Internal TLS/crypto in wpa supplicant

Mahendra Prajapat mahendra.p at samsung.com
Thu Dec 27 01:00:57 EST 2007


Dear Jouni,

Thanx for ur support.

I want to use Internal TLS/crypto in wpa supplicant to test EAP-TLS.
As I  am getting following errors:

TLSv1: Failed to parse private key
TLS: Failed to load private key
TLS: Failed to set TLS connection parameters
EAP-TLS: Failed to initialize SSL.

For testing purpose I require following certificates:
Ca-cert.pem
Ca-key.pem
Client-cert.pem
Client-key.pem
Client's private key password
Server-cert.pem
Server-key.pem
Server's private key password


Can you please send the certificates that you have used for testing Internal
TLS/crypto ?? 

Thanking you in advance..

Regards,
Mahen


-----Original Message-----
From: hostap-bounces+mahendra.p=samsung.com at shmoo.com
[mailto:hostap-bounces+mahendra.p=samsung.com at shmoo.com] On Behalf Of Jouni
Malinen
Sent: Wednesday, October 10, 2007 8:43 AM
To: hostap at shmoo.com
Subject: Re: Internal TLS/crypto in wpa supplicant

On Tue, Oct 09, 2007 at 03:20:39PM +0530, Mahendra Prajapat wrote:

> I m using internal crypto implementation for testing EAP_TLs and i m 
> getting errors.Corresponding significant logs messages are pasted below.

The internal TLS code has somewhat limited support for different formats for
certificates and especially private keys. I would guess that the problem
here was in the private key not being in support format. Which format did
you use for the private key? You will likely need to convert it at least to
use DER encoding and even that may not be enough depending on how the key
was generated.

One thing to note about the internal TLS implementation is that it is still
experimental and lacks some important functionality and testing.
Furthermore, I would highly recommend using the latest available code for it
(which, in this case, means the current git snapshot of the development
branch since there has been a critical bug fix in it since 0.6.0 release).

-- 
Jouni Malinen                                            PGP id EFC895FA
_______________________________________________
HostAP mailing list
HostAP at shmoo.com
http://lists.shmoo.com/mailman/listinfo/hostap





More information about the HostAP mailing list