Certificate problem between 3.0.11 and 3.1.x

[Arran Cudbard-Bell]

> On 15 Mar 2016, at 15:41, Arran Cudbard-Bell <a.cudbardb at freeradius.org> wrote:
> 
> 
>> On 15 Mar 2016, at 15:14, Jonathan Gazeley <Jonathan.Gazeley at bristol.ac.uk> wrote:
>> 
>> I've been migrating our RADIUS estate from 2.2.9 and 3.0.11 to 3.1.x, built from git. Thanks to help from this list last week I've got eduroam working successfully. I'm now struggling to get another SSID (machine authentication for domain-joined Windows PCs) to work.
>> 
>> I can see that it is printing the warning:
>> 
>> !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
>> !! EAP session 0x2ab6bf0 did not finish!                          !!
>> !! See http://wiki.freeradius.org/guide/Certificate_Compatibility !!
>> !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
> 
> Doesn't look like a certificate problem.  Looks like inner EAP method
> negotiation failing (client doesn't respond).

Any idea what machine auth actually is.  Is it something weird like EAP-TLS in EAP-TLS?

Could be an MTU issue if that's the case.

-Arran

Arran Cudbard-Bell <a.cudbardb at freeradius.org>
FreeRADIUS development team

FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 872 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20160315/c7d1a442/attachment.sig>