Ipad 7.0.4 EAP-TTLS PAP Problem

[Rui Ribeiro]

Hi Thomas,

Before I forget, please when talking about a problem, be sure to include
the freeradius version.
If in freeradius 3, be sure that in mods-enabled/eap you have commented
ca_file and ca_path. I had the same problem in iOS, and I could *swear* it
was that. Let me know if it helps.

iOS and in particular iPhones are much more picky about this kind of stuff
than other platforms. I could swear that for the intermediate certificates
Terena is giving was the intermediate chain was not there before iOS 8.0.
So I had to build a certificate with the complete chain for the RADIUS
service.

Regards,
Rui Ribeiro
https://www.linkedin.com/pub/rui-ribeiro/16/ab8/434


> Message: 1
> Date: Wed, 1 Oct 2014 13:33:36 +0200
> From: "Puzzel" <puzzel1982 at gmail.com>
> To: "'FreeRadius users mailing list'"
>         <freeradius-users at lists.freeradius.org>
> Subject: Ipad 7.0.4 EAP-TTLS PAP Problem
> Message-ID: <017701cfdd6b$8b6fe8c0$a24fba40$@com>
> Content-Type: text/plain; charset="us-ascii"
>
> Hi there,
>
>
>
> I've got some issue with ipad device.
>
> I have settings EAP-TTLS PAP with working fine certificate tested on
> Windows
> (7,8,8.1), Android etc.
>
> Certificate is from TERENA (Root AdTrust certificate).
>
> When i want to connect from ipad with 7.0.3(11B511) version of firmware i
> can't connect and in logs i have something like that:
>
>
>
> Oct  1 13:06:38 radius radiusd[8232]: TLS Alert read:warning:close notify
>
> Oct  1 13:06:38 radius radiusd[8232]:     TLS_accept: failed in SSLv3 read
> client certificate A
>
> Oct  1 13:06:38 radius radiusd[8232]: rlm_eap: SSL error error:140940E5:SSL
> routines:SSL3_READ_BYTES:ssl handshake failure
>
> Oct  1 13:06:38 radius radiusd[8232]: SSL: SSL_read failed in a system call
> (-1), TLS session fails.
>
>
>
> Any other systems this certificate work fine.
>
>
>
> Tnx for reply
>
> Thomas
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20141002/0a538ed7/attachment-0001.html>