linux - Trying to set up freeradius in eap-tls mode using wpa supplicant -


i trying setup freeraadius in eap-tls mode. using freeradius server , wpa-supplicant client. have installed both packages in ubuntu-14.04.3. using sample certificates provided along freeradius package. use script bootstrap provided in /freerad/raddb/cert . donot know if script signs certificate or not not expert in area. provide paths these certificates in client.conf freeradius , configuration file in wpa-supplicant. following wpa-supplicant configuration using

network={    ssid="your-ssid"   scan_ssid=1   key_mgmt=wpa-eap   eap=tls   identity="alice"   ca_cert="/home/areh/freeradius-server-3.0.11/raddb/certs/ca.pem"   client_cert="/home/areh/freeradius-server-3.0.11/raddb/certs/client.pem"   private_key="/home/areh/freeradius-server-3.0.11/raddb/certs/client.key" } 

i running freeradius using freeradius -x command , eapol_test -c eap-tls.conf -s testing123 wpa-supplicant command.

i receive following error on wpa-supplicant terminal:

openssl: tls_connection_client_cert - ssl_use_certificate_file (der) failed error:0d0680a8:asn1 encoding routines:asn1_check_tlen:wrong tag

openssl: pending error: error:0d07803a:asn1 encoding routines:asn1_item_ex_d2i:nested asn1 error

openssl: pending error: error:140c800d:ssl routines:ssl_use_certificate_file:asn1 lib

openssl: ssl_use_certificate_file (pem) --> ok

openssl: tls_connection_private_key - ssl_use_privatekey_file (der) failed error:0d0680a8:asn1 encoding routines:asn1_check_tlen:wrong tag

openssl: pending error: error:0d08303a:asn1 encoding routines:asn1_template_noexp_d2i:nested asn1 error

openssl: pending error: error:0d0680a8:asn1 encoding routines:asn1_check_tlen:wrong tag

openssl: pending error: error:0d07803a:asn1 encoding routines:asn1_item_ex_d2i:nested asn1 error

openssl: pending error: error:04093004:rsa routines:old_rsa_priv_decode:rsa lib

openssl: pending error: error:0d0680a8:asn1 encoding routines:asn1_check_tlen:wrong tag

openssl: pending error: error:0d07803a:asn1 encoding routines:asn1_item_ex_d2i:nested asn1 error

openssl: pending error: error:140cb00d:ssl routines:ssl_use_privatekey_file:asn1 lib

openssl: tls_connection_private_key - ssl_use_privatekey_file (pem) failed error:0907b068:pem routines:pem_read_bio_privatekey:bad password read

openssl: pending error: error:140cb009:ssl routines:ssl_use_privatekey_file:pem lib

openssl: tls_read_pkcs12 - failed use pkcs#12 file error:0d0680a8:asn1 encoding routines:asn1_check_tlen:wrong tag

openssl: pending error: error:0d07803a:asn1 encoding routines:asn1_item_ex_d2i:nested asn1 error

openssl: failed load private key

tls: failed load private key '/home/areh/freeradius-server-3.0.11/raddb/certs/client.key'

tls: failed set tls connection parameters

i using wpa_supplicant-0.7.3 , tried 2.5 version, freeradius version freeradius-server-3.0.11. appreciate clue or help. debugging using wireshark , can see access-challenge , access-request packets being exchanged never reach next message stage. kindly problem.

the default client key freeradius generates encrypted, need tell eapol_test password is. default password "whatever" - see /home/areh/freeradius-server-3.0.11/raddb/certs/passwords.mk on system.

adding following wpasupplicant config file should make work:

private_key_passwd = "whatever" 

there example wpasupplicant config file ships freeradius in freeradius-server/src/tests/eap-tls.conf.


Comments

Popular posts from this blog

java - Run spring boot application error: Cannot instantiate interface org.springframework.context.ApplicationListener -

reactjs - React router and this.props.children - how to pass state to this.props.children -

Excel VBA "Microsoft Windows Common Controls 6.0 (SP6)" Location Changes -