EAP-TLS + WPA: no reply from AP

[Jouni Malinen]

On Thu, Apr 15, 2010 at 05:33:46PM +0200, Nicolas Courtel wrote:

> The config file is the following:

>     identity="tortu.tls.cena.fr"

Are you sure that this is your user name? Does it match with the subject
name in the client certificate that you are using?

> EAP: EAP-Request Identity data - hexdump_ascii(len=0):
> EAP: using real identity - hexdump_ascii(len=17):
>      74 6f 72 74 75 2e 74 6c 73 2e 63 65 6e 61 2e 66   tortu.tls.cena.f
>      72                                                r              
> EAP: EAP entering state SEND_RESPONSE
> EAP: EAP entering state IDLE
> EAPOL: SUPP_BE entering state RESPONSE
> EAPOL: txSuppRsp
> TX EAPOL: dst=00:1d:7e:a0:65:6a
> TX EAPOL - hexdump(len=26): 01 00 00 16 02 00 00 16 01 74 6f 72 74 75 2e 
> 74 6c 73 2e 63 65 6e 61 2e 66 72
> EAPOL: SUPP_BE entering state RECEIVE
> [...]
> Authentication with 00:1d:7e:a0:65:6a timed out.

As far as wpa_supplicant is concerned, everything seems to be fine here
and the authentication server is just not replying when this identity is
used.

-- 
Jouni Malinen                                            PGP id EFC895FA