search

pbrah / wpa_supplicant-udmpro

110 stars 24 forks source link

Invalid configuration line 'tls_disable_time_checks=1' #18

Closed zerog2k closed 2 years ago

zerog2k commented 2 years ago

due to the fact UDM-Base does not seem to have a real-time clock, and will have an incorrect date/time upon power loss, in this case I find that wpa_supplicant will throw a cert validity error due to date mismatch on cert vs clock. According to the net, seems like there is an option to help workaround this tls_disable_time_checks, however when attempting to use this, I always get:

Invalid configuration line 'tls_disable_time_checks=1'

I'm not sure if there is a newer version of wpa_supplicant where this works, or what is the issue. From what I can tell we are using 2.9.

For now, while I have my UDM on a battery backup, if I ever experience extended power loss, then I will have to first ssh into the udm to set the date manually, and then it will work.

zerog2k commented 2 years ago

perhaps, I'm not putting this config item in the correct place of the configuration. Maybe it's a sub-config item for some other param? https://github.com/digsrc/wpa_supplicant/blob/master/wpa_supplicant/wpa_supplicant.conf#L976-L998

zerog2k commented 2 years ago

ok I think I figured it out - should be inside the phase1 param, e.g.

    phase1="allow_canned_success=1 tls_disable_time_checks=1"