WPA_SUPPLICANT: How to give the path of certificates in Windows Mobile

[Vijay Swami]

Hi,
   Thanks for your reply..
    I am giving the path in this format
"client_cert=\"\\Certificates\\newclientcert.p12\"\n".
   I have created one folder "Certificates" inside File explorer and i have
dumped the 1) newcacert.cer 2) newclientcert.p12 and installed the same on
the device. I could see from logs that  newcacert.cer  is getting loaded
properly.
TLS: using phase1 config options
OpenSSL: __func__ not defined - Failed to load root certificates
error:00000000:lib(0):func(0):reason(0)
OpenSSL: __func__ not defined - loaded DER format CA certificate
OpenSSL: __func__ not defined - SSL_use_certificate_file (DER) failed
error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag
OpenSSL: pending error: error:0D07803A:asn1 encoding
routines:ASN1_ITEM_EX_D2I:nested asn1 error
OpenSSL: pending error: error:0D08303A:asn1 encoding
routines:ASN1_TEMPLATE_NOEXP_D2I:nested asn1 error
OpenSSL: pending error: error:140C800D:SSL
routines:SSL_use_certificate_file:ASN1 lib
OpenSSL: __func__ not defined - SSL_use_certi

I have given the path for newcacert.cer =
"ca_cert=\"\\Certificates\\newcacert.cer\"\n"
and
i have given the path for newclientcert.p12 =
 "client_cert=\"\\Certificates\\newclientcert.p12\"\n".

First one is getting loaded properly (From log i can say). Can you suggest
some way.
Regards,
Vijay Swami

On Thu, Aug 26, 2010 at 5:57 PM, Jouni Malinen <j at w1.fi> wrote:

> On Thu, Aug 26, 2010 at 04:43:56PM +0530, Vijay Swami wrote:
> >    I am facing one stupid problem. I have ported the WPA_SUPPLICANT on
> > Windows Mobile. I am using HTC Touch  Pro for testing. I have installed
> the
> > test certificates on device. I can see installed certificates in
> > Settings->All Settings->System->Certificates->Root. I am not able to give
> > the proper path of that certificates in the code For that i am
> > getting following error:
>
> > OpenSSL: __func__ not defined - SSL_use_certificate_file (DER) failed
> > error:02001002:system library:fopen:No such file or directory
>
> What path did you use with the certificate? Is the certificate in the
> certificate store instead of a file in the file system? Currently,
> wpa_supplicant supports Windows certificate store for loading CA
> certificates. In other words, you can set ca_cert parameter to
> "cert_store://CA" or "cert_store://ROOT" (etc.) based on where you have
> the CA certificate(s). As far as client certificate and private key are
> concerned, you can use cert:// or hash:// prefixes in private_key (note:
> client_cert is left out from configuration). Take a look at
> wpa_supplicant.conf for more information on how to select which
> certificate/private key is used.
>
> --
> Jouni Malinen                                            PGP id EFC895FA
> _______________________________________________
> HostAP mailing list
> HostAP at lists.shmoo.com
> http://lists.shmoo.com/mailman/listinfo/hostap
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.shmoo.com/pipermail/hostap/attachments/20100826/cb55910b/attachment-0001.htm