Windows 7, wired 802.1x, native EAP-TLS w/o AD, NPS

Timo Buhrmester timo.buhrmester at fhr.fraunhofer.de
Mon Apr 10 15:40:44 CEST 2017


> Then chances are that something's wrong with your client certificate.
Apparently there was something wrong with how the certificate was
imported -- I've tried a different format now (pkcs12), getting me
one step further: The machine does now indeed respond to "Request Identity".

(Before that, importing in .der format, the certificate manager would
hang for a few minutes when importing the cert, but eventually claim
"Import successful".)

The cert is generated by freeradius' makefile, however, the EAP session
stalls and FR complains:
| WARNING: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
| WARNING: !! EAP session for state 0xe0880a2ce3de07a8 did not finish!
| WARNING: !! Please read http://wiki.freeradius.org/guide/Certificate_Compatibility
| WARNING: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
which seems a bit circular, but I'll try to resolve this myself before
asking for further assistence.

Thank you so far,
Timo


More information about the Freeradius-Users mailing list