younglo / cyanogenmod4milestone

Automatically exported from code.google.com/p/cyanogenmod4milestone
0 stars 0 forks source link

WPA2 EAP-TLS not working on 7.2.4 #779

Open GoogleCodeExporter opened 8 years ago

GoogleCodeExporter commented 8 years ago
! This is an issue tracker, not a helpdesk !

What is the Mod-Version you are using?[Settings> About> Mod Version]
7.2.4

What steps will reproduce the problem?
1. Enabled WPA2 with EAP-TLS while on 7.2.0
2. Using RootCA certificate with 4096-bit key and SHA384 signature
3. Using Client certificate with 2048-bit key and SHA256 signature
4. This setup is working flawlessly
5. Upgrade to 7.2.4 (including wipe of Dalvik cache and cache partition)
6. WiFi doesn't connect anymore

What is the expected output? What do you see instead?
Expected behavior: Milestone to initiate authentication. RADIUS server to 
successfully authenticate Milestone. WiFi connection successful.
Actual behavior: Milestone display shows that a connection is attempted, but 
immediately fails. RADIUS server doesn't show any indication of activity 
(running "freeradius -X", which should show detailed logging of every single 
EAP request and response message)
AP log doesn't show any indication of association/authentication attempt

What did you do trying to solve the problem?
Disable/enable WiFi. No success.
Forget connection. New connection attempts with default settings (PEAP with 
empty settings) do generate traffic with the RADIUS server, but obviously the 
RADIUS server fails the authentication. After re-selecting TLS, choosing the 
certificates and entering the user name, connection attempts again result in no 
activity in the RADIUS server.

Please provide any additional information below. (/cache/logger, /dev/log)

Original issue reported on code.google.com by bert.bro...@gmail.com on 24 Oct 2012 at 2:19

GoogleCodeExporter commented 8 years ago
Trying 7.2.4b, the issue appears to be resolved. I can now successfully connect 
to my EAP-TLS protected WiFi network.
So, as far as I'm concerned, this issue can be closed.

Thanks,
Bert

Original comment by bert.bro...@gmail.com on 11 Nov 2012 at 1:47