Re: [Open1x-xsupplicant] TTLS with or without root certificates

[Chris H. <Chr...@ut...>]

Sorry, I am just catching up on the list after taking a few days off.

The reason that Xsupplicant is eating up a lot of CPU, and network
performance is slow has to do with the card you are using.  The Cisco
340/350 cards reset the card each time keys are set.  This causes the
station to be disassociated, and reassociated, which causes a new
authentiction.  As a result, Xsupplicant will appear to be authenticating
constantly, and the only traffic that can flow is if you are lucky enough
to squeeze a packet through before you are disassociated.

The only way to fix this problem is to modify the driver to not reset the
card when new keys are applied.  AFAIK, no one has done this.  (I started
to look in to it, but didn't have enough time.)

Sorry.

----------
Chris "Spanky" Hessing                 Networking
				       University of Utah
Chr...@ut...		       Marriott Library

Friends are people that know everything about you, but love you anyway.





On Fri, 17 Sep 2004 sr...@fe... wrote:

> Dear Open1x-XSupplicant users,
> 
> I have been using the XSupplicant software in Linux with a CISCO 350 wireless
> card in a network that uses the PEAP-TTLS/PAP authentication protocol. This
> network supports the use of root certificates but also without this certificate
> (this is the preferred mode). The problem is that, in Linux, when I try to use
> the XSupplicant program with the configuration line root_cert = NONE, I get
> segmentation fault from OpenSSL and as a result the authentication process
> fails. How can I use this protocol in XSupplicant without the root certificate?
> 
> When I use a root certificate I can successfully authenticate in the network,
> but the XSupplicant program starts to use a lot of CPU time, the conection is
> very slow and it seems from the debug output that it is continually trying to
> authenticate in the network. Is this some know problem with the wireless card
> I'm using or is it some problem with the XSupplicant program?
> 
> Thanks in advance.
> 
> Best regards,
> 
> Sergio Rui Silva 
> 
> 
> 
> 
> -------------------------------------------------------
> This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170
> Project Admins to receive an Apple iPod Mini FREE for your judgement on
> who ports your project to Linux PPC the best. Sponsored by IBM.
> Deadline: Sept. 24. Go here: http://sf.net/ppc_contest.php
> _______________________________________________
> Open1x-xsupplicant mailing list
> Ope...@li...
> https://lists.sourceforge.net/lists/listinfo/open1x-xsupplicant
>