Android 2.3.5 supplicants failing after upgrade to FreeRADIUS 2.2.5 from 2.2.0

Robert Franklin rcf34 at
Tue Jun 3 19:47:42 CEST 2014

On 3 Jun 2014, at 06:54, Stefan Winter <stefan.winter at> wrote:

>> I think there's going to be something in the kU / eKU fields that's triggering this.
> Probably. The OP should update (to 2.x branch) or downgrade (to 2.0) his
> eapol_test then though. This "TLS CLient Auth eKU is prohibited" was a
> check which was introduced in wpa_supplicant 2.1, got a fair share of
> bashing, and will go away for 2.2 again.

Trying eapol_test from wpa_supplicant 2.0 works (I've attached the output), so this does appear to be the bug reported before.

Thanks to all for confirming that.

  - Bob

-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: eapol_test_2.0_output.txt
URL: <>
-------------- next part --------------

Bob Franklin   rcf34 at / +44 1223 748479
Networks, University Information Services, University of Cambridge

More information about the Freeradius-Users mailing list