[RADIATOR] Radiator / Radmin - EAP TLS certificates on Android phone

Heikki Vatiainen hvn at open.com.au
Wed Jun 18 15:05:41 CDT 2014


On 06/18/2014 02:04 PM, Imanol Fuidio wrote:

> The WiFi configuration is: EAP method TLS, Phase 2 PAP, User
> certificate, Identiy user

Phase 2 PAP looks odd. This would make sense with EAP-TTLS, but I am not
sure what it could mean with EAP-TLS.

> Wed Jun 18 11:49:35 2014: ERR: EAP TLS error: -1, 1, 8592, 0,  22411: 1
> - error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number

Can you try with other settings for Phase 2, such as none, off or
something else to turn off any Phase 2 authentication off. I'd say the
above message might come from something that the client adds and appears
as bad TLS record to the server.

Thanks,
Heikki

-- 
Heikki Vatiainen <hvn at open.com.au>

Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS,
TTLS, PEAP, TNC, WiMAX, RSA, Vasco, Yubikey, MOTP, HOTP, TOTP,
DIAMETER etc. Full source on Unix, Windows, MacOSX, Solaris, VMS,
NetWare etc.


More information about the radiator mailing list