Ipad 7.0.4 EAP-TTLS PAP Problem

[Puzzel]

It looks like ipads (and maybe other apple devices) needs Root and all
intermediate certificates.
Maybe it's some kind of bug i don't know, but i solved it this way and
device connect properly (ipad mini soft 7.0.3).

-----Original Message-----
From: freeradius-users-bounces+puzzel1982=gmail.com at lists.freeradius.org
[mailto:freeradius-users-bounces+puzzel1982=gmail.com at lists.freeradius.org]
On Behalf Of Alan DeKok
Sent: Wednesday, October 01, 2014 3:43 PM
To: FreeRadius users mailing list
Subject: Re: Ipad 7.0.4 EAP-TTLS PAP Problem

Puzzel wrote:
> When i want to connect from ipad with 7.0.3(11B511) version of 
> firmware i can't connect and in logs i have something like that:
>
> Oct  1 13:06:38 radius radiusd[8232]: TLS Alert read:warning:close 
> notify
> 
> Oct  1 13:06:38 radius radiusd[8232]:     TLS_accept: failed in SSLv3
> read client certificate A
> 
> Oct  1 13:06:38 radius radiusd[8232]: rlm_eap: SSL error 
> error:140940E5:SSL routines:SSL3_READ_BYTES:ssl handshake failure

  That's an OpenSSL issue.  FreeRADIUS just uses OpenSSL to do all of the
TLS / SSL work.  We don't implement SSL ourselves.

> Any other systems this certificate work fine.

  Check the OpenSSL library versions.  The working machine will have a
different version than the non-working machine.  So... update the
non-working machine to the working version of OpenSSL.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html