<div style="line-height:1.7;color:#000000;font-size:14px;font-family:arial"> Hi,all. I want to use hostap for WPA EAP-TLS. Here is my .conf file:<br>interface=wlan3<br>bridge=br0<br>driver=nl80211<br>ssid=NormalAP<br>hw_mode=g<br>channel=13<br>ieee8021x=1<br>eapol_version=1<br>eap_server=1<br>eap_user_file=/home/wlan/wlan/hostapd-wpa-tls-tkip/hostapd/hostapd-ap.eap_user<br>ca_cert=/etc/ssl/demoCA/newcerts/cacert.pem<br>server_cert=/etc/ssl/demoCA/newcerts/APcert.pem<br>private_key=/etc/ssl/demoCA/newcerts/serverkey.prv<br>private_key_passwd=wlanwlan<br>#dh_file=/etc/ssl/hostapd.dh.pem<br>wpa=1<br>wpa_key_mgmt=WPA-EAP<br>wpa_pairwise=TKIP<br><br>But the hostap can not derive the key, here is the error message:<br> EAP-TLS: CONTINUE -> SUCCESS<br>EAP: EAP entering state SEND_REQUEST<br>EAP: EAP entering state IDLE<br>EAP: retransmit timeout 3 seconds (from dynamic back off; retransCount=0)<br>IEEE 802.1X: 00:14:78:71:42:67 BE_AUTH entering state REQUEST<br>wlan3: S
TA 00:14:78:71:42:67 IEEE 802.1X: Sending EAP Packet (identifier 166)<br>IEEE 802.1X: 00:14:78:71:42:67 TX status - version=1 type=0 length=49 - ack=1<br>IEEE 802.1X: 10 bytes from 00:14:78:71:42:67<br> IEEE 802.1X: version=1 type=0 length=6<br>EAP: code=2 identifier=166 length=6<br> (response)<br>wlan3: STA 00:14:78:71:42:67 IEEE 802.1X: received EAP packet (code=2 id=166 len=6) from STA: EAP Response-TLS (13)<br>IEEE 802.1X: 00:14:78:71:42:67 BE_AUTH entering state RESPONSE<br>EAP: EAP entering state RECEIVED<br>EAP: parseEapResp: rxResp=1 respId=166 respMethod=13 respVendor=0 respVendorMethod=0<br>EAP: EAP entering state INTEGRITY_CHECK<br>EAP: EAP entering state METHOD_RESPONSE<br>SSL: Received packet(len=6) - Flags 0x00<br>SSL: Received packet: Flags 0x0 Message Length 0<br>EAP-TLS: Client acknowledged final TLS handshake message<br>EAP-TLS: Failed to derive key<br><br>I use similiar conf file for the WPA2 EAP-TLS, it is OK. Where is problem? Thank you!
<br></div><br><br><span title="neteasefooter"><span id="netease_mail_footer"></span></span>