EAP-TLS failure with Freeradius 3.2.0 : Failed reading
Hi Alan, Are we sure it is the Google Adroid phone which is the culprit. If that then this issue should be seen with most Android phones. Also, the Radius client would be Access Point, in this case Netgear RAX200 which I am using. Any support on resoling this will be helpful. Thanks. Regards, Arvinder. -----Original Message----- From: Freeradius-Users <freeradius-users-bounces+arvinder.singh=gm.com@lists.freeradius.org> On Behalf Of freeradius-users-request@lists.freeradius.org Sent: Thursday, July 28, 2022 8:00 AM To: freeradius-users@lists.freeradius.org Subject: [EXTERNAL] Freeradius-Users Digest, Vol 207, Issue 47 ATTENTION: This email originated from outside of GM. Send Freeradius-Users mailing list submissions to freeradius-users@lists.freeradius.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.freeradius.org/mailman/listinfo/freeradius-users or, via email, send a message with subject or body 'help' to freeradius-users-request@lists.freeradius.org You can reach the person managing the list at freeradius-users-owner@lists.freeradius.org When replying, please edit your Subject line so it is more specific than "Re: Contents of Freeradius-Users digest..." Today's Topics: 1. Re: EAP-TLS failure with Freeradius 3.2.0 : Failed reading from OpenSSL: ../ssl/record/rec_layer_s3.c[1528]:error:14094438 (Alan DeKok) ---------------------------------------------------------------------- Message: 1 Date: Thu, 28 Jul 2022 07:23:49 -0400 From: Alan DeKok <aland@deployingradius.com> To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Subject: Re: EAP-TLS failure with Freeradius 3.2.0 : Failed reading from OpenSSL: ../ssl/record/rec_layer_s3.c[1528]:error:14094438 Message-ID: <890B6D01-D871-46C7-880C-AC000F3F457E@deployingradius.com> Content-Type: text/plain;charset=us-ascii Don't send messages to my private email address. I read the list, and that's good enough. Also read the instructions at http://wiki.freeradius.org/list-help I have no idea why so many people refuse to follow the documentation. W don't need to see "radiusd -Xxxx" or anything else. Just "radiusd -X". You get told this in the "welcome" message when you join the list. Can you explain why you're not following the documentation? i.e. the first message you post to the list tells us that you didn't read the docs, or you have no intention of following the documentation. Why is that useful? All it does is convince people that there's no point in answering your questions, because you'll just ignore any answer. And read the debug messages you post to the list. This isn't a FreeRADIUS issue. FreeRADIUS is telling you that the problem is the peer. i.e. the client machine. It's not following the specifications correctly. Go ask Google why their software is broken. No amount of poking FreeRADIUS will fix the Android phone. Alan DeKok. ------------------------------ Subject: Digest Footer - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html ------------------------------ End of Freeradius-Users Digest, Vol 207, Issue 47 ************************************************* Nothing in this message is intended to constitute an electronic signature unless a specific statement to the contrary is included in this message. Confidentiality Note: This message is intended only for the person or entity to which it is addressed. It may contain confidential and/or privileged material. Any review, transmission, dissemination or other use, or taking of any action in reliance upon this message by persons or entities other than the intended recipient is prohibited and may be unlawful. If you received this message in error, please contact the sender and delete it from your computer.
On Aug 5, 2022, at 9:54 AM, Arvinder Singh <arvinder.singh@gm.com> wrote:
Are we sure it is the Google Adroid phone which is the culprit.
Yes.
If that then this issue should be seen with most Android phones.
No.
Also, the Radius client would be Access Point, in this case Netgear RAX200 which I am using.
That doesn't matter.
Any support on resoling this will be helpful. Thanks.
It's a TLS message from the Android phone. The Access Point doesn't produce the message. FreeRADIUS doesn't produce the message. Maybe the phone doesn't like the certificates. It's impossible to tell, because there's almost nothing in the debug log you posted. Alan DeKok.
participants (2)
-
Alan DeKok -
Arvinder Singh