MonkWho / pfatt

Enable true bridge mode for AT&T U-Verse and pfSense (this is a fork of an original repository https://github.com/aus/pfatt. Since it is not available anymore, I'll do my best to maintain a copy for people that still need a bypass)
438 stars 170 forks source link

`wpa_supplicant`: Private key passphrase needed for SSID #75

Closed owenthewizard closed 2 years ago

owenthewizard commented 2 years ago

I extracted fresh certificates from a BGW210-700. wpa_supplicant fails to authenticated, wpa_cli shows:

<3>CTRL-EVENT-EAP-STATUS status='eap parameter needed' parameter='PASSPHRASE'
<3>CTRL-REQ-PASSPHRASE-0:Private key passphrase needed for SSID 
<3>CTRL-EVENT-EAP-STARTED EAP authentication started
<3>CTRL-EVENT-EAP-STATUS status='started' parameter=''
<3>CTRL-EVENT-EAP-STATUS status='completion' parameter='failure'
<3>CTRL-EVENT-EAP-FAILURE EAP authentication failed
<3>CTRL-EVENT-EAP-STARTED EAP authentication started
<3>CTRL-EVENT-EAP-STATUS status='started' parameter=''
<3>CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=13
<3>CTRL-EVENT-EAP-STATUS status='accept proposed method' parameter='TLS'
<3>CTRL-EVENT-EAP-STATUS status='eap parameter needed' parameter='PASSPHRASE'
<3>CTRL-REQ-PASSPHRASE-0:Private key passphrase needed for SSID 
<3>EAP: Failed to initialize EAP method: vendor 0 method 13 (TLS)
owenthewizard commented 2 years ago

Turns out I'm an idiot...

OpenSSL: tls_connection_ca_cert - Failed to load root certificates error:02001002:system library:fopen:No such file or directory
OpenSSL: pending error: error:2006D080:BIO routines:BIO_new_file:no such file
OpenSSL: pending error: error:0B084002:x509 certificate routines:X509_load_cert_crl_file:system lib
OpenSSL: tls_load_ca_der - Failed load CA in DER format error:02001002:system library:fopen:No such file or directory
OpenSSL: pending error: error:20074002:BIO routines:file_ctrl:system lib
OpenSSL: pending error: error:0B06F002:x509 certificate routines:X509_load_cert_file:system lib

Yeah, I forgot to fix the certificate paths...