martinsta
commented
2 years ago Alan, thanks a lot for this quick fix. It works fine.
Closed martinsta closed 2 years ago
martinsta
commented
2 years ago Alan, thanks a lot for this quick fix. It works fine.
What type of defect/bug is this?
Crash or memory corruption (segv, abort, etc...)
How can the issue be reproduced?
Process/proxy an Access-Request via RadSec to another RADIUS server with an expired server certificate. Platform: 5.10.0-13-amd64 #1 SMP Debian 5.10.106-1 (2022-03-17) GNU/Linux
Log output from the FreeRADIUS daemon
Relevant log output from client utilities
eapol_test -ceap.cfg -a127.0.0.1 -p1812 -stesting123 -t5 -M22:44:66:69:73:69 -C"rad_eap_test + eapol_test"
Reading configuration file 'eap.cfg' Line: 1 - start of a new network block ssid - hexdump_ascii(len=7): 65 78 61 6d 70 6c 65 example
key_mgmt: 0x8 eap methods - hexdump(len=16): 00 00 00 00 19 00 00 00 00 00 00 00 00 00 00 00 identity - hexdump_ascii(len=18): 66 6f 6f 62 61 72 40 65 78 61 6d 70 6c 65 2e 6f foobar@example.o 72 67 rg
anonymous_identity - hexdump_ascii(len=12): 40 65 78 61 6d 70 6c 65 2e 6f 72 67 @example.org
password - hexdump_ascii(len=12): 66 6f 6f 62 61 72 66 6f 6f 62 61 72 foobarfoobar
phase2 - hexdump_ascii(len=16): 61 75 74 68 65 61 70 3d 4d 53 43 48 41 50 56 32 autheap=MSCHAPV2 Priority group 0 id=0 ssid='example' Authentication server 127.0.0.1:1812 RADIUS local address: 127.0.0.1:46079 ENGINE: Loading builtin engines ENGINE: Loading builtin engines EAPOL: SUPP_PAE entering state DISCONNECTED EAPOL: KEY_RX entering state NO_KEY_RECEIVE EAPOL: SUPP_BE entering state INITIALIZE EAP: EAP entering state DISABLED EAPOL: External notification - portValid=0 EAPOL: External notification - portEnabled=1 EAPOL: SUPP_PAE entering state CONNECTING EAPOL: SUPP_BE entering state IDLE EAP: EAP entering state INITIALIZE EAP: EAP entering state IDLE Sending fake EAP-Request-Identity EAPOL: Received EAP-Packet frame EAPOL: SUPP_PAE entering state RESTART EAP: EAP entering state INITIALIZE EAP: EAP entering state IDLE EAPOL: SUPP_PAE entering state AUTHENTICATING EAPOL: SUPP_BE entering state REQUEST EAPOL: getSuppRsp EAP: EAP entering state RECEIVED EAP: Received EAP-Request id=39 method=1 vendor=0 vendorMethod=0 EAP: EAP entering state IDENTITY CTRL-EVENT-EAP-STARTED EAP authentication started EAP: Status notification: started (param=) EAP: EAP-Request Identity data - hexdump_ascii(len=0): EAP: using anonymous identity - hexdump_ascii(len=12): 40 65 78 61 6d 70 6c 65 2e 6f 72 67 @example.org
EAP: EAP entering state SEND_RESPONSE EAP: EAP entering state IDLE EAPOL: SUPP_BE entering state RESPONSE EAPOL: txSuppRsp WPA: eapol_test_eapol_send(type=0 len=17) TX EAP -> RADIUS - hexdump(len=17): 02 27 00 11 01 40 65 78 61 6d 70 6c 65 2e 6f 72 67 Encapsulating EAP message into a RADIUS packet Learned identity from EAP-Response-Identity - hexdump(len=12): 40 65 78 61 6d 70 6c 65 2e 6f 72 67 Sending RADIUS message to authentication server RADIUS message: code=1 (Access-Request) identifier=0 length=141 Attribute 1 (User-Name) length=14 Value: '@example.org' Attribute 4 (NAS-IP-Address) length=6 Value: 127.0.0.1 Attribute 31 (Calling-Station-Id) length=19 Value: '22-44-66-69-73-69' Attribute 12 (Framed-MTU) length=6 Value: 1400 Attribute 61 (NAS-Port-Type) length=6 Value: 19 Attribute 6 (Service-Type) length=6 Value: 2 Attribute 77 (Connect-Info) length=27 Value: 'rad_eap_test + eapol_test' Attribute 79 (EAP-Message) length=19 Value: 0227001101406578616d706c652e6f7267 Attribute 80 (Message-Authenticator) length=18 Value: d8dcc9640d7e5c16f7ec9f79276e520d Next RADIUS client retransmit in 3 seconds EAPOL: SUPP_BE entering state RECEIVE EAPOL: startWhen --> 0 STA 22:44:66:69:73:69: Resending RADIUS message (id=0)
Next RADIUS client retransmit in 6 seconds recvmsg[RADIUS]: Connection refused EAPOL test timed out EAPOL: EAP key not available EAPOL: EAP Session-Id not available WPA: Clear old PMK and PTK MPPE keys OK: 0 mismatch: 1 FAILURE
Backtrace from LLDB or GDB