Strange things with android phone

A.L.M.Buxey at lboro.ac.uk A.L.M.Buxey at lboro.ac.uk
Sat Aug 22 12:18:50 CEST 2015


Hi,

> I have configured and working wifi with eap-tls authentication.
> I want to use another root ca, so I did the following steps.

yep - but if you are making new CAs and addign them to clients, you ALSO have to re-configure your FreeRADIUS
server to use that new CA.  you can see in your logs:

Sat Aug 22 12:05:05 2015 : Auth: Login incorrect (TLS Alert read:fatal:unknown CA): [selen.kjonca] (from client ni port 2 cli 00-08-22-4F-62-54)
Sat Aug 22 12:05:05 2015 : Info: Using Post-Auth-Type REJECT


(and plenty of other 'Unknown CA' messages)


alan


More information about the Freeradius-Users mailing list