SSL Problem???

[DeYoung, Brandon]

Thanks for the response Alan,
My clients are WinXP SP2 boxes. I have several hundred of these which
had been working fine for the last 6 months...until my server blew up.
In fact I had more problems getting this setup to work with SP1 and made
it a policy for everyone to put SP2 on before I would configure wireless
for them.

Any other thoughts/workarounds?
~Brandon



-----Original Message-----
From: freeradius-users-bounces at lists.freeradius.org
[mailto:freeradius-users-bounces at lists.freeradius.org] On Behalf Of
Jamie Crawford
Sent: Wednesday, August 17, 2005 12:22 PM
To: freeradius-users at lists.freeradius.org; aland at ox.org
Subject: Re: SSL Problem???

In the statement "Odds are they're XP SP2 boxes, where MS broke EAP"
what exactly is broken.  Will XP SP2 not work with PEAP?

thanks,
jamie



Jamie Crawford, MCSE RHCT Network Analyst I
Information Services
Central Missouri State University
Warrensburg, MO 64093
Phone:6605434357 
Email:CRAWFORD at CMSU1.CMSU.EDU

>>> aland at ox.org 08/17/05 2:10 PM >>>
"DeYoung, Brandon" <Brandon.DeYoung at am.sony.com> wrote:
> I *believe* this snippet from my debug output shows the problem:
> 
> ----snip-----
>   eaptls_process returned 3 
>     TLS_accept:error in SSLv3 read client certificate A 
>   rlm_eap_peap: EAPTLS_SUCCESS
> -----snip------
> 
> This would *seem* to indicate a problem with my certificate
generation.

  No, because it returns success.  SSL is looking for a client
certificate, and PEAP doesn't need one.  SSL is then "helpful", and
prints out error messages.

  The rest of your debug log shows that the client just stops talking
to the server.  Odds are they're XP SP2 boxes, where MS broke EAP.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html



- 
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html