Cannot connect to Win10 PC with client certificate (no connection possible)

[uj2.hahn at posteo.de]

  >The Windows system decided that it didn't like the server certificate, 
and stopped doing EAP.

     Where did you get these certs from?  Are you using  the testing 
certs from raddb/certs?  Those *do* work.

I created the certs on my side via the method described in freeradius 
certs folder.

And they do work with my Android devices.
But I will follow the hint and use the testing certs.

Thanks for now
Uwe

Am 14.01.2020 14:42 schrieb Alan DeKok:
> On Jan 14, 2020, at 8:32 AM, uj2.hahn at posteo.de wrote:
>> I installed CA and client certificates on Win 10 Pro client PC and 
>> configured a certificate based WLAN profile via Cisco AP (named 
>> ciscosb) to freeradius. (login via certificate, no password).
>> But I dont't get it to work. PC says "no connection to this network 
>> possible". Windows WLAN report says "Error during authentification of 
>> EAP method type 13. Error: 0x54F. And it also says : Disconnect 
>> reason: explicit Eap error.
> 
>   Ask Windows what "Error 0x54F" means.
> 
>> I'm still not clear where to find the issue: Client PC or Cisco AP or 
>> freeradius configuration.
>> 
>> Here is the log of one connection attempt. Could you please check if 
>> from radius perspective everything looks ok?
>> ...
>> (3) Sent Access-Challenge Id 26 from 192.168.188.50:1812 to 
>> 192.168.188.45:41837 length 0
>> (3)   EAP-Message = 0x010200060d20
>> (3)   Message-Authenticator = 0x00000000000000000000000000000000
>> (3)   State = 0xca374eaecb3543720219c4f185b69853
>> (3) Finished request
>> Waking up in 4.1 seconds.
> 
>   And nothing.
> 
>  The Windows system decided that it didn't like the server
> certificate, and stopped doing EAP.
> 
>   Where did you get these certs from?  Are you using  the testing
> certs from raddb/certs?  Those *do* work.
> 
>   Alan DeKok.
> 
> 
> -
> List info/subscribe/unsubscribe? See 
> http://www.freeradius.org/list/users.html