Re: [Open1x-xsupplicant] TTLS with or without root certificates

[Terry S. <gal...@ma...>]

We strongly recommend against disabling the certificate checks.=A0 The=20=

people running your network should know better than to even suggest=20
that!=A0 It opens you wide up to easy to pull off Man in the Middle=20
attacks.

As for your problem, what version of OpenSSL are you using?=A0 Can you=20=

please provide your Xsupplicant configuration file, and a -d 6 log=20
output?=A0=A0What version of Xsupplicant are you using?


On Sep 17, 2004, at 9:28 AM, sr...@fe... wrote:

> Dear Open1x-XSupplicant users,
>
> I have been using the XSupplicant software in Linux with a CISCO 350=20=

> wireless
> card in a network that uses the PEAP-TTLS/PAP authentication protocol.=20=

> This
> network supports the use of root certificates but also without this=20
> certificate
> (this is the preferred mode). The problem is that, in Linux, when I=20
> try to use
> the XSupplicant program with the configuration line root_cert =3D =
NONE,=20
> I get
> segmentation fault from OpenSSL and as a result the authentication=20
> process
> fails. How can I use this protocol in XSupplicant without the root=20
> certificate?
>
> When I use a root certificate I can successfully authenticate in the=20=

> network,
> but the XSupplicant program starts to use a lot of CPU time, the=20
> conection is
> very slow and it seems from the debug output that it is continually=20
> trying to
> authenticate in the network. Is this some know problem with the=20
> wireless card
> I'm using or is it some problem with the XSupplicant program?
>
> Thanks in advance.
>
> Best regards,
>
> Sergio Rui Silva
>
>
>
>
> -------------------------------------------------------
> This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170
> Project Admins to receive an Apple iPod Mini FREE for your judgement =
on
> who ports your project to Linux PPC the best. Sponsored by IBM.
> Deadline: Sept. 24. Go here: http://sf.net/ppc_contest.php
> _______________________________________________
> Open1x-xsupplicant mailing list
> Ope...@li...
> https://lists.sourceforge.net/lists/listinfo/open1x-xsupplicant