SSL error using MS-CHAPv2 - new in 1.1.2
Hi, I logged in via PEAP after a brand-new upgrade to 1.1.2 today, and saw a new error message (everything worked fine though): Error: TLS_accept:error in SSLv3 read client certificate A Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Info: rlm_eap_mschapv2: Issuing Challenge Auth: Login OK: [stefan.winter@restena.lu] (from client localhost port 0) these new errors in rlm_eap are somewhat intriguing. Anyone a clue? Greetings, Stefan Winter -- Stefan WINTER Stiftung RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche Ingenieur Forschung & Entwicklung 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg E-Mail: stefan.winter@restena.lu Tel.: +352 424409-1 http://www.restena.lu Fax: +352 422473
Despite this Error the Authentification works well ? because I've got the same error but LDAP authentification fail and I don't know if it's due to that client certificate error ? Thomas Hahusseau 2006/6/6, Stefan Winter <stefan.winter@restena.lu>:
Hi,
I logged in via PEAP after a brand-new upgrade to 1.1.2 today, and saw a new error message (everything worked fine though):
Error: TLS_accept:error in SSLv3 read client certificate A Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Info: rlm_eap_mschapv2: Issuing Challenge Auth: Login OK: [stefan.winter@restena.lu] (from client localhost port 0)
these new errors in rlm_eap are somewhat intriguing. Anyone a clue?
Greetings,
Stefan Winter
-- Stefan WINTER
Stiftung RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche Ingenieur Forschung & Entwicklung
6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg E-Mail: stefan.winter@restena.lu Tel.: +352 424409-1 http://www.restena.lu Fax: +352 422473
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi,
Error: TLS_accept:error in SSLv3 read client certificate A Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Info: rlm_eap_mschapv2: Issuing Challenge Auth: Login OK: [stefan.winter@restena.lu] (from client localhost port 0)
Despite this Error the Authentification works well ? because I've got the same error but LDAP authentification fail and I don't know if it's due to that client certificate error ?
It works well. The client certificate error is no error at all, and it's not the reason why I'm asking here. I ask because of the two lines below, which is _not_ business as usual. Oh, I should have mentioned initially: it's OpenSSL 0.9.8a. Unchanged in FR 1.1.1, but 1.1.1 didn't spit out these errors. Greetings, Stefan -- Stefan WINTER Stiftung RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche Ingenieur Forschung & Entwicklung 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg E-Mail: stefan.winter@restena.lu Tel.: +352 424409-1 http://www.restena.lu Fax: +352 422473
Stefan Winter <stefan.winter@restena.lu> wrote:
I logged in via PEAP after a brand-new upgrade to 1.1.2 today, and saw a new error message (everything worked fine though):
Error: TLS_accept:error in SSLv3 read client certificate A Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Info: rlm_eap_mschapv2: Issuing Challenge Auth: Login OK: [stefan.winter@restena.lu] (from client localhost port 0)
these new errors in rlm_eap are somewhat intriguing. Anyone a clue?
doc/ChangeLog Prior to 1.1.2, SSL errors went to stderr, which in daemon mode was /dev/null. Alan DeKok.
participants (3)
-
Alan DeKok -
Stefan Winter -
thomas hahusseau