rlm_eap_tls: No SSL info available. Waiting for more SSL data

[Alan DeKok]

Norbert Wegener wrote:
> I have setup freeradius-1.1.4 for 802.1x authentication and tested it 
> successfully using eapol_test.
> When I try to authenticate a voip phone, that uses the same certificate 
> as I used before with eapol_test, authentication fails.

  Different implementations, different issues...

> 'Waiting for more SSL data' seems  to be the interesting point.
> freeradius is obviously waiting for some data from the client.

  And the client is probably waiting for more data from FreeRADIUS.

> Is there anything I can configure  on the server side or is this a 
> problem with the switch/ the voip phone?

  I would label it a bug with the client.  But I'm biases.

  My worry is that "fixing" it on the server could mean breaking 802.1x
for other clients.  That's a non-starter.

  Alan DeKok.
--
  http://deployingradius.com       - The web site of the book
  http://deployingradius.com/blog/ - The blog