Hi Alan et al, Just a quick question – when eap_peap encounters a TLS error, is that available in the Module-Error-Message? i.e. let’s take this example: (2) eap_peap: ERROR: TLS Alert write:fatal:handshake failure tls: TLS_accept: Error in error (2) eap_peap: ERROR: Failed in __FUNCTION__ (SSL_read): error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher (2) eap_peap: ERROR: System call (I/O) error (-1) Would the three ‘ERROR:’ messages be in &request:Module-Failure-Message (or &session-state: Module-Failure-Message)? I can’t particularly With kind regards Stefan Paetow Federated Roaming Technical Specialist eduroam(UK), Jisc email/teams: stefan.paetow@jisc.ac.uk gpg: 0x3FCE5142 On Mondays and Wednesdays, I am not available between 12:00 and 15:00. For eduroam support, please contact us via help@jisc.ac.uk and mark it for the eduroam team’s attention. jisc.ac.uk Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc’s registered office is: One Castlepark, Tower Hill, Bristol, BS2 0JA. T 0203 697 5800.
*argh* And I cut my message off: Would the three ‘ERROR:’ messages be in &request:Module-Failure-Message (or &session-state: Module-Failure-Message)? I can’t particularly reproduce the specific errors I'm trying to reproduce, so I thought I'd ask! :-/ Thanks again as always! :-) Stefan Paetow Federated Roaming Technical Specialist eduroam(UK), Jisc email/teams: stefan.paetow@jisc.ac.uk gpg: 0x3FCE5142 On Mondays and Wednesdays, I am not available between 12:00 and 15:00. For eduroam support, please contact us via help@jisc.ac.uk and mark it for the eduroam team’s attention. jisc.ac.uk Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc’s registered office is: One Castlepark, Tower Hill, Bristol, BS2 0JA. T 0203 697 5800. On 23/11/2022, 01:07, "Freeradius-Users on behalf of Stefan Paetow via Freeradius-Users" <freeradius-users-bounces+stefan.paetow=jisc.ac.uk@lists.freeradius.org on behalf of freeradius-users@lists.freeradius.org> wrote: Hi Alan et al, Just a quick question – when eap_peap encounters a TLS error, is that available in the Module-Error-Message? i.e. let’s take this example: (2) eap_peap: ERROR: TLS Alert write:fatal:handshake failure tls: TLS_accept: Error in error (2) eap_peap: ERROR: Failed in __FUNCTION__ (SSL_read): error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher (2) eap_peap: ERROR: System call (I/O) error (-1) Would the three ‘ERROR:’ messages be in &request:Module-Failure-Message (or &session-state: Module-Failure-Message)? I can’t particularly With kind regards Stefan Paetow Federated Roaming Technical Specialist eduroam(UK), Jisc email/teams: stefan.paetow@jisc.ac.uk gpg: 0x3FCE5142 On Mondays and Wednesdays, I am not available between 12:00 and 15:00. For eduroam support, please contact us via help@jisc.ac.uk and mark it for the eduroam team’s attention. jisc.ac.uk Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc’s registered office is: One Castlepark, Tower Hill, Bristol, BS2 0JA. T 0203 697 5800. - List info/subscribe/unsubscribe? See https://eur01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.freeradius.org%2Flist%2Fusers.html&data=05%7C01%7Cstefan.paetow%40jisc.ac.uk%7C402b6b36019348e7937808daccef22ee%7C48f9394d8a144d2782a6f35f12361205%7C0%7C0%7C638047624702614218%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=PYoAECCBCHq4HRcTDropCvpAL9M9VVWPpW5uZM977Ww%3D&reserved=0
On Nov 22, 2022, at 8:10 PM, Stefan Paetow via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
*argh* And I cut my message off:
Would the three ‘ERROR:’ messages be in &request:Module-Failure-Message (or &session-state: Module-Failure-Message)? I can’t particularly reproduce the specific errors I'm trying to reproduce, so I thought I'd ask! :-/
Unfortunately, most of the TLS related errors aren't available anywhere except the logs. Fixing that involves defining new attributes specifically for TLS errors, and then updating the code to add them. Alan DeKok.
participants (2)
-
Alan DeKok -
Stefan Paetow