On 23 Feb 2015, at 10:40, Clement Ogedengbe <c.ogedengbe@worc.ac.uk> wrote:

Our primary server has really gone "bunker". Sometimes last week (after server ran without hitches for 2 years), started rejecting users by reporting certificate compatibility problem at the debug level.

After correcting the access privileges to certificates (which I observed may not be correct), the service resumed, but ran successfully only for 2 days and started rejecting users by reporting certificate compatibility problem.

The debug log you've posted is _not_ the server rejecting anything - it's the client choosing not to authenticate. The warning is simply a suggestion of the likely cause. Any time FreeRADIUS rejects a user, it will _always_ send an explicit Access-Reject (unless configured otherwise, or using PEAP with retries). If this is what you're now seeing you need to post a much more complete log. It may ultimately turn out that FreeRADIUS is misbehaving, but the only thing that can tell you why the client is choosing not to authenticate is the client. What supplicant is in use? Regards, Adam Bishop gpg: 0x6609D460 jisc.ac.uk Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc’s registered office is: One Castlepark, Tower Hill, Bristol, BS2 0JA. T 0203 697 5800. Jisc Collections and Janet Ltd. is a wholly owned Jisc subsidiary and a company limited by guarantee which is registered in England under Company No. number 2881024, VAT No. GB 197 0632 86. The registered office is: Lumen House, Library Avenue, Harwell, Didcot, Oxfordshire, OX11 0SG. T 01235 822200.

Hi,

come to light in a big way this morning), "nothing changed anywhere", it had been working fine for years and the issue affects machines with Win7 and higher. Phones, Macs etc. all authenticate just fine.

I haven't progressed much further down the troubleshooting path, so don't have much concrete to suggest, but if it is a similar problem, the server is not at fault and it is a client issue as others have already suggested.

I'm about to embark on debugging in the depths of the Windows 802.1x client; if I do find anything I'll post here for the sake of the archives.

as already emntioned, there have been windows updates that have gone out recently that have caused many a mischief. we've not been affected (probably because we have our own CA for this...) - I suspect a certificate CA update on the clients which has meant the root CA or an intermediate are no longer known or trusted correctly. if the RADIUS server pushed out it cert and ALL the chain, then local intermediates SHOULDNT be an issue...but if the root is no longer correctly known then that would be ka-blam! easiest way to finger this...find/identify a troublesome client, visit said machine, delete the eduroam connection profile/details and reconnect - see what it says about the RADIUS cert/trust. alan

Thanks all for your contribution. For clarity: All users are rejected, regardless of client platform or os. I switched over the NAS to the secondary server when the primary server started to fail and the secondary server (which has similar configuration with one failing) is authentically users successfully. The two servers use the same server certificate. Please find attached the debug log. It's really weird! Best Regards Clement Ogedengbe -----Original Message----- From: Freeradius-Users [mailto:freeradius-users-bounces+c.ogedengbe=worc.ac.uk@lists.freeradius.org] On Behalf Of A.L.M.Buxey@lboro.ac.uk Sent: 23 February 2015 12:30 To: FreeRadius users mailing list Subject: Re: Sudden User Authentication Rejection as a result Compatibility - error Hi,

come to light in a big way this morning), "nothing changed anywhere", it had been working fine for years and the issue affects machines with Win7 and higher. Phones, Macs etc. all authenticate just fine.

I haven't progressed much further down the troubleshooting path, so don't have much concrete to suggest, but if it is a similar problem, the server is not at fault and it is a client issue as others have already suggested.

I'm about to embark on debugging in the depths of the Windows 802.1x client; if I do find anything I'll post here for the sake of the archives.

as already emntioned, there have been windows updates that have gone out recently that have caused many a mischief. we've not been affected (probably because we have our own CA for this...) - I suspect a certificate CA update on the clients which has meant the root CA or an intermediate are no longer known or trusted correctly. if the RADIUS server pushed out it cert and ALL the chain, then local intermediates SHOULDNT be an issue...but if the root is no longer correctly known then that would be ka-blam! easiest way to finger this...find/identify a troublesome client, visit said machine, delete the eduroam connection profile/details and reconnect - see what it says about the RADIUS cert/trust. alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

I have now tested the server with eapol_test (without certificate validation) and it failed. I tested using the eaptest config below (PEAP & TTLS) : (I have masked out userid & password). Please find below the eaptest config and script debug output. The Back end Radius server debug output is available at (http://pastebin.com/0Q30F4V4) # # eapol_test -c peap-mschapv2.conf -s testing123 # network={ ssid="example" key_mgmt=WPA-EAP eap=PEAP identity="*****" anonymous_identity="anonymous" password="*******" phase2="autheap=MSCHAPV2" # # Uncomment the following to perform server certificate validation. # ca_cert="/etc/freeradius/certs/ca.pem" } Reading configuration file 'file1' Line: 4 - start of a new network block ssid - hexdump_ascii(len=7): 65 78 61 6d 70 6c 65 example key_mgmt: 0x1 eap methods - hexdump(len=16): 00 00 00 00 19 00 00 00 00 00 00 00 00 00 00 00 identity - hexdump_ascii(len=9): 75 77 6a 72 73 74 65 73 74 uwjrstest anonymous_identity - hexdump_ascii(len=9): 61 6e 6f 6e 79 6d 6f 75 73 anonymous password - hexdump_ascii(len=9): 77 30 72 63 33 73 74 33 72 ******** phase2 - hexdump_ascii(len=16): 61 75 74 68 65 61 70 3d 4d 53 43 48 41 50 56 32 autheap=MSCHAPV2 Priority group 0 id=0 ssid='example' Authentication server 127.0.0.1:1812 RADIUS local address: 127.0.0.1:60241 EAPOL: SUPP_PAE entering state DISCONNECTED EAPOL: KEY_RX entering state NO_KEY_RECEIVE EAPOL: SUPP_BE entering state INITIALIZE EAP: EAP entering state DISABLED EAPOL: External notification - portValid=0 EAPOL: External notification - portEnabled=1 EAPOL: SUPP_PAE entering state CONNECTING EAPOL: SUPP_BE entering state IDLE EAP: EAP entering state INITIALIZE EAP: EAP entering state IDLE Sending fake EAP-Request-Identity EAPOL: Received EAP-Packet frame EAPOL: SUPP_PAE entering state RESTART EAP: EAP entering state INITIALIZE EAP: EAP entering state IDLE EAPOL: SUPP_PAE entering state AUTHENTICATING EAPOL: SUPP_BE entering state REQUEST EAPOL: getSuppRsp EAP: EAP entering state RECEIVED EAP: Received EAP-Request id=0 method=1 vendor=0 vendorMethod=0 EAP: EAP entering state IDENTITY CTRL-EVENT-EAP-STARTED EAP authentication started EAP: Status notification: started (param=) EAP: EAP-Request Identity data - hexdump_ascii(len=0): EAP: using anonymous identity - hexdump_ascii(len=9): 61 6e 6f 6e 79 6d 6f 75 73 anonymous EAP: EAP entering state SEND_RESPONSE EAP: EAP entering state IDLE EAPOL: SUPP_BE entering state RESPONSE EAPOL: txSuppRsp WPA: eapol_test_eapol_send(type=0 len=14) TX EAP -> RADIUS - hexdump(len=14): 02 00 00 0e 01 61 6e 6f 6e 79 6d 6f 75 73 Encapsulating EAP message into a RADIUS packet Learned identity from EAP-Response-Identity - hexdump(len=9): 61 6e 6f 6e 79 6d 6f 75 73 Sending RADIUS message to authentication server RADIUS message: code=1 (Access-Request) identifier=0 length=126 Attribute 1 (User-Name) length=11 Value: 'anonymous' Attribute 4 (NAS-IP-Address) length=6 Value: 127.0.0.1 Attribute 31 (Calling-Station-Id) length=19 Value: '02-00-00-00-00-01' Attribute 12 (Framed-MTU) length=6 Value: 1400 Attribute 61 (NAS-Port-Type) length=6 Value: 19 Attribute 77 (Connect-Info) length=24 Value: 'CONNECT 11Mbps 802.11b' Attribute 79 (EAP-Message) length=16 Value: 0200000e01616e6f6e796d6f7573 Attribute 80 (Message-Authenticator) length=18 Value: b17e9870cf9ba9f23944f2e13d780316 Next RADIUS client retransmit in 3 seconds EAPOL: SUPP_BE entering state RECEIVE Received 64 bytes from RADIUS server Received RADIUS message RADIUS message: code=11 (Access-Challenge) identifier=0 length=64 Attribute 79 (EAP-Message) length=8 Value: 010100061920 Attribute 80 (Message-Authenticator) length=18 Value: ce45fca226a98d9ef3153d713a883828 Attribute 24 (State) length=18 Value: 75a766a375a67f726488f389cf8e8ffd STA 02:00:00:00:00:01: Received RADIUS packet matched with a pending request, round trip time 0.00 sec RADIUS packet matching with station decapsulated EAP packet (code=1 id=1 len=6) from RADIUS server: EAP-Request-PEAP (25) EAPOL: Received EAP-Packet frame EAPOL: SUPP_BE entering state REQUEST EAPOL: getSuppRsp EAP: EAP entering state RECEIVED EAP: Received EAP-Request id=1 method=25 vendor=0 vendorMethod=0 EAP: EAP entering state GET_METHOD CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=25 EAP: Status notification: accept proposed method (param=PEAP) EAP: Initialize selected EAP method: vendor 0 method 25 (PEAP) TLS: Phase2 EAP types - hexdump(len=40): 00 00 00 00 04 00 00 00 00 00 00 00 1a 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 05 00 00 00 00 00 00 00 11 00 00 00 TLS: using phase1 config options CTRL-EVENT-EAP-METHOD EAP vendor 0 method 25 (PEAP) selected EAP: EAP entering state METHOD SSL: Received packet(len=6) - Flags 0x20 EAP-PEAP: Start (server ver=0, own ver=1) EAP-PEAP: Using PEAP version 0 SSL: (where=0x10 ret=0x1) SSL: (where=0x1001 ret=0x1) SSL: SSL_connect:before/connect initialization OpenSSL: TX ver=0x301 content_type=22 OpenSSL: Message - hexdump(len=84): 01 00 00 50 03 01 54 ec 50 36 93 c9 79 b0 61 56 e9 bc de df a4 63 28 8e 63 da f2 3a 0a ec 47 0d 09 8e 41 94 2d b2 00 00 28 00 39 00 38 00 35 00 16 00 13 00 0a 00 33 00 32 00 2f 00 05 00 04 00 15 00 12 00 09 00 14 00 11 00 08 00 06 00 03 00 ff 02 01 00 SSL: (where=0x1001 ret=0x1) SSL: SSL_connect:SSLv3 write client hello A SSL: (where=0x1002 ret=0xffffffff) SSL: SSL_connect:error in SSLv3 read server hello A SSL: SSL_connect - want more data SSL: 89 bytes pending from ssl_out SSL: 89 bytes left to be sent out (of total 89 bytes) EAP: method process -> ignore=FALSE methodState=MAY_CONT decision=FAIL eapRespData=0x9dc11d8 EAP: EAP entering state SEND_RESPONSE EAP: EAP entering state IDLE EAPOL: SUPP_BE entering state RESPONSE EAPOL: txSuppRsp WPA: eapol_test_eapol_send(type=0 len=99) TX EAP -> RADIUS - hexdump(len=99): 02 01 00 63 19 80 00 00 00 59 16 03 01 00 54 01 00 00 50 03 01 54 ec 50 36 93 c9 79 b0 61 56 e9 bc de df a4 63 28 8e 63 da f2 3a 0a ec 47 0d 09 8e 41 94 2d b2 00 00 28 00 39 00 38 00 35 00 16 00 13 00 0a 00 33 00 32 00 2f 00 05 00 04 00 15 00 12 00 09 00 14 00 11 00 08 00 06 00 03 00 ff 02 01 00 Encapsulating EAP message into a RADIUS packet Copied RADIUS State Attribute Sending RADIUS message to authentication server RADIUS message: code=1 (Access-Request) identifier=1 length=229 Attribute 1 (User-Name) length=11 Value: 'anonymous' Attribute 4 (NAS-IP-Address) length=6 Value: 127.0.0.1 Attribute 31 (Calling-Station-Id) length=19 Value: '02-00-00-00-00-01' Attribute 12 (Framed-MTU) length=6 Value: 1400 Attribute 61 (NAS-Port-Type) length=6 Value: 19 Attribute 77 (Connect-Info) length=24 Value: 'CONNECT 11Mbps 802.11b' Attribute 79 (EAP-Message) length=101 Value: 02010063198000000059160301005401000050030154ec503693c979b06156e9bcdedfa463288e63daf23a0aec470d098e41942db200002800390038003500160013000a00330032002f000500040015001200090014001100080006000300ff020100 Attribute 24 (State) length=18 Value: 75a766a375a67f726488f389cf8e8ffd Attribute 80 (Message-Authenticator) length=18 Value: 50a04e4181088617b03553a33d18024e Next RADIUS client retransmit in 3 seconds EAPOL: SUPP_BE entering state RECEIVE Received 1090 bytes from RADIUS server Received RADIUS message RADIUS message: code=11 (Access-Challenge) identifier=1 length=1090 Attribute 79 (EAP-Message) length=255 Value: 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 Attribute 79 (EAP-Message) length=255 Value: 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 Attribute 79 (EAP-Message) length=255 Value: 4706156f95f9beb031cee37c6cdcd46c5b37040fe1c9a5e5a7a352433e641d5d5fc54c4a01a8e5cd664f5b60fd3d146f221d21d7016df0d3e2d71e621e50ab2c750203010001a38201713082016d301f0603551d230418301680140cbd93680cf3deaba3496b2b375747ea90e3b9ed301d0603551d0e041604147628d2253cc8a17bce0622764dc14af275694989300e0603551d0f0101ff0404030205a0300c0603551d130101ff04023000301d0603551d250416301406082b0601050507030106082b0601050507030230220603551d20041b3019300d060b2b06010401b2310102021d3008060667810c010201303a0603551d1f04333031302fa0 Attribute 79 (EAP-Message) length=255 Value: 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 Attribute 79 (EAP-Message) length=14 Value: 6b9b655fb03a47612cfc9c70 Attribute 80 (Message-Authenticator) length=18 Value: d9b4777810fd78c6934fd4b5c3728c8a Attribute 24 (State) length=18 Value: 75a766a374a57f726488f389cf8e8ffd STA 02:00:00:00:00:01: Received RADIUS packet matched with a pending request, round trip time 0.02 sec RADIUS packet matching with station decapsulated EAP packet (code=1 id=2 len=1024) from RADIUS server: EAP-Request-PEAP (25) EAPOL: Received EAP-Packet frame EAPOL: SUPP_BE entering state REQUEST EAPOL: getSuppRsp EAP: EAP entering state RECEIVED EAP: Received EAP-Request id=2 method=25 vendor=0 vendorMethod=0 EAP: EAP entering state METHOD SSL: Received packet(len=1024) - Flags 0xc0 SSL: TLS Message Length: 5781 SSL: Need 4767 bytes more input data SSL: Building ACK (type=25 id=2 ver=0) EAP: method process -> ignore=FALSE methodState=MAY_CONT decision=FAIL eapRespData=0x9daf3f8 EAP: EAP entering state SEND_RESPONSE EAP: EAP entering state IDLE EAPOL: SUPP_BE entering state RESPONSE EAPOL: txSuppRsp WPA: eapol_test_eapol_send(type=0 len=6) TX EAP -> RADIUS - hexdump(len=6): 02 02 00 06 19 00 Encapsulating EAP message into a RADIUS packet Copied RADIUS State Attribute Sending RADIUS message to authentication server RADIUS message: code=1 (Access-Request) identifier=2 length=136 Attribute 1 (User-Name) length=11 Value: 'anonymous' Attribute 4 (NAS-IP-Address) length=6 Value: 127.0.0.1 Attribute 31 (Calling-Station-Id) length=19 Value: '02-00-00-00-00-01' Attribute 12 (Framed-MTU) length=6 Value: 1400 Attribute 61 (NAS-Port-Type) length=6 Value: 19 Attribute 77 (Connect-Info) length=24 Value: 'CONNECT 11Mbps 802.11b' Attribute 79 (EAP-Message) length=8 Value: 020200061900 Attribute 24 (State) length=18 Value: 75a766a374a57f726488f389cf8e8ffd Attribute 80 (Message-Authenticator) length=18 Value: 5021c8482aa1c44e79ecdd99494b515f Next RADIUS client retransmit in 3 seconds EAPOL: SUPP_BE entering state RECEIVE Received 1086 bytes from RADIUS server Received RADIUS message RADIUS message: code=11 (Access-Challenge) identifier=2 length=1086 Attribute 79 (EAP-Message) length=255 Value: 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 Attribute 79 (EAP-Message) length=255 Value: 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 Attribute 79 (EAP-Message) length=255 Value: 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 Attribute 79 (EAP-Message) length=255 Value: a226dd1d429a4d38b156fe3ab4cb6b6cf26a9f3fb3ae3ba7d0153eac277f1bf4596050567e9d75259e3fc676bfff99ccd8f1a96a895fdee707cd8d8b0203010001a382017f3082017b301f0603551d230418301680145379bf5aaa2b4acf5480e1d89bc09df2b20366cb301d0603551d0e041604145bd08a1c9a325be0b5dd96541be18628b0fdb6bd300e0603551d0f0101ff04040302018630120603551d130101ff040830060101ff020100301d0603551d250416301406082b0601050507030106082b06010505070302302c0603551d2004253023300d060b2b06010401b2310102021d3008060667810c0102013008060667810c010202305006 Attribute 79 (EAP-Message) length=10 Value: 03551d1f04493047 Attribute 80 (Message-Authenticator) length=18 Value: 319bac5e03f79aaa5889ec0e60fbf9ef Attribute 24 (State) length=18 Value: 75a766a377a47f726488f389cf8e8ffd STA 02:00:00:00:00:01: Received RADIUS packet matched with a pending request, round trip time 0.00 sec RADIUS packet matching with station decapsulated EAP packet (code=1 id=3 len=1020) from RADIUS server: EAP-Request-PEAP (25) EAPOL: Received EAP-Packet frame EAPOL: SUPP_BE entering state REQUEST EAPOL: getSuppRsp EAP: EAP entering state RECEIVED EAP: Received EAP-Request id=3 method=25 vendor=0 vendorMethod=0 EAP: EAP entering state METHOD SSL: Received packet(len=1020) - Flags 0x40 SSL: Need 3753 bytes more input data SSL: Building ACK (type=25 id=3 ver=0) EAP: method process -> ignore=FALSE methodState=MAY_CONT decision=FAIL eapRespData=0x9daf3f8 EAP: EAP entering state SEND_RESPONSE EAP: EAP entering state IDLE EAPOL: SUPP_BE entering state RESPONSE EAPOL: txSuppRsp WPA: eapol_test_eapol_send(type=0 len=6) TX EAP -> RADIUS - hexdump(len=6): 02 03 00 06 19 00 Encapsulating EAP message into a RADIUS packet Copied RADIUS State Attribute Sending RADIUS message to authentication server RADIUS message: code=1 (Access-Request) identifier=3 length=136 Attribute 1 (User-Name) length=11 Value: 'anonymous' Attribute 4 (NAS-IP-Address) length=6 Value: 127.0.0.1 Attribute 31 (Calling-Station-Id) length=19 Value: '02-00-00-00-00-01' Attribute 12 (Framed-MTU) length=6 Value: 1400 Attribute 61 (NAS-Port-Type) length=6 Value: 19 Attribute 77 (Connect-Info) length=24 Value: 'CONNECT 11Mbps 802.11b' Attribute 79 (EAP-Message) length=8 Value: 020300061900 Attribute 24 (State) length=18 Value: 75a766a377a47f726488f389cf8e8ffd Attribute 80 (Message-Authenticator) length=18 Value: 684248044fdb1c676156860f7784efe2 Next RADIUS client retransmit in 3 seconds EAPOL: SUPP_BE entering state RECEIVE Received 1086 bytes from RADIUS server Received RADIUS message RADIUS message: code=11 (Access-Challenge) identifier=3 length=1086 Attribute 79 (EAP-Message) length=255 Value: 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 Attribute 79 (EAP-Message) length=255 Value: 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 Attribute 79 (EAP-Message) length=255 Value: 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 Attribute 79 (EAP-Message) length=255 Value: 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 Attribute 79 (EAP-Message) length=10 Value: 726b312e302c0603 Attribute 80 (Message-Authenticator) length=18 Value: caf6f6905da9d09a1f46e0cec1660dee Attribute 24 (State) length=18 Value: 75a766a376a37f726488f389cf8e8ffd STA 02:00:00:00:00:01: Received RADIUS packet matched with a pending request, round trip time 0.00 sec RADIUS packet matching with station decapsulated EAP packet (code=1 id=4 len=1020) from RADIUS server: EAP-Request-PEAP (25) EAPOL: Received EAP-Packet frame EAPOL: SUPP_BE entering state REQUEST EAPOL: getSuppRsp EAP: EAP entering state RECEIVED EAP: Received EAP-Request id=4 method=25 vendor=0 vendorMethod=0 EAP: EAP entering state METHOD SSL: Received packet(len=1020) - Flags 0x40 SSL: Need 2739 bytes more input data SSL: Building ACK (type=25 id=4 ver=0) EAP: method process -> ignore=FALSE methodState=MAY_CONT decision=FAIL eapRespData=0x9daf3f8 EAP: EAP entering state SEND_RESPONSE EAP: EAP entering state IDLE EAPOL: SUPP_BE entering state RESPONSE EAPOL: txSuppRsp WPA: eapol_test_eapol_send(type=0 len=6) TX EAP -> RADIUS - hexdump(len=6): 02 04 00 06 19 00 Encapsulating EAP message into a RADIUS packet Copied RADIUS State Attribute Sending RADIUS message to authentication server RADIUS message: code=1 (Access-Request) identifier=4 length=136 Attribute 1 (User-Name) length=11 Value: 'anonymous' Attribute 4 (NAS-IP-Address) length=6 Value: 127.0.0.1 Attribute 31 (Calling-Station-Id) length=19 Value: '02-00-00-00-00-01' Attribute 12 (Framed-MTU) length=6 Value: 1400 Attribute 61 (NAS-Port-Type) length=6 Value: 19 Attribute 77 (Connect-Info) length=24 Value: 'CONNECT 11Mbps 802.11b' Attribute 79 (EAP-Message) length=8 Value: 020400061900 Attribute 24 (State) length=18 Value: 75a766a376a37f726488f389cf8e8ffd Attribute 80 (Message-Authenticator) length=18 Value: c28c99d554e0531805be932e3966e5b3 Next RADIUS client retransmit in 3 seconds EAPOL: SUPP_BE entering state RECEIVE Received 1086 bytes from RADIUS server Received RADIUS message RADIUS message: code=11 (Access-Challenge) identifier=4 length=1086 Attribute 79 (EAP-Message) length=255 Value: 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 Attribute 79 (EAP-Message) length=255 Value: 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 Attribute 79 (EAP-Message) length=255 Value: 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 Attribute 79 (EAP-Message) length=255 Value: 2e636f6d2f416464547275737445787465726e616c4341526f6f742e63726c303506082b0601050507010104293027302506082b060105050730018619687474703a2f2f6f6373702e7573657274727573742e636f6d300d06092a864886f70d01010c050003820101009365f63783950f5ec3821c1fd677e73c8ac0aa09f0e90b26f1e0c26a75a1c779c9b95260c829120ef0ad03d609c476dfe5a68195a746da8257a99592c5b68f03226c3377c17b32176e07ce5a14413a05241bf614063ba825240ebbcc2a75ddb970413f7cd0633621071f46ff60a491e167bcde1f7e1914c9636791ea67076bb48f8bc06e437dc3a1806cb21ebc53857ddc90a1 Attribute 79 (EAP-Message) length=10 Value: a4bc2def46725735 Attribute 80 (Message-Authenticator) length=18 Value: decb8e22377604604384b62656c6e5c8 Attribute 24 (State) length=18 Value: 75a766a371a27f726488f389cf8e8ffd STA 02:00:00:00:00:01: Received RADIUS packet matched with a pending request, round trip time 0.00 sec RADIUS packet matching with station decapsulated EAP packet (code=1 id=5 len=1020) from RADIUS server: EAP-Request-PEAP (25) EAPOL: Received EAP-Packet frame EAPOL: SUPP_BE entering state REQUEST EAPOL: getSuppRsp EAP: EAP entering state RECEIVED EAP: Received EAP-Request id=5 method=25 vendor=0 vendorMethod=0 EAP: EAP entering state METHOD SSL: Received packet(len=1020) - Flags 0x40 SSL: Need 1725 bytes more input data SSL: Building ACK (type=25 id=5 ver=0) EAP: method process -> ignore=FALSE methodState=MAY_CONT decision=FAIL eapRespData=0x9daf3f8 EAP: EAP entering state SEND_RESPONSE EAP: EAP entering state IDLE EAPOL: SUPP_BE entering state RESPONSE EAPOL: txSuppRsp WPA: eapol_test_eapol_send(type=0 len=6) TX EAP -> RADIUS - hexdump(len=6): 02 05 00 06 19 00 Encapsulating EAP message into a RADIUS packet Copied RADIUS State Attribute Sending RADIUS message to authentication server RADIUS message: code=1 (Access-Request) identifier=5 length=136 Attribute 1 (User-Name) length=11 Value: 'anonymous' Attribute 4 (NAS-IP-Address) length=6 Value: 127.0.0.1 Attribute 31 (Calling-Station-Id) length=19 Value: '02-00-00-00-00-01' Attribute 12 (Framed-MTU) length=6 Value: 1400 Attribute 61 (NAS-Port-Type) length=6 Value: 19 Attribute 77 (Connect-Info) length=24 Value: 'CONNECT 11Mbps 802.11b' Attribute 79 (EAP-Message) length=8 Value: 020500061900 Attribute 24 (State) length=18 Value: 75a766a371a27f726488f389cf8e8ffd Attribute 80 (Message-Authenticator) length=18 Value: 18e92ad9c853e46920458c122ee991b4 Next RADIUS client retransmit in 3 seconds EAPOL: SUPP_BE entering state RECEIVE Received 1086 bytes from RADIUS server Received RADIUS message RADIUS message: code=11 (Access-Challenge) identifier=5 length=1086 Attribute 79 (EAP-Message) length=255 Value: 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 Attribute 79 (EAP-Message) length=255 Value: 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 Attribute 79 (EAP-Message) length=255 Value: 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 Attribute 79 (EAP-Message) length=255 Value: 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 Attribute 79 (EAP-Message) length=10 Value: 96b7dc7e4eee70fd Attribute 80 (Message-Authenticator) length=18 Value: 4a4d8774a9df8ebe94d316138134925e Attribute 24 (State) length=18 Value: 75a766a370a17f726488f389cf8e8ffd STA 02:00:00:00:00:01: Received RADIUS packet matched with a pending request, round trip time 0.00 sec RADIUS packet matching with station decapsulated EAP packet (code=1 id=6 len=1020) from RADIUS server: EAP-Request-PEAP (25) EAPOL: Received EAP-Packet frame EAPOL: SUPP_BE entering state REQUEST EAPOL: getSuppRsp EAP: EAP entering state RECEIVED EAP: Received EAP-Request id=6 method=25 vendor=0 vendorMethod=0 EAP: EAP entering state METHOD SSL: Received packet(len=1020) - Flags 0x40 SSL: Need 711 bytes more input data SSL: Building ACK (type=25 id=6 ver=0) EAP: method process -> ignore=FALSE methodState=MAY_CONT decision=FAIL eapRespData=0x9daf3f8 EAP: EAP entering state SEND_RESPONSE EAP: EAP entering state IDLE EAPOL: SUPP_BE entering state RESPONSE EAPOL: txSuppRsp WPA: eapol_test_eapol_send(type=0 len=6) TX EAP -> RADIUS - hexdump(len=6): 02 06 00 06 19 00 Encapsulating EAP message into a RADIUS packet Copied RADIUS State Attribute Sending RADIUS message to authentication server RADIUS message: code=1 (Access-Request) identifier=6 length=136 Attribute 1 (User-Name) length=11 Value: 'anonymous' Attribute 4 (NAS-IP-Address) length=6 Value: 127.0.0.1 Attribute 31 (Calling-Station-Id) length=19 Value: '02-00-00-00-00-01' Attribute 12 (Framed-MTU) length=6 Value: 1400 Attribute 61 (NAS-Port-Type) length=6 Value: 19 Attribute 77 (Connect-Info) length=24 Value: 'CONNECT 11Mbps 802.11b' Attribute 79 (EAP-Message) length=8 Value: 020600061900 Attribute 24 (State) length=18 Value: 75a766a370a17f726488f389cf8e8ffd Attribute 80 (Message-Authenticator) length=18 Value: bedc23b56cdbc1d4aacc0d4ef47faa20 Next RADIUS client retransmit in 3 seconds EAPOL: SUPP_BE entering state RECEIVE Received 779 bytes from RADIUS server Received RADIUS message RADIUS message: code=11 (Access-Challenge) identifier=6 length=779 Attribute 79 (EAP-Message) length=255 Value: 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 Attribute 79 (EAP-Message) length=255 Value: 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 Attribute 79 (EAP-Message) length=213 Value: f37ad768c1993d78ffb150fb6b4476de15d8e5e4657e02a6030392d63499bfcb333975b9890bdd68efe4d475b37ef74c45776c6ffa7bca279b8d902d1716482de294e0a4a5bf8a820a3e002577f14b12764cb2fad73bfb52c3a51bb1d9b4f195d1d6d60353faece479908135e232333f59873fad9a7cca91f738ef04c3c79a01ae61da70f8059da9f0f8f0a547d7a993bb5fe1627c5acd3de47dfa5e351a9211b184047854e70d7f3420ea38e562d7201c9804f696a80eddf692ffd7a8cdd508b2a33fbf9d48fd6b8f7516030100040e000000 Attribute 80 (Message-Authenticator) length=18 Value: cea916081da74b3b5b26e2f335605db2 Attribute 24 (State) length=18 Value: 75a766a373a07f726488f389cf8e8ffd STA 02:00:00:00:00:01: Received RADIUS packet matched with a pending request, round trip time 0.00 sec RADIUS packet matching with station decapsulated EAP packet (code=1 id=7 len=717) from RADIUS server: EAP-Request-PEAP (25) EAPOL: Received EAP-Packet frame EAPOL: SUPP_BE entering state REQUEST EAPOL: getSuppRsp EAP: EAP entering state RECEIVED EAP: Received EAP-Request id=7 method=25 vendor=0 vendorMethod=0 EAP: EAP entering state METHOD SSL: Received packet(len=717) - Flags 0x00 OpenSSL: RX ver=0x301 content_type=22 OpenSSL: Message - hexdump(len=49): 02 00 00 2d 03 01 54 ec 50 36 8b ac 33 98 57 c3 da 21 63 1f dd 99 af 93 5c 55 f7 65 a7 d5 51 5c cb 41 69 43 82 3f 00 00 39 01 00 05 ff 01 00 01 00 SSL: (where=0x1001 ret=0x1) SSL: SSL_connect:SSLv3 read server hello A OpenSSL: RX ver=0x301 content_type=22 OpenSSL: Message - hexdump(len=5183): 0b 00 14 3b 00 14 38 00 04 7a 30 82 04 76 30 82 03 5e a0 03 02 01 02 02 11 00 f4 ed 39 d2 24 fa f0 e5 f2 df 0e eb 3c f5 94 cd 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 30 36 31 0b 30 09 06 03 55 04 06 13 02 4e 4c 31 0f 30 0d 06 03 55 04 0a 13 06 54 45 52 45 4e 41 31 16 30 14 06 03 55 04 03 13 0d 54 45 52 45 4e 41 20 53 53 4c 20 43 41 30 1e 17 0d 31 33 31 30 30 38 30 30 30 30 30 30 5a 17 0d 31 36 31 30 30 37 32 33 35 39 35 39 5a 30 42 31 21 30 1f 06 03 55 04 0b 13 18 44 6f 6d 61 69 6e 20 43 6f 6e 74 72 6f 6c 20 56 61 6c 69 64 61 74 65 64 31 1d 30 1b 06 03 55 04 03 13 14 75 77 65 64 75 72 6f 61 6d 2e 77 6f 72 63 2e 61 63 2e 75 6b 30 82 01 22 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 82 01 0f 00 30 82 01 0a 02 82 01 01 00 bf 25 5b 99 fa d0 9b 4b 6b a8 c3 98 98 66 c3 3e 11 80 07 a2 4b 48 e7 8f 67 86 71 32 21 65 f7 ed 85 29 02 ee 48 b6 f7 e1 b2 e0 6b b8 cd f5 75 ef 76 5d 2f e8 98 91 f6 d9 47 1e f9 e8 52 7b ed 98 50 f0 b6 6a 21 1e 56 9a 21 df a7 10 ee f2 86 a4 78 10 b4 32 bb d1 32 7d 69 fc a3 10 24 cf 1c 77 5a f0 67 30 20 87 ed e2 7a 55 6d 69 ed 1c 98 82 0b 9e 7c fa 7f ea 7e 16 1e 1a 34 36 58 9f a6 56 ce f1 3a be f0 27 00 40 30 04 c3 7c a6 ab a8 66 87 5b 80 1c 44 50 e7 3a 63 89 0c 77 65 a1 fd 3e f3 4c e1 13 d8 de c5 fa a3 4b b6 1e 18 00 c9 37 d6 5b 86 67 ef f9 4a 4e 66 5d 28 a7 06 2e 80 47 06 15 6f 95 f9 be b0 31 ce e3 7c 6c dc d4 6c 5b 37 04 0f e1 c9 a5 e5 a7 a3 52 43 3e 64 1d 5d 5f c5 4c 4a 01 a8 e5 cd 66 4f 5b 60 fd 3d 14 6f 22 1d 21 d7 01 6d f0 d3 e2 d7 1e 62 1e 50 ab 2c 75 02 03 01 00 01 a3 82 01 71 30 82 01 6d 30 1f 06 03 55 1d 23 04 18 30 16 80 14 0c bd 93 68 0c f3 de ab a3 49 6b 2b 37 57 47 ea 90 e3 b9 ed 30 1d 06 03 55 1d 0e 04 16 04 14 76 28 d2 25 3c c8 a1 7b ce 06 22 76 4d c1 4a f2 75 69 49 89 30 0e 06 03 55 1d 0f 01 01 ff 04 04 03 02 05 a0 30 0c 06 03 55 1d 13 01 01 ff 04 02 30 00 30 1d 06 03 55 1d 25 04 16 30 14 06 08 2b 06 01 05 05 07 03 01 06 08 2b 06 01 05 05 07 03 02 30 22 06 03 55 1d 20 04 1b 30 19 30 0d 06 0b 2b 06 01 04 01 b2 31 01 02 02 1d 30 08 06 06 67 81 0c 01 02 01 30 3a 06 03 55 1d 1f 04 33 30 31 30 2f a0 2d a0 2b 86 29 68 74 74 70 3a 2f 2f 63 72 6c 2e 74 63 73 2e 74 65 72 65 6e 61 2e 6f 72 67 2f 54 45 52 45 4e 41 53 53 4c 43 41 2e 63 72 6c 30 6d 06 08 2b 06 01 05 05 07 01 01 04 61 30 5f 30 35 06 08 2b 06 01 05 05 07 30 02 86 29 68 74 74 70 3a 2f 2f 63 72 74 2e 74 63 73 2e 74 65 72 65 6e 61 2e 6f 72 67 2f 54 45 52 45 4e 41 53 53 4c 43 41 2e 63 72 74 30 26 06 08 2b 06 01 05 05 07 30 01 86 1a 68 74 74 70 3a 2f 2f 6f 63 73 70 2e 74 63 73 2e 74 65 72 65 6e 61 2e 6f 72 67 30 1f 06 03 55 1d 11 04 18 30 16 82 14 75 77 65 64 75 72 6f 61 6d 2e 77 6f 72 63 2e 61 63 2e 75 6b 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 82 01 01 00 3f b0 5f fb 23 19 3c c8 17 98 ab b8 07 9c 82 fd e7 1e b5 bb 17 2c 8e 22 9f 91 eb be b0 30 48 c7 43 dc 5f 85 e8 31 85 d2 1e 6d 65 6b 9b 65 5f b0 3a 47 61 2c fc 9c 70 dc d1 c2 b2 c8 22 99 5d 11 e2 28 dd b0 8d 50 5d 48 82 6c f9 e5 76 b8 a8 bf 26 02 d4 2c 03 be d5 0a c0 cf 72 e5 12 5d 4f b9 30 45 6f 6b 5e cc 34 e0 8a 26 a3 57 9d 1a 70 b8 8d 25 7a f2 2e fc 19 91 6c 16 8b 6e 9e 09 58 95 d2 7f 8e 3a 66 fc 86 4f bf a3 d6 54 b2 2b 4c d1 18 fb b7 b2 50 69 92 8e 2e b2 b1 16 dc 83 93 fc 4a 23 7d 22 9f c4 76 ac 75 83 71 28 0c 72 2a 8b b1 65 d6 4c 61 f2 65 74 59 9d d0 93 be 9b c4 f8 69 48 46 fc b0 8e 87 a5 43 91 f5 8e e6 5a 10 ad 3c 1f cc 55 6f f6 2d 8b 27 56 95 69 38 61 b9 09 cb c5 c8 ae 8b 08 e5 07 fd b2 b4 8c a9 a4 bd ff 23 5c 0b 02 a9 d2 24 84 25 1a 03 c8 2b 45 35 ee 00 05 fd 30 82 05 f9 30 82 03 e1 a0 03 02 01 02 02 11 00 b0 ff cf 3a 1d 82 44 98 15 62 9d 64 88 6a 41 65 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0c 05 00 30 81 88 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 4e 65 77 20 4a 65 72 73 65 79 31 14 30 12 06 03 55 04 07 13 0b 4a 65 72 73 65 79 20 43 69 74 79 31 1e 30 1c 06 03 55 04 0a 13 15 54 68 65 20 55 53 45 52 54 52 55 53 54 20 4e 65 74 77 6f 72 6b 31 2e 30 2c 06 03 55 04 03 13 25 55 53 45 52 54 72 75 73 74 20 52 53 41 20 43 65 72 74 69 66 69 63 61 74 69 6f 6e 20 41 75 74 68 6f 72 69 74 79 30 1e 17 0d 31 34 31 30 30 39 30 30 30 30 30 30 5a 17 0d 32 34 31 30 30 38 32 33 35 39 35 39 5a 30 64 31 0b 30 09 06 03 55 04 06 13 02 4e 4c 31 16 30 14 06 03 55 04 08 13 0d 4e 6f 6f 72 64 2d 48 6f 6c 6c 61 6e 64 31 12 30 10 06 03 55 04 07 13 09 41 6d 73 74 65 72 64 61 6d 31 0f 30 0d 06 03 55 04 0a 13 06 54 45 52 45 4e 41 31 18 30 16 06 03 55 04 03 13 0f 54 45 52 45 4e 41 20 53 53 4c 20 43 41 20 32 30 82 01 22 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 82 01 0f 00 30 82 01 0a 02 82 01 01 00 b0 3a 6d 7f a9 b8 00 9e f3 85 3a 08 64 2c f9 44 0c 20 b4 b3 15 4d 06 2d a6 f0 93 c9 48 be f7 64 ad a4 8e 15 b3 31 81 14 17 fc 6e e2 8b 19 75 8b 36 12 cf 07 6d 76 78 26 5e 27 bf 2c 16 ba 42 fb dd 1e 50 8f 64 af 75 9b 0a 3a 82 a9 31 25 51 8e 7f c4 42 dd 1f 5c 93 91 bb 94 fa 70 57 fa e7 fd b8 b8 68 ca 9b 6a 19 24 54 37 fe 32 61 89 f7 22 c1 8f 63 d5 d1 69 7e 49 4d bc d7 d0 db 4c d6 f6 0f bd c1 88 42 93 d6 91 f9 9f 96 99 11 ea 6e 72 e7 80 21 6c f1 4e 8e ec 63 b8 3d af 65 39 d0 85 92 2a 79 3a 0e d6 e8 ad 9b 25 89 a2 d4 2e 72 6b 73 a1 d2 e2 df ce 58 70 ff c0 54 01 77 5d f9 76 9d 2f 43 da a2 26 dd 1d 42 9a 4d 38 b1 56 fe 3a b4 cb 6b 6c f2 6a 9f 3f b3 ae 3b a7 d0 15 3e ac 27 7f 1b f4 59 60 50 56 7e 9d 75 25 9e 3f c6 76 bf ff 99 cc d8 f1 a9 6a 89 5f de e7 07 cd 8d 8b 02 03 01 00 01 a3 82 01 7f 30 82 01 7b 30 1f 06 03 55 1d 23 04 18 30 16 80 14 53 79 bf 5a aa 2b 4a cf 54 80 e1 d8 9b c0 9d f2 b2 03 66 cb 30 1d 06 03 55 1d 0e 04 16 04 14 5b d0 8a 1c 9a 32 5b e0 b5 dd 96 54 1b e1 86 28 b0 fd b6 bd 30 0e 06 03 55 1d 0f 01 01 ff 04 04 03 02 01 86 30 12 06 03 55 1d 13 01 01 ff 04 08 30 06 01 01 ff 02 01 00 30 1d 06 03 55 1d 25 04 16 30 14 06 08 2b 06 01 05 05 07 03 01 06 08 2b 06 01 05 05 07 03 02 30 2c 06 03 55 1d 20 04 25 30 23 30 0d 06 0b 2b 06 01 04 01 b2 31 01 02 02 1d 30 08 06 06 67 81 0c 01 02 01 30 08 06 06 67 81 0c 01 02 02 30 50 06 03 55 1d 1f 04 49 30 47 30 45 a0 43 a0 41 86 3f 68 74 74 70 3a 2f 2f 63 72 6c 2e 75 73 65 72 74 72 75 73 74 2e 63 6f 6d 2f 55 53 45 52 54 72 75 73 74 52 53 41 43 65 72 74 69 66 69 63 61 74 69 6f 6e 41 75 74 68 6f 72 69 74 7 9 2e 63 72 6c 30 76 06 08 2b 06 01 05 05 07 01 01 04 6a 30 68 30 3f 06 08 2b 06 01 05 05 07 30 02 86 33 68 74 74 70 3a 2f 2f 63 72 74 2e 75 73 65 72 74 72 75 73 74 2e 63 6f 6d 2f 55 53 45 52 54 72 75 73 74 52 53 41 41 64 64 54 72 75 73 74 43 41 2e 63 72 74 30 25 06 08 2b 06 01 05 05 07 30 01 86 19 68 74 74 70 3a 2f 2f 6f 63 73 70 2e 75 73 65 72 74 72 75 73 74 2e 63 6f 6d 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0c 05 00 03 82 02 01 00 7d 90 69 66 56 54 1c 6b 3c ae 7f 25 08 13 e9 bb 64 6c f5 67 88 2f bd c1 51 0a ae d3 63 f6 2d db 70 31 09 00 7e 1d 8b da e4 33 21 98 e0 21 93 db c0 8e 25 8e 55 06 cc 2a 65 e3 03 e8 59 72 27 ae 37 9a 98 7c c2 f4 13 5a 12 71 2d 6d ab df 32 69 81 a7 06 a2 8b 20 1d a8 90 d2 28 aa 61 d4 f6 ff a5 bf 86 80 8e 67 91 2a 22 7e 1d 94 2d 1a 61 bb 20 21 90 89 e8 d5 0a 11 0a f6 08 ba 5e 1b cb 6c 28 85 3e c5 16 0f 65 fd b7 d1 b1 61 c1 a6 25 d8 86 bf 0e fa 9b fa d1 f5 22 a7 67 b8 15 2e f9 08 ad b7 75 02 39 f4 29 61 f9 bf c0 aa 17 eb 42 de 26 8f 9d 65 64 32 07 de 6c 3d 32 d3 03 ec 47 d5 74 69 20 3a 7e b8 70 ef a9 a2 2a 9c 55 42 b6 e3 3e 8b d8 ff 26 5a fb 7c 26 6c 88 85 86 d7 93 3e 50 f8 44 87 d4 50 d1 1d 43 30 32 ba d2 ba 8d 21 08 ca f7 ee c6 6e ce 92 59 08 1c 53 73 74 8f 9c f8 d7 ad 1a be 4d 46 ee ac c4 b9 81 eb a7 50 cc 1d 66 fc 0e 0d 7e 06 1d b8 0e d3 7e bb 9a 87 ae 0b b6 9b 84 04 ce c1 a0 7b 16 df 02 b2 18 43 ad ab b9 26 09 ab aa 04 1d 50 37 ee 2a bd 22 41 8a 00 b5 dc 9f c3 05 d4 e6 82 4c 67 da 2b 02 f5 65 ac 59 29 bb 7a 0c 4e 54 b7 d2 3b 7d 03 3b 20 64 c6 c5 e8 50 2a 92 b0 5f a0 47 97 72 58 5f c1 0a 6f 9f f5 3d 09 d5 e7 08 68 75 92 e2 d5 b8 9e 8f be 8d 1b 3b 43 8c f3 4e d5 54 ab 76 ed cc 50 7f 2e 99 ed b4 b5 49 fa e3 75 7d 8b 11 68 0d d5 3a fa 5d 50 b0 2b 81 03 78 2c b4 db 8f bf 4c 40 5b 92 a3 a2 1a 0a 41 5d ac 57 fa 6e 57 4e f4 07 55 eb 63 08 32 93 00 24 4a 5d 9d c2 c1 52 28 93 c1 c8 24 1a a6 93 fb cd 7d 3f a6 73 bc cf 68 9d 79 63 2e e7 25 2b 42 38 36 b1 0b 56 c2 8a 5f f7 ae 4a 31 d9 df 6a 06 cd 2f a3 98 09 bc 05 80 13 c7 00 05 7b 30 82 05 77 30 82 04 5f a0 03 02 01 02 02 10 13 ea 28 70 5b f4 ec ed 0c 36 63 09 80 61 43 36 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0c 05 00 30 6f 31 0b 30 09 06 03 55 04 06 13 02 53 45 31 14 30 12 06 03 55 04 0a 13 0b 41 64 64 54 72 75 73 74 20 41 42 31 26 30 24 06 03 55 04 0b 13 1d 41 64 64 54 72 75 73 74 20 45 78 74 65 72 6e 61 6c 20 54 54 50 20 4e 65 74 77 6f 72 6b 31 22 30 20 06 03 55 04 03 13 19 41 64 64 54 72 75 73 74 20 45 78 74 65 72 6e 61 6c 20 43 41 20 52 6f 6f 74 30 1e 17 0d 30 30 30 35 33 30 31 30 34 38 33 38 5a 17 0d 32 30 30 35 33 30 31 30 34 38 33 38 5a 30 81 88 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 4e 65 77 20 4a 65 72 73 65 79 31 14 30 12 06 03 55 04 07 13 0b 4a 65 72 73 65 79 20 43 69 74 79 31 1e 30 1c 06 03 55 04 0a 13 15 54 68 65 20 55 53 45 52 54 52 55 53 54 20 4e 65 74 77 6f 72 6b 31 2e 30 2c 06 03 55 04 03 13 25 55 53 45 52 54 72 75 73 74 20 52 53 41 20 43 65 72 74 69 66 69 63 61 74 69 6f 6e 20 41 75 74 68 6f 72 69 74 79 30 82 02 22 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 82 02 0f 00 30 82 02 0a 02 82 02 01 00 80 12 65 17 36 0e c3 db 08 b3 d0 ac 57 0d 76 ed cd 27 d3 4c ad 50 83 61 e2 aa 20 4d 09 2d 64 09 dc ce 89 9f cc 3d a9 ec f6 cf c1 dc f1 d3 b1 d6 7b 37 28 11 2b 47 da 39 c6 bc 3a 19 b4 5f a6 bd 7d 9d a3 63 42 b6 76 f2 a9 3b 2b 91 f8 e2 6f d0 ec 16 20 90 09 3e e2 e8 74 c9 18 b4 91 d4 62 64 db 7f a3 06 f1 88 18 6a 90 22 3c bc fe 13 f0 87 14 7b f6 e4 1f 8e d4 e4 51 c6 11 67 46 08 51 cb 86 14 54 3f bc 33 fe 7e 6c 9c ff 16 9d 18 bd 51 8e 35 a6 a7 66 c8 72 67 db 21 66 b1 d4 9b 78 03 c0 50 3a e8 cc f0 dc bc 9e 4c fe af 05 96 35 1f 57 5a b7 ff ce f9 3d b7 2c b6 f6 54 dd c8 e7 12 3a 4d ae 4c 8a b7 5c 9a b4 b7 20 3d ca 7f 22 34 ae 7e 3b 68 66 01 44 e7 01 4e 46 53 9b 33 60 f7 94 be 53 37 90 73 43 f3 32 c3 53 ef db aa fe 74 4e 69 c7 6b 8c 60 93 de c4 c7 0c df e1 32 ae cc 93 3b 51 78 95 67 8b ee 3d 56 fe 0c d0 69 0f 1b 0f f3 25 26 6b 33 6d f7 6e 47 fa 73 43 e5 7e 0e a5 66 b1 29 7c 32 84 63 55 89 c4 0d c1 93 54 30 19 13 ac d3 7d 37 a7 eb 5d 3a 6c 35 5c db 41 d7 12 da a9 49 0b df d8 80 8a 09 93 62 8e b5 66 cf 25 88 cd 84 b8 b1 3f a4 39 0f d9 02 9e eb 12 4c 95 7c f3 6b 05 a9 5e 16 83 cc b8 67 e2 e8 13 9d cc 5b 82 d3 4c b3 ed 5b ff de e5 73 ac 23 3b 2d 00 bf 35 55 74 09 49 d8 49 58 1a 7f 92 36 e6 51 92 0e f3 26 7d 1c 4d 17 bc c9 ec 43 26 d0 bf 41 5f 40 a9 44 44 f4 99 e7 57 87 9e 50 1f 57 54 a8 3e fd 74 63 2f b1 50 65 09 e6 58 42 2e 43 1a 4c b4 f0 25 47 59 fa 04 1e 93 d4 26 46 4a 50 81 b2 de be 78 b7 fc 67 15 e1 c9 57 84 1e 0f 63 d6 e9 62 ba d6 5f 55 2e ea 5c c6 28 08 04 25 39 b8 0e 2b a9 f2 4c 97 1c 07 3f 0d 52 f5 ed ef 2f 82 0f 02 03 01 00 01 a3 81 f4 30 81 f1 30 1f 06 03 55 1d 23 04 18 30 16 80 14 ad bd 98 7a 34 b4 26 f7 fa c4 26 54 ef 03 bd e0 24 cb 54 1a 30 1d 06 03 55 1d 0e 04 16 04 14 53 79 bf 5a aa 2b 4a cf 54 80 e1 d8 9b c0 9d f2 b2 03 66 cb 30 0e 06 03 55 1d 0f 01 01 ff 04 04 03 02 01 86 30 0f 06 03 55 1d 13 01 01 ff 04 05 30 03 01 01 ff 30 11 06 03 55 1d 20 04 0a 30 08 30 06 06 04 55 1d 20 00 30 44 06 03 55 1d 1f 04 3d 30 3b 30 39 a0 37 a0 35 86 33 68 74 74 70 3a 2f 2f 63 72 6c 2e 75 73 65 72 74 72 75 73 74 2e 63 6f 6d 2f 41 64 64 54 72 75 73 74 45 78 74 65 72 6e 61 6c 43 41 52 6f 6f 74 2e 63 72 6c 30 35 06 08 2b 06 01 05 05 07 01 01 04 29 30 27 30 25 06 08 2b 06 01 05 05 07 30 01 86 19 68 74 74 70 3a 2f 2f 6f 63 73 70 2e 75 73 65 72 74 72 75 73 74 2e 63 6f 6d 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0c 05 00 03 82 01 01 00 93 65 f6 37 83 95 0f 5e c3 82 1c 1f d6 77 e7 3c 8a c0 aa 09 f0 e9 0b 26 f1 e0 c2 6a 75 a1 c7 79 c9 b9 52 60 c8 29 12 0e f0 ad 03 d6 09 c4 76 df e5 a6 81 95 a7 46 da 82 57 a9 95 92 c5 b6 8f 03 22 6c 33 77 c1 7b 32 17 6e 07 ce 5a 14 41 3a 05 24 1b f6 14 06 3b a8 25 24 0e bb cc 2a 75 dd b9 70 41 3f 7c d0 63 36 21 07 1f 46 ff 60 a4 91 e1 67 bc de 1f 7e 19 14 c9 63 67 91 ea 67 07 6b b4 8f 8b c0 6e 43 7d c3 a1 80 6c b2 1e bc 53 85 7d dc 90 a1 a4 bc 2d ef 46 72 57 35 05 bf bb 46 bb 6e 6d 37 99 b6 ff 23 92 91 c6 6e 40 f8 8f 29 56 ea 5f d5 5f 14 53 ac f0 4f 61 ea f7 22 cc a7 56 0b e2 b8 34 1f 26 d9 7b 19 05 68 3f ba 3c d4 38 06 a2 d3 e6 8f 0e e3 b4 71 6d 40 42 c5 84 b4 40 95 2b f4 65 a0 48 79 f6 1d 81 63 96 9d 4f 75 e0 f8 7 c e4 8e a9 d1 f2 ad 8a b3 8c c7 21 cd c2 ef 00 04 3a 30 82 04 36 30 82 03 1e a0 03 02 01 02 02 01 01 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 30 6f 31 0b 30 09 06 03 55 04 06 13 02 53 45 31 14 30 12 06 03 55 04 0a 13 0b 41 64 64 54 72 75 73 74 20 41 42 31 26 30 24 06 03 55 04 0b 13 1d 41 64 64 54 72 75 73 74 20 45 78 74 65 72 6e 61 6c 20 54 54 50 20 4e 65 74 77 6f 72 6b 31 22 30 20 06 03 55 04 03 13 19 41 64 64 54 72 75 73 74 20 45 78 74 65 72 6e 61 6c 20 43 41 20 52 6f 6f 74 30 1e 17 0d 30 30 30 35 33 30 31 30 34 38 33 38 5a 17 0d 32 30 30 35 33 30 31 30 34 38 33 38 5a 30 6f 31 0b 30 09 06 03 55 04 06 13 02 53 45 31 14 30 12 06 03 55 04 0a 13 0b 41 64 64 54 72 75 73 74 20 41 42 31 26 30 24 06 03 55 04 0b 13 1d 41 64 64 54 72 75 73 74 20 45 78 74 65 72 6e 61 6c 20 54 54 50 20 4e 65 74 77 6f 72 6b 31 22 30 20 06 03 55 04 03 13 19 41 64 64 54 72 75 73 74 20 45 78 74 65 72 6e 61 6c 20 43 41 20 52 6f 6f 74 30 82 01 22 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 82 01 0f 00 30 82 01 0a 02 82 01 01 00 b7 f7 1a 33 e6 f2 00 04 2d 39 e0 4e 5b ed 1f bc 6c 0f cd b5 fa 23 b6 ce de 9b 11 33 97 a4 29 4c 7d 93 9f bd 4a bc 93 ed 03 1a e3 8f cf e5 6d 50 5a d6 97 29 94 5a 80 b0 49 7a db 2e 95 fd b8 ca bf 37 38 2d 1e 3e 91 41 ad 70 56 c7 f0 4f 3f e8 32 9e 74 ca c8 90 54 e9 c6 5f 0f 78 9d 9a 40 3c 0e ac 61 aa 5e 14 8f 9e 87 a1 6a 50 dc d7 9a 4e af 05 b3 a6 71 94 9c 71 b3 50 60 0a c7 13 9d 38 07 86 02 a8 e9 a8 69 26 18 90 ab 4c b0 4f 23 ab 3a 4f 84 d8 df ce 9f e1 69 6f bb d7 42 d7 6b 44 e4 c7 ad ee 6d 41 5f 72 5a 71 08 37 b3 79 65 a4 59 a0 94 37 f7 00 2f 0d c2 92 72 da d0 38 72 db 14 a8 45 c4 5d 2a 7d b7 b4 d6 c4 ee ac cd 13 44 b7 c9 2b dd 43 00 25 fa 61 b9 69 6a 58 23 11 b7 a7 33 8f 56 75 59 f5 cd 29 d7 46 b7 0a 2b 65 b6 d3 42 6f 15 b2 b8 7b fb ef e9 5d 53 d5 34 5a 27 02 03 01 00 01 a3 81 dc 30 81 d9 30 1d 06 03 55 1d 0e 04 16 04 14 ad bd 98 7a 34 b4 26 f7 fa c4 26 54 ef 03 bd e0 24 cb 54 1a 30 0b 06 03 55 1d 0f 04 04 03 02 01 06 30 0f 06 03 55 1d 13 01 01 ff 04 05 30 03 01 01 ff 30 81 99 06 03 55 1d 23 04 81 91 30 81 8e 80 14 ad bd 98 7a 34 b4 26 f7 fa c4 26 54 ef 03 bd e0 24 cb 54 1a a1 73 a4 71 30 6f 31 0b 30 09 06 03 55 04 06 13 02 53 45 31 14 30 12 06 03 55 04 0a 13 0b 41 64 64 54 72 75 73 74 20 41 42 31 26 30 24 06 03 55 04 0b 13 1d 41 64 64 54 72 75 73 74 20 45 78 74 65 72 6e 61 6c 20 54 54 50 20 4e 65 74 77 6f 72 6b 31 22 30 20 06 03 55 04 03 13 19 41 64 64 54 72 75 73 74 20 45 78 74 65 72 6e 61 6c 20 43 41 20 52 6f 6f 74 82 01 01 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 82 01 01 00 b0 9b e0 85 25 c2 d6 23 e2 0f 96 06 92 9d 41 98 9c d9 84 79 81 d9 1e 5b 14 07 23 36 65 8f b0 d8 77 bb ac 41 6c 47 60 83 51 b0 f9 32 3d e7 fc f6 26 13 c7 80 16 a5 bf 5a fc 87 cf 78 79 89 21 9a e2 4c 07 0a 86 35 bc f2 de 51 c4 d2 96 b7 dc 7e 4e ee 70 fd 1c 39 eb 0c 02 51 14 2d 8e bd 16 e0 c1 df 46 75 e7 24 ad ec f4 42 b4 85 93 70 10 67 ba 9d 06 35 4a 18 d3 2b 7a cc 51 42 a1 7a 63 d1 e6 bb a1 c5 2b c2 36 be 13 0d e6 bd 63 7e 79 7b a7 09 0d 40 ab 6a dd 8f 8a c3 f6 f6 8c 1a 42 05 51 d4 45 f5 9f a7 62 21 68 15 20 43 3c 99 e7 7c bd 24 d8 a9 91 17 73 88 3f 56 1b 31 38 18 b4 71 0f 9a cd c8 0e 9e 8e 2e 1b e1 8c 98 83 cb 1f 31 f1 44 4c c6 04 73 49 76 60 0f c7 f8 bd 17 80 6b 2e e9 cc 4c 0e 5a 9a 79 0f 20 0a 2e d5 9e 63 26 1e 55 92 94 d8 82 17 5a 7b d0 bc c7 8f 4e 86 04 TLS: tls_verify_cb - preverify_ok=1 err=20 (unable to get local issuer certificate) ca_cert_verify=0 depth=0 buf='/OU=Domain Control Validated/CN=uweduroam.worc.ac.uk' CTRL-EVENT-EAP-PEER-CERT depth=0 subject='/OU=Domain Control Validated/CN=uweduroam.worc.ac.uk' EAP: Status notification: remote certificate verification (param=success) TLS: tls_verify_cb - preverify_ok=1 err=27 (certificate not trusted) ca_cert_verify=0 depth=0 buf='/OU=Domain Control Validated/CN=uweduroam.worc.ac.uk' CTRL-EVENT-EAP-PEER-CERT depth=0 subject='/OU=Domain Control Validated/CN=uweduroam.worc.ac.uk' EAP: Status notification: remote certificate verification (param=success) TLS: tls_verify_cb - preverify_ok=1 err=21 (unable to verify the first certificate) ca_cert_verify=0 depth=0 buf='/OU=Domain Control Validated/CN=uweduroam.worc.ac.uk' CTRL-EVENT-EAP-PEER-CERT depth=0 subject='/OU=Domain Control Validated/CN=uweduroam.worc.ac.uk' EAP: Status notification: remote certificate verification (param=success) SSL: (where=0x1001 ret=0x1) SSL: SSL_connect:SSLv3 read server certificate A OpenSSL: RX ver=0x301 content_type=22 OpenSSL: Message - hexdump(len=525): 0c 00 02 09 00 80 ba 21 36 8e f9 2c 84 de 07 99 3a 40 99 57 cc 22 d9 a9 ae 0f 9f 7c 07 60 ad cf 80 82 84 98 e0 6b 67 a5 c8 5c 68 96 c8 34 f4 10 93 58 5f d5 84 79 1c ad 10 30 72 18 4a 1c 4f 6f b6 4f 95 92 b5 50 f0 a3 7c cb 37 ca d3 95 1c 54 2d be 44 2c eb c2 b2 e8 57 34 8b 40 d0 a0 f3 94 69 c9 d1 3d 2f 39 61 c4 c7 b2 58 43 b0 66 7c e6 5b 09 1a d3 0d 73 96 3a 8b 42 a8 33 74 8c ba 09 58 59 ec cf 60 5b 00 01 02 00 80 7d ae d1 58 b3 e6 62 08 48 26 fb 75 4c d7 d7 15 aa c2 0b 34 50 8f a2 94 86 b5 d5 49 9b 54 d2 0b f2 e9 7b 3b 64 47 bb 32 91 58 42 d0 dd 40 d7 c1 fb 84 2d 2e 94 d3 90 bd ea 22 94 99 06 ba fb 76 87 7b b9 fe 70 bd 74 7a 22 b7 6b bd 6f 27 8b dc 5d ba 55 42 61 a5 14 b2 91 95 01 5a 69 a7 a9 d3 36 ed 66 27 53 f2 f8 11 9a 25 fe 75 cb b7 d2 d9 43 ce 38 ad 7a 01 19 61 c0 a3 f6 5c 2f 94 1e c6 01 00 90 54 d3 c1 0f 3a 68 ae 38 0c 83 1e 16 9b 77 d2 9a 2a 19 4c 6b 6e b9 f3 21 85 3f 87 cd 83 6f 31 ee 80 7a 16 0b f4 71 33 e4 9f 88 29 74 13 97 c3 a5 ec 16 87 6d ac f3 7a d7 68 c1 99 3d 78 ff b1 50 fb 6b 44 76 de 15 d8 e5 e4 65 7e 02 a6 03 03 92 d6 34 99 bf cb 33 39 75 b9 89 0b dd 68 ef e4 d4 75 b3 7e f7 4c 45 77 6c 6f fa 7b ca 27 9b 8d 90 2d 17 16 48 2d e2 94 e0 a4 a5 bf 8a 82 0a 3e 00 25 77 f1 4b 12 76 4c b2 fa d7 3b fb 52 c3 a5 1b b1 d9 b4 f1 95 d1 d6 d6 03 53 fa ec e4 79 90 81 35 e2 32 33 3f 59 87 3f ad 9a 7c ca 91 f7 38 ef 04 c3 c7 9a 01 ae 61 da 70 f8 05 9d a9 f0 f8 f0 a5 47 d7 a9 93 bb 5f e1 62 7c 5a cd 3d e4 7d fa 5e 35 1a 92 11 b1 84 04 78 54 e7 0d 7f 34 20 ea 38 e5 62 d7 20 1c 98 04 f6 96 a8 0e dd f6 92 ff d7 a8 cd d5 08 b2 a3 3f bf 9d 48 fd 6b 8f 75 SSL: (where=0x1001 ret=0x1) SSL: SSL_connect:SSLv3 read server key exchange A OpenSSL: RX ver=0x301 content_type=22 OpenSSL: Message - hexdump(len=4): 0e 00 00 00 SSL: (where=0x1001 ret=0x1) SSL: SSL_connect:SSLv3 read server done A OpenSSL: TX ver=0x301 content_type=22 OpenSSL: Message - hexdump(len=134): 10 00 00 82 00 80 b8 ec e6 75 6d 39 00 89 cf f7 2b c8 52 a8 48 59 9d b4 6a 31 f0 b3 70 c5 c4 ef 12 b7 25 16 5d b2 00 15 f1 6e 4c 81 00 15 b1 ec 64 b2 19 b0 45 94 53 66 50 25 bb 14 30 1b af ee 19 d7 35 d5 1d 94 08 34 7e 76 70 6a cb fd 5d 06 2c 90 56 17 d0 90 f5 c5 1b a6 aa bd 45 0f 17 c1 fc f9 8b cc d7 39 69 01 1f 92 6f 7e 8f af 49 48 ce 4c 88 26 d6 69 de 41 75 51 3e e8 16 26 f0 b1 c6 24 4f 37 c6 ce SSL: (where=0x1001 ret=0x1) SSL: SSL_connect:SSLv3 write client key exchange A OpenSSL: TX ver=0x301 content_type=20 OpenSSL: Message - hexdump(len=1): 01 SSL: (where=0x1001 ret=0x1) SSL: SSL_connect:SSLv3 write change cipher spec A OpenSSL: TX ver=0x301 content_type=22 OpenSSL: Message - hexdump(len=16): 14 00 00 0c ba 64 45 03 fd 1b 81 86 8b 50 86 75 SSL: (where=0x1001 ret=0x1) SSL: SSL_connect:SSLv3 write finished A SSL: (where=0x1001 ret=0x1) SSL: SSL_connect:SSLv3 flush data SSL: (where=0x1002 ret=0xffffffff) SSL: SSL_connect:error in SSLv3 read finished A SSL: SSL_connect - want more data SSL: 198 bytes pending from ssl_out SSL: 198 bytes left to be sent out (of total 198 bytes) EAP: method process -> ignore=FALSE methodState=MAY_CONT decision=FAIL eapRespData=0x9dc9a40 EAP: EAP entering state SEND_RESPONSE EAP: EAP entering state IDLE EAPOL: SUPP_BE entering state RESPONSE EAPOL: txSuppRsp WPA: eapol_test_eapol_send(type=0 len=208) TX EAP -> RADIUS - hexdump(len=208): 02 07 00 d0 19 80 00 00 00 c6 16 03 01 00 86 10 00 00 82 00 80 b8 ec e6 75 6d 39 00 89 cf f7 2b c8 52 a8 48 59 9d b4 6a 31 f0 b3 70 c5 c4 ef 12 b7 25 16 5d b2 00 15 f1 6e 4c 81 00 15 b1 ec 64 b2 19 b0 45 94 53 66 50 25 bb 14 30 1b af ee 19 d7 35 d5 1d 94 08 34 7e 76 70 6a cb fd 5d 06 2c 90 56 17 d0 90 f5 c5 1b a6 aa bd 45 0f 17 c1 fc f9 8b cc d7 39 69 01 1f 92 6f 7e 8f af 49 48 ce 4c 88 26 d6 69 de 41 75 51 3e e8 16 26 f0 b1 c6 24 4f 37 c6 ce 14 03 01 00 01 01 16 03 01 00 30 6d 87 81 b9 31 f8 be a3 15 28 0f 71 bc 0a e8 f2 bd d8 41 27 e9 ef 8b e0 74 0d 97 b4 80 65 14 92 91 4e ca 08 e4 78 13 e3 3a 54 7b b7 99 35 3b a6 Encapsulating EAP message into a RADIUS packet Copied RADIUS State Attribute Sending RADIUS message to authentication server RADIUS message: code=1 (Access-Request) identifier=7 length=338 Attribute 1 (User-Name) length=11 Value: 'anonymous' Attribute 4 (NAS-IP-Address) length=6 Value: 127.0.0.1 Attribute 31 (Calling-Station-Id) length=19 Value: '02-00-00-00-00-01' Attribute 12 (Framed-MTU) length=6 Value: 1400 Attribute 61 (NAS-Port-Type) length=6 Value: 19 Attribute 77 (Connect-Info) length=24 Value: 'CONNECT 11Mbps 802.11b' Attribute 79 (EAP-Message) length=210 Value: 020700d01980000000c61603010086100000820080b8ece6756d390089cff72bc852a848599db46a31f0b370c5c4ef12b725165db20015f16e4c810015b1ec64b219b0459453665025bb14301bafee19d735d51d9408347e76706acbfd5d062c905617d090f5c51ba6aabd450f17c1fcf98bccd73969011f926f7e8faf4948ce4c8826d669de4175513ee81626f0b1c6244f37c6ce14030100010116030100306d8781b931f8bea315280f71bc0ae8f2bdd84127e9ef8be0740d97b480651492914eca08e47813e33a547bb799353ba6 Attribute 24 (State) length=18 Value: 75a766a373a07f726488f389cf8e8ffd Attribute 80 (Message-Authenticator) length=18 Value: 756a3f06fc00176c8b6a4c4eeab89a40 Next RADIUS client retransmit in 3 seconds EAPOL: SUPP_BE entering state RECEIVE Received 123 bytes from RADIUS server Received RADIUS message RADIUS message: code=11 (Access-Challenge) identifier=7 length=123 Attribute 79 (EAP-Message) length=67 Value: 0108004119001403010001011603010030d2dcc3ba640af84fb59d76273a2001657f5a8a5c0736190b9a61170fda7b0f58ef63f2010817b5e97e239516ae3f17a2 Attribute 80 (Message-Authenticator) length=18 Value: ea1a399c390f5a805ce6bf6eb9db42b6 Attribute 24 (State) length=18 Value: 75a766a372af7f726488f389cf8e8ffd STA 02:00:00:00:00:01: Received RADIUS packet matched with a pending request, round trip time 0.00 sec RADIUS packet matching with station decapsulated EAP packet (code=1 id=8 len=65) from RADIUS server: EAP-Request-PEAP (25) EAPOL: Received EAP-Packet frame EAPOL: SUPP_BE entering state REQUEST EAPOL: getSuppRsp EAP: EAP entering state RECEIVED EAP: Received EAP-Request id=8 method=25 vendor=0 vendorMethod=0 EAP: EAP entering state METHOD SSL: Received packet(len=65) - Flags 0x00 OpenSSL: RX ver=0x301 content_type=20 OpenSSL: Message - hexdump(len=1): 01 OpenSSL: RX ver=0x301 content_type=22 OpenSSL: Message - hexdump(len=16): 14 00 00 0c 7d 0d 50 b7 9f 74 35 07 a5 18 59 ef SSL: (where=0x1001 ret=0x1) SSL: SSL_connect:SSLv3 read finished A SSL: (where=0x20 ret=0x1) SSL: (where=0x1002 ret=0x1) SSL: 0 bytes pending from ssl_out SSL: No Application Data included SSL: No data to be sent out EAP-PEAP: TLS done, proceed to Phase 2 EAP-PEAP: using label 'client EAP encryption' in key derivation EAP-PEAP: Derived key - hexdump(len=64): 46 af af c5 0f 77 50 ba 32 48 63 f5 90 30 35 bb 42 1b 1d 31 7a 52 d0 32 7d f4 c2 56 16 02 f3 e9 df b0 57 3b 71 3c 55 70 91 fd dc fb 69 14 9f a1 03 71 dd 06 7f 52 88 97 07 f1 9e a4 e5 b4 83 f5 EAP-PEAP: Derived Session-Id - hexdump(len=65): 19 54 ec 50 36 93 c9 79 b0 61 56 e9 bc de df a4 63 28 8e 63 da f2 3a 0a ec 47 0d 09 8e 41 94 2d b2 54 ec 50 36 8b ac 33 98 57 c3 da 21 63 1f dd 99 af 93 5c 55 f7 65 a7 d5 51 5c cb 41 69 43 82 3f SSL: Building ACK (type=25 id=8 ver=0) EAP: method process -> ignore=FALSE methodState=MAY_CONT decision=FAIL eapRespData=0x9daf7b8 EAP: EAP entering state SEND_RESPONSE EAP: EAP entering state IDLE EAPOL: SUPP_BE entering state RESPONSE EAPOL: txSuppRsp WPA: eapol_test_eapol_send(type=0 len=6) TX EAP -> RADIUS - hexdump(len=6): 02 08 00 06 19 00 Encapsulating EAP message into a RADIUS packet Copied RADIUS State Attribute Sending RADIUS message to authentication server RADIUS message: code=1 (Access-Request) identifier=8 length=136 Attribute 1 (User-Name) length=11 Value: 'anonymous' Attribute 4 (NAS-IP-Address) length=6 Value: 127.0.0.1 Attribute 31 (Calling-Station-Id) length=19 Value: '02-00-00-00-00-01' Attribute 12 (Framed-MTU) length=6 Value: 1400 Attribute 61 (NAS-Port-Type) length=6 Value: 19 Attribute 77 (Connect-Info) length=24 Value: 'CONNECT 11Mbps 802.11b' Attribute 79 (EAP-Message) length=8 Value: 020800061900 Attribute 24 (State) length=18 Value: 75a766a372af7f726488f389cf8e8ffd Attribute 80 (Message-Authenticator) length=18 Value: d849d7a3e2b30494e8143aeddb1b8c76 Next RADIUS client retransmit in 3 seconds EAPOL: SUPP_BE entering state RECEIVE Received 101 bytes from RADIUS server Received RADIUS message RADIUS message: code=11 (Access-Challenge) identifier=8 length=101 Attribute 79 (EAP-Message) length=45 Value: 0109002b1900170301002005b674b49951ffca62a27efb22404a7564e6582119d87d5a8294c071172d2108 Attribute 80 (Message-Authenticator) length=18 Value: 686aacf664f98422b96b54d4ff454928 Attribute 24 (State) length=18 Value: 75a766a37dae7f726488f389cf8e8ffd STA 02:00:00:00:00:01: Received RADIUS packet matched with a pending request, round trip time 0.00 sec RADIUS packet matching with station decapsulated EAP packet (code=1 id=9 len=43) from RADIUS server: EAP-Request-PEAP (25) EAPOL: Received EAP-Packet frame EAPOL: SUPP_BE entering state REQUEST EAPOL: getSuppRsp EAP: EAP entering state RECEIVED EAP: Received EAP-Request id=9 method=25 vendor=0 vendorMethod=0 EAP: EAP entering state METHOD SSL: Received packet(len=43) - Flags 0x00 EAP-PEAP: received 37 bytes encrypted data for Phase 2 EAP-PEAP: Decrypted Phase 2 EAP - hexdump(len=5): 01 09 00 05 01 EAP-PEAP: received Phase 2: code=1 identifier=9 length=5 EAP-PEAP: Phase 2 Request: type=1 EAP: using real identity - hexdump_ascii(len=9): 75 77 6a 72 73 74 65 73 74 uwjrstest EAP-PEAP: Encrypting Phase 2 data - hexdump(len=14): 02 09 00 0e 01 75 77 6a 72 73 74 65 73 74 SSL: 90 bytes left to be sent out (of total 90 bytes) EAP: method process -> ignore=FALSE methodState=MAY_CONT decision=FAIL eapRespData=0x9dc1ef8 EAP: EAP entering state SEND_RESPONSE EAP: EAP entering state IDLE EAPOL: SUPP_BE entering state RESPONSE EAPOL: txSuppRsp WPA: eapol_test_eapol_send(type=0 len=96) TX EAP -> RADIUS - hexdump(len=96): 02 09 00 60 19 00 17 03 01 00 20 1e 14 80 79 a4 59 10 d9 74 82 c4 b5 6d fb 20 bb e4 73 0b 3c ea 88 c0 48 95 90 be e7 c0 81 dd e5 17 03 01 00 30 44 4b b6 5d e1 31 ba e6 40 62 30 0c 3a f4 c9 c0 f6 d8 6f 29 ef 67 da f4 0f 3d 72 44 84 c0 0d 23 31 f3 78 b3 01 e6 68 07 5c cd 9c f0 a5 1a 41 60 Encapsulating EAP message into a RADIUS packet Copied RADIUS State Attribute Sending RADIUS message to authentication server RADIUS message: code=1 (Access-Request) identifier=9 length=226 Attribute 1 (User-Name) length=11 Value: 'anonymous' Attribute 4 (NAS-IP-Address) length=6 Value: 127.0.0.1 Attribute 31 (Calling-Station-Id) length=19 Value: '02-00-00-00-00-01' Attribute 12 (Framed-MTU) length=6 Value: 1400 Attribute 61 (NAS-Port-Type) length=6 Value: 19 Attribute 77 (Connect-Info) length=24 Value: 'CONNECT 11Mbps 802.11b' Attribute 79 (EAP-Message) length=98 Value: 02090060190017030100201e148079a45910d97482c4b56dfb20bbe4730b3cea88c0489590bee7c081dde51703010030444bb65de131bae64062300c3af4c9c0f6d86f29ef67daf40f3d724484c00d2331f378b301e668075ccd9cf0a51a4160 Attribute 24 (State) length=18 Value: 75a766a37dae7f726488f389cf8e8ffd Attribute 80 (Message-Authenticator) length=18 Value: 2162f33c2c4cd79ce58e6d23006f0619 Next RADIUS client retransmit in 3 seconds EAPOL: SUPP_BE entering state RECEIVE Received 133 bytes from RADIUS server Received RADIUS message RADIUS message: code=11 (Access-Challenge) identifier=9 length=133 Attribute 79 (EAP-Message) length=77 Value: 010a004b19001703010040df13447ce91463d86f57a14b650931a753d23a558b036098a136828563a27b7d4e1f9e4996ef2a1df799d3304b2f1e49e71f5f50159998af10f9bbc51f86b4ea Attribute 80 (Message-Authenticator) length=18 Value: cf2622248169fa75087c48cc5dba5feb Attribute 24 (State) length=18 Value: 75a766a37cad7f726488f389cf8e8ffd STA 02:00:00:00:00:01: Received RADIUS packet matched with a pending request, round trip time 0.00 sec RADIUS packet matching with station decapsulated EAP packet (code=1 id=10 len=75) from RADIUS server: EAP-Request-PEAP (25) EAPOL: Received EAP-Packet frame EAPOL: SUPP_BE entering state REQUEST EAPOL: getSuppRsp EAP: EAP entering state RECEIVED EAP: Received EAP-Request id=10 method=25 vendor=0 vendorMethod=0 EAP: EAP entering state METHOD SSL: Received packet(len=75) - Flags 0x00 EAP-PEAP: received 69 bytes encrypted data for Phase 2 EAP-PEAP: Decrypted Phase 2 EAP - hexdump(len=31): 1a 01 0a 00 1e 10 b5 dc fa 91 af 18 a0 10 1e b7 54 43 96 e3 cb 35 75 77 6a 72 73 74 65 73 74 EAP-PEAP: received Phase 2: code=1 identifier=10 length=35 EAP-PEAP: Phase 2 Request: type=26 EAP-PEAP: Selected Phase 2 EAP vendor 0 method 26 EAP-MSCHAPV2: RX identifier 10 mschapv2_id 10 EAP-MSCHAPV2: Received challenge EAP-MSCHAPV2: Authentication Servername - hexdump_ascii(len=9): 75 77 6a 72 73 74 65 73 74 uwjrstest EAP-MSCHAPV2: Generating Challenge Response Get randomness: len=16 entropy=0 random from os_get_random - hexdump(len=16): 6e a1 74 e1 35 98 78 8e 14 9e 92 a2 3b f1 96 65 random_mix_pool - hexdump(len=20): 0d b9 b1 bf 70 7c bd fa 8b 8c 0a 46 d8 96 87 a4 8e 89 0d 7d random from internal pool - hexdump(len=16): 52 c7 66 0a bf 85 ed d3 d8 c1 5b 8c 5d 36 f0 8e mixed random - hexdump(len=16): 3c 66 12 eb 8a 1d 95 5d cc 5f c9 2e 66 c7 66 eb MSCHAPV2: Identity - hexdump_ascii(len=9): 75 77 6a 72 73 74 65 73 74 uwjrstest MSCHAPV2: Username - hexdump_ascii(len=9): 75 77 6a 72 73 74 65 73 74 uwjrstest MSCHAPV2: auth_challenge - hexdump(len=16): b5 dc fa 91 af 18 a0 10 1e b7 54 43 96 e3 cb 35 MSCHAPV2: peer_challenge - hexdump(len=16): 3c 66 12 eb 8a 1d 95 5d cc 5f c9 2e 66 c7 66 eb MSCHAPV2: username - hexdump_ascii(len=9): 75 77 6a 72 73 74 65 73 74 uwjrstest MSCHAPV2: password - hexdump_ascii(len=9): 77 30 72 63 33 73 74 33 72 w0rc3st3r MSCHAPV2: NT Response - hexdump(len=24): 46 19 af 06 b8 1d 14 26 e5 c7 92 1f e7 51 e5 f4 6b 7e e3 45 6b 3b 0c 7f MSCHAPV2: Auth Response - hexdump(len=20): a8 a6 db ac 49 9d f3 ec f8 ac 62 31 96 55 e4 50 1e ba 3f d4 MSCHAPV2: Master Key - hexdump(len=16): 62 86 5e 57 52 aa 35 8a d3 d8 d6 2e d2 c8 e7 2a EAP-MSCHAPV2: TX identifier 10 mschapv2_id 10 (response) EAP-PEAP: Encrypting Phase 2 data - hexdump(len=68): 02 0a 00 44 1a 02 0a 00 3f 31 3c 66 12 eb 8a 1d 95 5d cc 5f c9 2e 66 c7 66 eb 00 00 00 00 00 00 00 00 46 19 af 06 b8 1d 14 26 e5 c7 92 1f e7 51 e5 f4 6b 7e e3 45 6b 3b 0c 7f 00 75 77 6a 72 73 74 65 73 74 SSL: 122 bytes left to be sent out (of total 122 bytes) EAP: method process -> ignore=FALSE methodState=MAY_CONT decision=FAIL eapRespData=0x9dc1268 EAP: EAP entering state SEND_RESPONSE EAP: EAP entering state IDLE EAPOL: SUPP_BE entering state RESPONSE EAPOL: txSuppRsp WPA: eapol_test_eapol_send(type=0 len=128) TX EAP -> RADIUS - hexdump(len=128): 02 0a 00 80 19 00 17 03 01 00 20 97 9b ca f0 d5 ec 05 ba d2 88 f2 76 57 29 4f 6f 20 cf a1 ef 9d ec 9a 57 8a 1f 32 75 d4 41 40 13 17 03 01 00 50 43 b3 c9 84 97 ca 72 a3 6f 10 2d 95 b6 e9 0a 3b 1d 15 ef fd 52 46 85 5a de f6 35 2a cc c2 47 c7 15 48 51 85 96 71 c8 64 00 f4 53 23 79 29 40 84 80 63 07 d4 e3 f3 ec ed 3a 14 48 f4 6a a9 57 85 01 e4 9f f6 c9 be cd a2 c6 f5 a1 67 78 f5 a1 27 Encapsulating EAP message into a RADIUS packet Copied RADIUS State Attribute Sending RADIUS message to authentication server RADIUS message: code=1 (Access-Request) identifier=10 length=258 Attribute 1 (User-Name) length=11 Value: 'anonymous' Attribute 4 (NAS-IP-Address) length=6 Value: 127.0.0.1 Attribute 31 (Calling-Station-Id) length=19 Value: '02-00-00-00-00-01' Attribute 12 (Framed-MTU) length=6 Value: 1400 Attribute 61 (NAS-Port-Type) length=6 Value: 19 Attribute 77 (Connect-Info) length=24 Value: 'CONNECT 11Mbps 802.11b' Attribute 79 (EAP-Message) length=130 Value: 020a008019001703010020979bcaf0d5ec05bad288f27657294f6f20cfa1ef9dec9a578a1f3275d4414013170301005043b3c98497ca72a36f102d95b6e90a3b1d15effd5246855adef6352accc247c7154851859671c86400f4532379294084806307d4e3f3eced3a1448f46aa9578501e49ff6c9becda2c6f5a16778f5a127 Attribute 24 (State) length=18 Value: 75a766a37cad7f726488f389cf8e8ffd Attribute 80 (Message-Authenticator) length=18 Value: f10446ad9ced748076f215e594db6f06 Next RADIUS client retransmit in 3 seconds EAPOL: SUPP_BE entering state RECEIVE Received 149 bytes from RADIUS server Received RADIUS message RADIUS message: code=11 (Access-Challenge) identifier=10 length=149 Attribute 79 (EAP-Message) length=93 Value: 010b005b190017030100502a5e9a459c709c372df731510a2b08dbe0c532e2a882b7c7672b0a8efcd699ac0737d4e06d39842d469d8fc14ca08de04dbcbf9f84d3c8d36ec379ea39e69b242942805e9ab40af0c4be640da5feb54d Attribute 80 (Message-Authenticator) length=18 Value: c5bc19d90a30e74a10c92064c421318d Attribute 24 (State) length=18 Value: 75a766a37fac7f726488f389cf8e8ffd STA 02:00:00:00:00:01: Received RADIUS packet matched with a pending request, round trip time 0.00 sec RADIUS packet matching with station decapsulated EAP packet (code=1 id=11 len=91) from RADIUS server: EAP-Request-PEAP (25) EAPOL: Received EAP-Packet frame EAPOL: SUPP_BE entering state REQUEST EAPOL: getSuppRsp EAP: EAP entering state RECEIVED EAP: Received EAP-Request id=11 method=25 vendor=0 vendorMethod=0 EAP: EAP entering state METHOD SSL: Received packet(len=91) - Flags 0x00 EAP-PEAP: received 85 bytes encrypted data for Phase 2 EAP-PEAP: Decrypted Phase 2 EAP - hexdump(len=47): 1a 03 0a 00 2e 53 3d 34 37 34 34 46 45 43 43 38 34 31 44 35 31 43 39 33 31 34 38 43 35 38 39 33 35 41 30 38 41 31 32 45 39 33 33 45 46 38 37 EAP-PEAP: received Phase 2: code=1 identifier=11 length=51 EAP-PEAP: Phase 2 Request: type=26 EAP-MSCHAPV2: RX identifier 11 mschapv2_id 10 EAP-MSCHAPV2: Received success EAP-MSCHAPV2: Invalid authenticator response in success request EAP: method process -> ignore=FALSE methodState=MAY_CONT decision=FAIL eapRespData=(nil) EAP: EAP entering state SEND_RESPONSE EAP: No eapRespData available EAP: EAP entering state IDLE EAPOL: startWhen --> 0 EAPOL test timed out EAPOL: EAP key not available EAPOL: EAP Session-Id not available EAP: deinitialize previously used EAP method (25, PEAP) at EAP deinit ENGINE: engine deinit MPPE keys OK: 0 mismatch: 1 FAILURE Best Regards Clement Ogedengbe Network Support Officer Information & Learning Services DDI: 01905 54 2258 ICT Service Desk: 01905 85 7500 University of Worcester Henwick Grove, Worcester WR2 6AJ For further information about opportunities to study at the University of Worcester please visit www.worcester.ac.uk -----Original Message----- From: Freeradius-Users [mailto:freeradius-users-bounces+c.ogedengbe=worc.ac.uk@lists.freeradius.org] On Behalf Of Alan DeKok Sent: 23 February 2015 15:25 To: FreeRadius users mailing list Subject: Re: Sudden User Authentication Rejection as a result Compatibility - error On Feb 23, 2015, at 10:02 AM, Clement Ogedengbe <c.ogedengbe@worc.ac.uk> wrote:

All users are rejected, regardless of client platform or os.

Test it with eapol_test: http://deployingradius.com/scripts/eapol_test/ If that works, then the server is probably OK.

I switched over the NAS to the secondary server when the primary server started to fail and the secondary server (which has similar configuration with one failing) is authentically users successfully. The two servers use the same server certificate.

Please find attached the debug log.

Which shows the client giving up on EAP. So the client thinks there’s something wrong with the server. If only the clients had decent debugging. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Hi Scott, Oops. Thanks Scott. I will send the new password to your personal email address. Best Regards Clement Ogedengbe -----Original Message----- From: Freeradius-Users [mailto:freeradius-users-bounces+c.ogedengbe=worc.ac.uk@lists.freeradius.org] On Behalf Of Scott Armitage Sent: 24 February 2015 14:22 To: FreeRadius users mailing list Subject: Re: Sudden User Authentication Rejection as a result Compatibility - error

On 24 Feb 2015, at 13:47, Clement Ogedengbe <c.ogedengbe@worc.ac.uk> wrote:

I have now tested the server with eapol_test (without certificate validation) and it failed. I tested using the eaptest config below (PEAP & TTLS) : (I have masked out userid & password).

Please find below the eaptest config and script debug output. The Back end Radius server debug output is available at (http://pastebin.com/0Q30F4V4)

Line: 4 - start of a new network block ssid - hexdump_ascii(len=7): 65 78 61 6d 70 6c 65 example key_mgmt: 0x1 eap methods - hexdump(len=16): 00 00 00 00 19 00 00 00 00 00 00 00 00 00 00 00 identity - hexdump_ascii(len=9): 75 77 6a 72 73 74 65 73 74 uwjrstest anonymous_identity - hexdump_ascii(len=9): 61 6e 6f 6e 79 6d 6f 75 73 anonymous password - hexdump_ascii(len=9): 77 30 72 63 33 73 74 33 72 ********

I’d change your password, as you have just exposed it to a public mailing list in hex. regards Scott Armitage

On Mon, Feb 16, 2015 at 11:46:56AM +0000, Clement Ogedengbe wrote:

...

The certificate has not expired and the configuration on the

Recently browsers start to refuse SSL 3.0 cipher suites. Maybe your supplicants do join the trend?

On 16.02.2015 16:43, Alan DeKok wrote:

On Feb 16, 2015, at 8:41 AM, Iliya Peregoudov <iperegudov@cboss.ru> wrote:

...

Recently browsers start to refuse SSL 3.0 cipher suites. Maybe your supplicants do join the trend?

SSL 3.0 has always been forbidden for EAP-TLS, PEAP, etc.

I think you talk about the protocol. I talk about cipher suites. FreeRADIUS disables SSLv2 and SSLv3 *protocols* using SSL_OP_NO_SSLv2 and SSL_OP_NO_SSLv3 OpenSSL context options. But it does not disable SSLv2 and SSLv3 cipher suites. cipher suites are set in eap module configuration as cipher_list = "DEFAULT". This will result in all cipher suites, SSLv2, SSLv3, TLSv1, TLSv1.2, etc. I think Clement can try to set it to cipher_list = "DEFAULT:!SSLv2:!SSLv3". Maybe that helps him, I don't know.