![]() |
Re: Wifi WPA-EAP problems on Nokia N900
Quote:
You are using EAP-PEAP/EAP-GTC. It means that there are two layers. First is EAP-PEAP which create encrypted TLS tunnel in which is send EAP-GTC. Username (alias identity) is send unencrypted plain-text in EAP-PEAP and this can be sniffed. But password (together with username) is send in EAP-GTC. It is plain-text too, but in second layer, now encrypted with TLS in tunnel (from EAP-PEAP). And in case that TLS is secure, then password is send securely (in encrypted tunnel). |
Re: Wifi WPA-EAP problems on Nokia N900
So today I had access to one of my ISP wifi hotspots and tried the command :
Code:
$ gconftool -s -t boolean /system/osso/connectivity/IAP/<UUID>/EAP_disable_certificate_check true So I was thinking that maybe I had to get the certificate on the N900, and I was asking myself how to do that. From what I got to read on the web about the way EAP-PEAP/EAP-GTC is working and guessing that my ISP is using RADIUS to authenticate the users, am I right by telling that the certificate in question is on the RADIUS server, as the encryption should be between my N900 and that server? Could I use wireshark to get more info about this during the connection to the access point? (I don't know if wireshark exists on the N900). Are there any other methods for me to find the server and the address where I could get that certificate? Oh, and my ISP won't give me more info, as for them it is working (I can connect and I have access to the Internet), so it's my problem if I have a pop-up on the N900. |
Re: Wifi WPA-EAP problems on Nokia N900
Quote:
Quote:
Quote:
|
Re: Wifi WPA-EAP problems on Nokia N900
Quote:
|
Re: Wifi WPA-EAP problems on Nokia N900
you can capture the whole wifi session by first doing an `ifconfig wlan0 up` so that wireshark/dumpcap/tcpdump (depending which you like to use) can find the interface.
connect to your network, and you can then analyze the pcap file on computer (more convenient than on N900 :) ) https://www.wireshark.org/lists/wire.../msg00080.html has the info you need in order to extract the certificate. i could successfully get my organization's CA cert this way. As mentioned earlier, this solution may possibly not work if the certificates passed down by your network are not properly formatted from Maemo's cert manager point of view. |
Re: Wifi WPA-EAP problems on Nokia N900
Finally autoconnect to WPA-EAP networks is working! It has some requirements: all passwords must be set in gconf, all certificates must be encrypted with default password (in certificate dialog = remove password) and all certificates must be valid... basically everything so it will work without any user interaction.
Update is in cssu-devel, see more: http://talk.maemo.org/showthread.php...02#post1502802 |
Re: Wifi WPA-EAP problems on Nokia N900
Will test it on my Freeradius setup
after work :) WPA-EAP at work has the problem reported in my first post here, so can't do. |
Re: Wifi WPA-EAP problems on Nokia N900
:DAh, it's already trying to connect to work network (unsuccessfully of course).
Thanks a mil pali for this one. |
All times are GMT. The time now is 04:23. |
vBulletin® Version 3.8.8