Active Topics

 


Reply
Thread Tools
mikef is offline mikef
2011-05-20 , 06:49
Posts: 2 | Thanked: 0 times | Joined on May 2011
#1
Hi, I haven't been able to figure out how to properly connect to a WPA network which uses EAP-TLS with private keys for authentication/encryption. I am able to import both the CA cert, and the user cert using the "Certificate Manager", however I can't find anywhere to tell the N900 what private key file to use.

I have been able to get a copy of wpa_supplicant running and make that work, however this is not good enough because it requires killing icd2 and wlancond which then means most maemo apps think that there is no network and refuse to do anything. I can't even create a dummy access point and use that because icd2 is not running.

Here is the config I am using for wpa_supplicant, this does work, I just want to make it work through the GUI without using wpa_supplicant.
Code:
network={
  ssid="wifi"
  key_mgmt=WPA-EAP
  pairwise=CCMP
  group=CCMP
  eap=TLS
  identity="mikef@########"
  ca_cert="/etc/ssl/certs/wifi.crt"
  client_cert="/etc/ssl/certs/mike-phone.crt"
  private_key="/etc/ssl/private/mike-phone.pem"
}
 
chemist's Avatar
chemist is offline chemist
2011-05-20 , 10:23
Administrator | Posts: 1,036 | Thanked: 2,019 times | Joined on Sep 2009 @ Germany
#2
Have you tried that one?

http://talk.maemo.org/showpost.php?p...1&postcount=13

Described from here

http://talk.maemo.org/showthread.php?p=881669

The not properly supported EAP-TLS is a real shame!

I just installed the server cert, and left the cert in the settings "none" don't know if it works for privat_keys as well.
__________________
useful links for newcomers: New members say hello, New users start here, Community subforum, Beginners' wiki page, Maemo5 101, FAQ
 
mikef is offline mikef
2011-05-23 , 02:04
Posts: 2 | Thanked: 0 times | Joined on May 2011
#3
Sorry for the late response. I have just now tried out WLAN Tool and it doesn't seem to do what I need. It is only meant to make PAP auth work, not TLS.

It is quite disappointing that EAP-TLS support is broken.
 
Reply

« Previous Thread | Next Thread »

 
Forum Jump


All times are GMT. The time now is 22:51.

Contact Us - Home - Archive - Top