linux - Trying to set up freeradius in eap-tls mode using wpa supplicant -
i trying setup freeraadius in eap-tls mode. using freeradius server , wpa-supplicant client. have installed both packages in ubuntu-14.04.3. using sample certificates provided along freeradius package. use script bootstrap provided in /freerad/raddb/cert . donot know if script signs certificate or not not expert in area. provide paths these certificates in client.conf freeradius , configuration file in wpa-supplicant. following wpa-supplicant configuration using
network={ ssid="your-ssid" scan_ssid=1 key_mgmt=wpa-eap eap=tls identity="alice" ca_cert="/home/areh/freeradius-server-3.0.11/raddb/certs/ca.pem" client_cert="/home/areh/freeradius-server-3.0.11/raddb/certs/client.pem" private_key="/home/areh/freeradius-server-3.0.11/raddb/certs/client.key" }
i running freeradius using freeradius -x command , eapol_test -c eap-tls.conf -s testing123 wpa-supplicant command.
i receive following error on wpa-supplicant terminal:
openssl: tls_connection_client_cert - ssl_use_certificate_file (der) failed error:0d0680a8:asn1 encoding routines:asn1_check_tlen:wrong tag
openssl: pending error: error:0d07803a:asn1 encoding routines:asn1_item_ex_d2i:nested asn1 error
openssl: pending error: error:140c800d:ssl routines:ssl_use_certificate_file:asn1 lib
openssl: ssl_use_certificate_file (pem) --> ok
openssl: tls_connection_private_key - ssl_use_privatekey_file (der) failed error:0d0680a8:asn1 encoding routines:asn1_check_tlen:wrong tag
openssl: pending error: error:0d08303a:asn1 encoding routines:asn1_template_noexp_d2i:nested asn1 error
openssl: pending error: error:0d0680a8:asn1 encoding routines:asn1_check_tlen:wrong tag
openssl: pending error: error:0d07803a:asn1 encoding routines:asn1_item_ex_d2i:nested asn1 error
openssl: pending error: error:04093004:rsa routines:old_rsa_priv_decode:rsa lib
openssl: pending error: error:0d0680a8:asn1 encoding routines:asn1_check_tlen:wrong tag
openssl: pending error: error:0d07803a:asn1 encoding routines:asn1_item_ex_d2i:nested asn1 error
openssl: pending error: error:140cb00d:ssl routines:ssl_use_privatekey_file:asn1 lib
openssl: tls_connection_private_key - ssl_use_privatekey_file (pem) failed error:0907b068:pem routines:pem_read_bio_privatekey:bad password read
openssl: pending error: error:140cb009:ssl routines:ssl_use_privatekey_file:pem lib
openssl: tls_read_pkcs12 - failed use pkcs#12 file error:0d0680a8:asn1 encoding routines:asn1_check_tlen:wrong tag
openssl: pending error: error:0d07803a:asn1 encoding routines:asn1_item_ex_d2i:nested asn1 error
openssl: failed load private key
tls: failed load private key '/home/areh/freeradius-server-3.0.11/raddb/certs/client.key'
tls: failed set tls connection parameters
i using wpa_supplicant-0.7.3 , tried 2.5 version, freeradius version freeradius-server-3.0.11. appreciate clue or help. debugging using wireshark , can see access-challenge , access-request packets being exchanged never reach next message stage. kindly problem.
the default client key freeradius generates encrypted, need tell eapol_test password is. default password "whatever" - see /home/areh/freeradius-server-3.0.11/raddb/certs/passwords.mk
on system.
adding following wpasupplicant config file should make work:
private_key_passwd = "whatever"
there example wpasupplicant config file ships freeradius in freeradius-server/src/tests/eap-tls.conf
.
Comments
Post a Comment