wpa_supplicant: DH prime sent by server is too short
Philip M. White
pmw at qnan.org
Thu Nov 6 12:10:13 EST 2008
I've been using wpa_supplicant 0.5.7 at my university (with EAP-PEAP) with few
minor problems. My laptop has an Intel 4965 wireless adapter, and I'm using
the latest iwlwifi firmware with kernel 2.6.27. After upgrading to
wpa_supplicant 0.6.4, I'm no longer able to complete the 802.1x authentication
I've captured the output in debug mode:
Seemingly the most important lines are 239-240:
tls_connection_handshake - gnutls_handshake failed -> The Diffie Hellman prime sent by the server is not acceptable (not long enough).
EAP: method process -> ignore=FALSE methodState=MAY_CONT decision=FAIL
This is my configuration:
I've tried with and without a "ca_cert" directive.
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 2317 bytes
Desc: not available
Url : http://lists.shmoo.com/pipermail/hostap/attachments/20081106/eb168739/attachment.bin
More information about the HostAP