HostAPD RADIUS setup for EAP-FAST / PEAP-TLS and EAP-TTLS-TLS

万青松 wanqingsong_1983
Thu Oct 20 01:35:16 PDT 2011


Please show the error messge, that would be helpful.
Maybe:
 
in hostapd.conf:

ca_cert=/home/ssl/certs/ca.crt.pem

server_cert=/home/ssl/certs/server.crt.pem

private_key=/home/ssl/private/serverkey.pem


I use openssl to generate the *.pem files, if these files have something wrong when you start the hostapd it will report errors.



At 2011-10-20 09:35:33,"Ferguson, Dana R" <Dana.Ferguson at flukenetworks.com> wrote:
>Hi,
>
>I tried enabling the EAP-FAST in the hostapd.conf but the RADIUS server wouldn't start correctly.
>
>As for the EAP-PEAP-TLS and EAP/TTLS-TLS this is the only place I could find that might be where I enable it but every time I add it in it to gives me errors.
>
>Thank you,
>
>Dana 
>
>-----Original Message-----
>From: hostap-bounces at lists.shmoo.com [mailto:hostap-bounces at lists.shmoo.com] On Behalf Of Jouni Malinen
>Sent: Wednesday, October 19, 2011 3:13 PM
>To: hostap at lists.shmoo.com
>Subject: Re: HostAPD RADIUS setup for EAP-FAST / PEAP-TLS and EAP-TTLS-TLS
>
>On Wed, Oct 19, 2011 at 01:43:39PM -0700, Ferguson, Dana R wrote:
>> >From my hostapd.eap_user config.
>
>> # Wildcard for all other identities
>> *					PEAP,TTLS,TLS
>
>Are you enabling EAP-FAST somewhere else?
>
>> # Phase 2 (tunneled within EAP-PEAP or EAP-TTLS) users
>> "test"		PEAP,MD5,GTC,MSCHAPV2,TTLS-PAP,TTLS-CHAP,TTLS-MSCHAP,TTLS-MSCHAPV2		"test"	[2]
>
>This does not enable TLS in phase 2. Do you have that somewhere else to enable PEAP/TLS and EAP-TTLS/TLS?
>
>-- 
>Jouni Malinen                                            PGP id EFC895FA
>_______________________________________________
>HostAP mailing list
>HostAP at lists.shmoo.com
>http://lists.shmoo.com/mailman/listinfo/hostap
>
>
>_______________________________________________
>HostAP mailing list
>HostAP at lists.shmoo.com
>http://lists.shmoo.com/mailman/listinfo/hostap
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.shmoo.com/pipermail/hostap/attachments/20111020/44ed7044/attachment.htm 



More information about the Hostap mailing list