Problem on using the binary for windows

[Jouni Malinen]

On Fri, Mar 28, 2008 at 05:22:06AM +0800, Jack Yip wrote:

> But I want to test the windows binary if it works with EAP-FAST to CISCO server.
> Do I need to install anything else?

That should not be needed.

> As from the debug msg of the Cisco Server,
> *Mar  3 05:15:49.629: RADSRV EAP-FAST: Add teap client 0013.0224.b8c9      
> *Mar  3 05:15:49.629: RADSRV EAP-FAST:  Sending TEAP start                 
> *Mar  3 05:15:49.672: RADSRV EAP-FAST:  EAP NAK received, reject the client
> *Mar  3 05:15:49.672: RADSRV EAP-FAST: Delete teap client 0013.0224.b8c9   
> It seems it is not even start.
> 
> And from the debug msg of the wpa_supplicat.exe, 

> EAP: Initialize selected EAP method: vendor 0 method 43 (FAST)                  

EAP-FAST is started, but..

> OpenSSL: tls_connection_ca_cert - Failed to load root certificates error:0200100
> 3:system library:fopen:No such process                                          
> OpenSSL: pending error: error:2006D080:BIO routines:BIO_new_file:no such file   

It looks like the ca_cert configuration is pointing to a file that does
not exist. Since EAP-FAST is going to use unauthenticated provisioning
in this case, I would suggest just removing the ca_cert option from
configuration.

-- 
Jouni Malinen                                            PGP id EFC895FA