rlm_eap: SSL error error:0D07209B:asn1 encoding routines:ASN1_get_object:too long
Can someone help me understand what I'm doing wrong? I would be so appreciative! Tried freeradius on both ubuntu and mac o/s. Getting rlm_eap: SSL error error:0D07209B:asn1 encoding routines:ASN1_get_object:too long error. Verified certificates with openssl. Ubuntu freeradius: FreeRADIUS Version 2.2.8, for host x86_64-pc-linux-gnu, built on Jul 26 2017 at 15:27:21 openssl version OpenSSL 1.0.2g 1 Mar 2016 Here's info from the log: [tls] --> verify return:1 [tls] TLS_accept: unknown state [tls] <<< Unknown TLS version [length 0005] [tls] <<< Unknown TLS version [length 0106] [tls] TLS_accept: unknown state [tls] <<< Unknown TLS version [length 0005] [tls] <<< Unknown TLS version [length 0088] [tls] >>> Unknown TLS version [length 0005] [tls] >>> Unknown TLS version [length 0002] *TLS Alert write:fatal:decrypt error* * TLS_accept: failed in error* *rlm_eap: SSL error error:0D07209B:asn1 encoding routines:ASN1_get_object:too long* *SSL: SSL_read failed inside of TLS (-1), TLS session fails.* *TLS receive handshake failed during operation* [tls] eaptls_process returned 4 [eap] Handler failed in EAP/tls [eap] Failed in EAP select ++[eap] = invalid +} # group authenticate = invalid Failed to authenticate the user. Using Post-Auth-Type Reject Thanks in advance for any help you can provide. Mike
On Feb 3, 2018, at 4:29 PM, Michael Duckett <mduckett@gmail.com> wrote:
Can someone help me understand what I'm doing wrong? I would be so appreciative!
The client is broken.
Tried freeradius on both ubuntu and mac o/s. Getting rlm_eap: SSL error error:0D07209B:asn1 encoding routines:ASN1_get_object:too long error.
Verified certificates with openssl.
Ubuntu freeradius: FreeRADIUS Version 2.2.8, for host x86_64-pc-linux-gnu, built on Jul 26 2017 at 15:27:21
openssl version OpenSSL 1.0.2g 1 Mar 2016
And... what system is trying to authenticated? That's useful to know, too.
Here's info from the log:
[tls] --> verify return:1 [tls] TLS_accept: unknown state [tls] <<< Unknown TLS version [length 0005] [tls] <<< Unknown TLS version [length 0106] [tls] TLS_accept: unknown state [tls] <<< Unknown TLS version [length 0005] [tls] <<< Unknown TLS version [length 0088] [tls] >>> Unknown TLS version [length 0005] [tls] >>> Unknown TLS version [length 0002] *TLS Alert write:fatal:decrypt error* * TLS_accept: failed in error* *rlm_eap: SSL error error:0D07209B:asn1 encoding routines:ASN1_get_object:too long*
The other end (phone, PC, whatever) is broken. No amount of poking FreeRADIUS will fix it. Alan DeKok.
Hi all, I'm in the process of building FR 3.0.16 from source against OpenSSL 1.1.1 and I have come across the following linking errors: build/lib/local/.libs/libfreeradius-eap.a(eapcrypto.o):eapcrypto.c:(.text+0xe0): undefined reference to `fr_sha1_update' build/lib/local/.libs/libfreeradius-eap.a(eapcrypto.o):eapcrypto.c:(.text+0xfa): undefined reference to `fr_sha1_final' build/lib/local/.libs/libfreeradius-eap.a(fips186prf.o):fips186prf.c:(.text+0xb4): undefined reference to `fr_sha1_init' build/lib/local/.libs/libfreeradius-eap.a(fips186prf.o):fips186prf.c:(.text+0xe4): undefined reference to `fr_sha1_trans After a dirty hack (#define .... SHA1 ...), I got the following errors: build/lib/.libs/libfreeradius-eap.a(eapsimlib.o):eapsimlib.c:(.text+0x337): undefined reference to `fr_hmac_sha1' build/lib/.libs/libfreeradius-eap.a(eapsimlib.o):eapsimlib.c:(.text+0x78d): undefined reference to `fr_hmac_sha1' build/lib/.libs/libfreeradius-eap.a(fips186prf.o):fips186prf.c:(.text+0xef): undefined reference to `fr_sha1_final_no_len' build/lib/.libs/libfreeradius-eap.a(fips186prf.o):fips186prf.c:(.text+0x1a9): undefined reference to `fr_sha1_final_no_len' In an attempt to carry on with the compilation, I have commented out the lines mentioned above in those two files (sorry about that). Any assistance in (properly) fixing these errors would be greatly appreciated. Running some tests at the moment. More to come. Thanks in advance.
On Feb 4, 2018, at 2:58 PM, Sergio NNX <sfhacker@hotmail.com> wrote:,
I'm in the process of building FR 3.0.16 from source against OpenSSL 1.1.1 and I have come across the following linking errors:
build/lib/local/.libs/libfreeradius-eap.a(eapcrypto.o):eapcrypto.c:(.text+0xe0): undefined reference to `fr_sha1_update' build/lib/local/.libs/libfreeradius-eap.a(eapcrypto.o):eapcrypto.c:(.text+0xfa): undefined reference to `fr_sha1_final' build/lib/local/.libs/libfreeradius-eap.a(fips186prf.o):fips186prf.c:(.text+0xb4): undefined reference to `fr_sha1_init' build/lib/local/.libs/libfreeradius-eap.a(fips186prf.o):fips186prf.c:(.text+0xe4): undefined reference to `fr_sha1_trans
You did something other than: $ ./configure $ make So... what did you do? Alan DeKok.
participants (3)
-
Alan DeKok -
Michael Duckett -
Sergio NNX