Re: Unable to complete TLS handshake with iwd client

Pat Pat <[email protected]>
Newsgroups gmane.comp.freeradius.user
Message-ID <CANwMcz1w2W91ifSF22Gx9XKrDQm=1SHYGYt=Rt-+utHOuGiXig@mail.gmail.com>
> > I am trying to use freeradius with WPA2-EAP. I have android clients
> > working but using IWD it seems to fail with a TLS handshake error.
>
>  Which version of FreeRADIUS are you using?

I am using 3.2.6 with openssl 3.4.1

>   If one supplicant works, and another one fails, the issue is likely the supplicant.

Hence my quick email to the list. Ell (the library used by IWD) only
supports RSA
certificates for the client, which is most annoying the only place it
is documented is
in the source.

Thanks for the reply.

Cheers

Pat


On Mon, Mar 24, 2025 at 12:06 AM Alan DeKok <[email protected]> wrote:
>
>
> On Mar 23, 2025, at 5:37 AM, Pat Pat <[email protected]> wrote:
> > I am trying to use freeradius with WPA2-EAP. I have android clients
> > working but using IWD it seems to fail with a TLS handshake error.
>
>   Which version of FreeRADIUS are you using?
> >
> > (TLS) Ignoring cbtls_msg call with pseudo content type 256, version 00000303
> > (TLS) Received 2 bytes of TLS data
> > (TLS)        02 28
> > (1) eap_tls: (TLS) TLS - send TLS 1.2 Alert, fatal handshake_failure
> > ERROR: (1) eap_tls: (TLS) TLS - Alert write:fatal:handshake failure
> > ERROR: (1) eap_tls: (TLS) TLS - Server : Error in error
>
>   Something is going wrong in the TLS negotiation.  There isn't much to debug here.
>
>   If one supplicant works, and another one fails, the issue is likely the supplicant.
>
>   Alan DeKok.
>
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.