Fiddling with EAP types...

Marco Gaiarin gaio at lilliput.linux.it
Mon Apr 15 13:00:43 UTC 2024


Mandi! Alan Buxey
  In chel di` si favelave...

>> But, there's some way to debug what the printer (try to) do server side?
> you've kind-of seen all you'll see already - the client starts a
> connection, EAP starts, server says heres a PEAP with cert, client
> says no, I can't do that but I can do 'this' instead
> where 'this' is actually the previously suggested method - because its
> the printers way of saying it isnt happy with the servers cert. so it
> can do PEAP but it cant do the PEAP offered due to the not happy with
> the provided cert.  its a naff implementation.   as previously said,
> install the servers CA/server certs onto the printer.

As just stated, local CA certificates (the one used to sign the freeradius
server certificate) was just loaded on the printer.

I've tried to generate and sign with the same CA a server certificate for
the printer, but (in PCK#12 formatas requested) the printer refuse it
(invalid format, wrong password, ... no a meaningfull error at all).


Still trying...

-- 
  Ci sono 3 professori di statistica che vanno a caccia di lepri.
  ad un tratto ne vedono una. il primo spara... un metro a destra.
  il secondo spara... un metro a sinistra.
  il terzo esclama: "l'abbiamo presa". 			(Gino)




More information about the Freeradius-Users mailing list