On Feb 3, 2018, at 4:29 PM, Michael Duckett <mduckett@gmail.com> wrote:
Can someone help me understand what I'm doing wrong? I would be so appreciative!
The client is broken.
Tried freeradius on both ubuntu and mac o/s. Getting rlm_eap: SSL error error:0D07209B:asn1 encoding routines:ASN1_get_object:too long error.
Verified certificates with openssl.
Ubuntu freeradius: FreeRADIUS Version 2.2.8, for host x86_64-pc-linux-gnu, built on Jul 26 2017 at 15:27:21
openssl version OpenSSL 1.0.2g 1 Mar 2016
And... what system is trying to authenticated? That's useful to know, too.
Here's info from the log:
[tls] --> verify return:1 [tls] TLS_accept: unknown state [tls] <<< Unknown TLS version [length 0005] [tls] <<< Unknown TLS version [length 0106] [tls] TLS_accept: unknown state [tls] <<< Unknown TLS version [length 0005] [tls] <<< Unknown TLS version [length 0088] [tls] >>> Unknown TLS version [length 0005] [tls] >>> Unknown TLS version [length 0002] *TLS Alert write:fatal:decrypt error* * TLS_accept: failed in error* *rlm_eap: SSL error error:0D07209B:asn1 encoding routines:ASN1_get_object:too long*
The other end (phone, PC, whatever) is broken. No amount of poking FreeRADIUS will fix it. Alan DeKok.