Hi Heikki, The same test repeated with Second Phase as none and the same problem. As you have said, this should have nothing to do with EAP TLS.
I have repeated the test on an iphone with IOS7 configuring a TLS profile with the CA in der format. The same problem. The log is also in https://gist.github.com/ifdm001/57c03984282f33406aec Thanks for the contribution, Imanol On Wed, Jun 18, 2014 at 10:05 PM, Heikki Vatiainen <h...@open.com.au> wrote: > On 06/18/2014 02:04 PM, Imanol Fuidio wrote: > > > The WiFi configuration is: EAP method TLS, Phase 2 PAP, User > > certificate, Identiy user > > Phase 2 PAP looks odd. This would make sense with EAP-TTLS, but I am not > sure what it could mean with EAP-TLS. > > > Wed Jun 18 11:49:35 2014: ERR: EAP TLS error: -1, 1, 8592, 0, 22411: 1 > > - error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number > > Can you try with other settings for Phase 2, such as none, off or > something else to turn off any Phase 2 authentication off. I'd say the > above message might come from something that the client adds and appears > as bad TLS record to the server. > > Thanks, > Heikki > > -- > Heikki Vatiainen <h...@open.com.au> > > Radiator: the most portable, flexible and configurable RADIUS server > anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, > Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS, > TTLS, PEAP, TNC, WiMAX, RSA, Vasco, Yubikey, MOTP, HOTP, TOTP, > DIAMETER etc. Full source on Unix, Windows, MacOSX, Solaris, VMS, > NetWare etc. > -- Imanol Fuidio Díaz-Maroto Fon Labs R&D engineerimanol.fui...@fon.com skype: imanol.fon
_______________________________________________ radiator mailing list radiator@open.com.au http://www.open.com.au/mailman/listinfo/radiator
