EAP-TEAP with EAP-TLS/EAP-TLS support in eapol_test
Dave Wang
mythjill at gmail.com
Fri Oct 10 13:12:31 PDT 2025
Hi there,
working on using eapol_test (latest, compiled from git repo) to test
EAP-TEAP support in freeradius,
The sample config in freeradius all works, which covers
mschapv2/eap-tls, mschapv2/mschapv2 cases.
However, we are more interested in using eap-tls for user
authentication, but it seems it always fails on the eapol_test side by
complaining about no private key.
"EAP-TLS: Private key not configured"
sample config as follows.
network={
ssid="example"
key_mgmt=WPA-EAP
eap=TEAP
anonymous_identity="anonymous"
phase1="teap_compat=freeradius,tls_disable_tlsv1_0=1,tls_disable_tlsv1_1=1"
# User auth
phase2="auth=TLS"
identity="dave"
private_key="./certs/machine.p12"
private_key_passwd="123456"
#machine auth
machine_phase2="auth=TLS"
machine_identity="test"
machine_private_key="./certs/machine.p12"
machine_private_key_passwd="123456"
pac_file="./pac"
}
Is this case not covered by the integration test done in early 2025
and not supported in eapol_test?
Regards,
Dave
More information about the Hostap
mailing list