Problem on using the binary for windows
Fri Mar 28 02:41:50 PDT 2008
On Fri, Mar 28, 2008 at 05:22:06AM +0800, Jack Yip wrote:
> But I want to test the windows binary if it works with EAP-FAST to CISCO server.
> Do I need to install anything else?
That should not be needed.
> As from the debug msg of the Cisco Server,
> *Mar 3 05:15:49.629: RADSRV EAP-FAST: Add teap client 0013.0224.b8c9
> *Mar 3 05:15:49.629: RADSRV EAP-FAST: Sending TEAP start
> *Mar 3 05:15:49.672: RADSRV EAP-FAST: EAP NAK received, reject the client
> *Mar 3 05:15:49.672: RADSRV EAP-FAST: Delete teap client 0013.0224.b8c9
> It seems it is not even start.
> And from the debug msg of the wpa_supplicat.exe,
> EAP: Initialize selected EAP method: vendor 0 method 43 (FAST)
EAP-FAST is started, but..
> OpenSSL: tls_connection_ca_cert - Failed to load root certificates error:0200100
> 3:system library:fopen:No such process
> OpenSSL: pending error: error:2006D080:BIO routines:BIO_new_file:no such file
It looks like the ca_cert configuration is pointing to a file that does
not exist. Since EAP-FAST is going to use unauthenticated provisioning
in this case, I would suggest just removing the ca_cert option from
Jouni Malinen PGP id EFC895FA
More information about the Hostap