EAP-TEAP with EAP-TLS/EAP-TLS support in eapol_test

Dave Wang mythjill at gmail.com
Fri Oct 10 13:12:31 PDT 2025


Hi there,

working on using eapol_test (latest, compiled from git repo) to test
EAP-TEAP support in freeradius,

The sample config in freeradius all works, which covers
mschapv2/eap-tls, mschapv2/mschapv2 cases.

However, we are more interested in using eap-tls for user
authentication, but it seems it always fails on the eapol_test side by
complaining about no private key.

"EAP-TLS: Private key not configured"

sample config as follows.

network={
        ssid="example"
        key_mgmt=WPA-EAP
        eap=TEAP
        anonymous_identity="anonymous"
        phase1="teap_compat=freeradius,tls_disable_tlsv1_0=1,tls_disable_tlsv1_1=1"
        # User auth
        phase2="auth=TLS"
        identity="dave"
        private_key="./certs/machine.p12"
        private_key_passwd="123456"

        #machine auth
        machine_phase2="auth=TLS"
        machine_identity="test"
        machine_private_key="./certs/machine.p12"
        machine_private_key_passwd="123456"

        pac_file="./pac"
}

Is this case not covered by the integration test done in early 2025
and not supported in eapol_test?

Regards,
Dave



More information about the Hostap mailing list