 port 58734 EAP-Message = 0x04040004 Message-Authenticator = 0x00000000000000000000000000000000 Waking up in 3.8 seconds. Cleaning up request 0 ID 0 with timestamp +3 Cleaning up request 1 ID 1 with timestamp +3 Cleaning up request 2 ID 2 with timestamp +3 Cleaning up request 3 ID 3 with timestamp +3 Waking up in 1.0 seconds. Cleaning up request 4 ID 4 with timestamp +3 Ready to process requests.