Maybe using a different EAP supplicant would help to check the Freeradius server config. Le lun. 7 mars 2022 à 15:04, Iñigo Vicente <ivicente@bexencardio.com> a écrit :
What end user system are you using?
I am using WGM110 Wizard Gecko Wi-Fi bgtool
El lun, 7 mar 2022 a las 14:39, Alan DeKok (<aland@deployingradius.com>) escribió:
On Mar 7, 2022, at 8:35 AM, Iñigo Vicente <ivicente@bexencardio.com> wrote:
I have configured etc/raddb/mods-available/eap eap { default_eap_type = tls } peap { default_eap_type = tls }
There's rather a lot more than that, but whatever. And no, we don't need to see the configuration files. All of the documentation makes this VERY clear.
I have this warning: 6) eap_tls: WARNING: (TLS) EAP Total received record fragments (91 bytes), does not equal expected expected data length (0 bytes)
If that's the message you get, then you should post that message. Don't post a vague question asking about TLS.
(12) eap_tls: ERROR: (TLS) Failed reading from OpenSSL: error:1417C087:SSL routines:tls_process_client_certificate:cert length mismatch
The end user system (EAP supplicant) is broken. It's not doing EAP-TLS properly.
What end user system are you using?
Perhaps also try disabling TLS 1.3 on the server side. See the tls {...} configuration for details.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html