open1x-developers

[Open1x-developers] Direct RADIUS mode and TLS configuration file?

[Tom E. <to...@gr...>]

Hi,

after some changes I now get past the identity exchange up to the Access
Challenge with direct radius on Xsupplicant 2.2.
Xsupplicant fails when it checks if TLS is an allowed method. Would anyone know
why my profile below doesn't cause the TLS method data to be populated?

Config file and first lines of execution are below.

Thanks
Tom



<?xml version="1.0"?>
<XsupplicantConfig version="1.0" generated_data="1/20/07">
	<Globals>
	</Globals>
	<Profiles>
		<Profile>
			<Name>Test TLS profile</Name>
			<Identity>test</Identity>
			<EAP>
				<Type>tls</Type>
				<Trusted_Server>My TLS Server</Trusted_Server>
			
<User_Certificate>/home/tom/gridnet/auth-material/wimaxMfgCert.pem</User_Certificate>
				<User_Key_File>/home/tom/gridnet/auth-material/wimaxMfgKey.pem</User_Key_File>
				<User_Key_Password></User_Key_Password>
			</EAP>
		</Profile>
	</Profiles>

	<Connections>
		<Connection>
			<Name>radius</Name>
			<SSID>my_tls_ssid</SSID>
			<Profile>Test TLS Profile</Profile>
			<Association>
				<Type>Open</Type>
			</Association>
		</Connection>
	</Connections>

	<Trusted_Servers>
		<Trusted_Server>
		</Trusted_Server>
	</Trusted_Servers>

</XsupplicantConfig>




tom@d2007:~/builds/gen2/eclipse/xapp$ src/xsupplicant -d A -f -c
etc/direct-example.conf
Starting XSupplicant v. @VERSION@.@BUILDNUM@
[INIT       ] Tue Jun  8 17:02:08 2010 - Init devices structure.
Parsing connections..
Connection has a name of radius
File /etc/xsupplicant.user.conf can't be accessed
Tue Jun  8 17:02:08 2010 - load-user-config from file /etc/xsupplicant.user.conf
Tue Jun  8 17:02:08 2010 - Unable to load the user's configuration.  No user
specific configuration settings will be available!
Tue Jun  8 17:02:08 2010 - XSupplicant @VERSION@.@BUILDNUM@ started.

Re: [Open1x-developers] Direct RADIUS mode and TLS configuration file?

[Tom E. <to...@gr...>]

Hello xsupplicant developers,

please let me know how I can give you my diff to help fix "Direct RADIUS mode
doesn't work - ID: 2683931"

I just got xsupplicant 2.2 to successfully authenticate in direct mode:
- using EAP-TLS
- against free radius 2.1.9
- some code changes on xsupplicant were necessary, such as adding avp 24 (State)
- new configuration file is included below.

Thanks
Tom



<?xml version="1.0"?>
<XsupplicantConfig version="1.0" generated_data="1/20/07">
	<Globals>
	</Globals>
	<Profiles>
		<Profile>
			<Name>Test TLS profile</Name>
			<Identity>ano...@te...</Identity>
			<EAP>
				<Type>tls</Type>
				<Trusted_Server>My TLS Server</Trusted_Server>
			
<User_Certificate>/home/tom/builds/gen2/eclipse/wpa-client/configuration/sampleCerts/devcertsigned.pem</User_Certificate>
			
<User_Key_File>/home/tom/builds/gen2/eclipse/wpa-client/configuration/sampleCerts/devkey.pem</User_Key_File>
				<Store_Type>FILE</Store_Type>
				<User_Key_Password>sample</User_Key_Password>
			</EAP>
		</Profile>
	</Profiles>

	<Connections>
		<Connection>
			<Name>radius</Name>
			<SSID>my_tls_ssid</SSID>
			<Profile>Test TLS Profile</Profile>
			<Association>
				<Type>Open</Type>
			</Association>
		</Connection>
	</Connections>

	<Trusted_Servers>
		<Trusted_Server>
			<Name>My TLS Server</Name>
			<Store_Type>FILE</Store_Type>
		
<Location>/home/tom/builds/gen2/eclipse/wpa-client/configuration/sampleCerts/rootsrvcert.pem</Location>
			<Common_Name>Grid-Net-Root-CA</Common_Name>
		</Trusted_Server>
	</Trusted_Servers>

</XsupplicantConfig>