Help setup hostapd EAP-PEAP

Ghazi Sarhan ghazi at delmonbay.com
Fri Jan 30 07:29:05 EST 2009


Hi list...

I've been trying for more than one week to setup hostapd for EAP-PEAP  
authentication, I searched the internet but couldn't find anything  
can help, my setup as follow:


hostapd.conf:

channel=1
hw_mode=g
bridge=br0
interface=wlan1
driver=nl80211
ssid=test
ieee8021x=1
eap_server=1
eap_user_file=/etc/hostapd/eap_user
server_cert=/etc/hostapd/server.pem
wpa=2
wpa_key_mgmt=WPA-EAP
wpa_pairwise=TKIP
wpa_group_rekey=300
wpa_gmk_rekey=640


eap_user:

# Phase 1 users
"test"  PEAP
# Phase 2
"test"  MSCHAPV2        "123456789"     [2]


hostapd's output:

Configuration file: /etc/hostapd/hostapd.conf
Mode: IEEE 802.11g  Channel: 1  Frequency: 2412 MHz
Using interface wlan1 with hwaddr 00:14:c1:1e:83:5e and ssid 'test'
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
The above comes when I start hostapd

wlan1: STA 00:14:51:ef:91:06 IEEE 802.11: authenticated
wlan1: STA 00:14:51:ef:91:06 IEEE 802.11: associated (aid 1)
SSL: SSL3 alert: write (local SSL3 detected an error):fatal:handshake  
failure
OpenSSL: tls_connection_server_handshake - SSL_accept error: 
1408A0C1:SSL routines:SSL3_GET_CLIENT_HELLO:no shared cipher
SSL: TLS processing failed
wlan1: STA 00:14:51:ef:91:06 IEEE 802.1X: authentication failed - EAP  
type: 0 (Unknown)
wlan1: STA 00:14:51:ef:91:06 IEEE 802.1X: Supplicant used different  
EAP type: 25 (PEAP)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ 
^^^^^^^^^^^^
The above comes when the client tries to authenticate




I can see the problem is related to SSL, but I don't know how to  
solve it.


Help please.




More information about the HostAP mailing list