I cannot authenticate to my dorm network using openssl shipped with centos. Rebuilding and installing openssl from Fedora 20 solved the issue. It's wired connection, using IEEE8021X security, authentication via TTLS, PAP. <br />
<br />
The error that happens can be found in /var/log/wpa_supplicant.log. Happens when both trying to connect manually and via NetworkManager.<br />
<br />
Successfully initialized wpa_supplicant<br />
enp1s0f0: Associated with 01:80:c2:00:00:03<br />
enp1s0f0: CTRL-EVENT-EAP-FAILURE EAP authentication failed<br />
enp1s0f0: CTRL-EVENT-EAP-STARTED EAP authentication started<br />
enp1s0f0: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=25 -> NAK<br />
enp1s0f0: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=21<br />
enp1s0f0: CTRL-EVENT-EAP-METHOD EAP vendor 0 method 21 (TTLS) selected<br />
enp1s0f0: CTRL-EVENT-EAP-PEER-CERT depth=1 subject='/C=CZ/ST=Czech Republic/L=Prague/O=Sisal MFF UK/CN=VPN SISAL'<br />
TLS: Certificate verification failed, error 7 (certificate signature failure) depth 0 for '/C=CZ/ST=Czech Republic/O=Sisal MFF UK/CN=spider.kolej.mff.cuni.cz'<br />
enp1s0f0: CTRL-EVENT-EAP-TLS-CERT-ERROR reason=0 depth=0 subject='/C=CZ/ST=Czech Republic/O=Sisal MFF UK/CN=spider.kolej.mff.cuni.cz' err='certificate signature failure'<br />
SSL: SSL3 alert: write (local SSL3 detected an error):fatal:decrypt error<br />
OpenSSL: openssl_handshake - SSL_connect error:0D0C50A1:asn1 encoding routines:ASN1_item_verify:unknown message digest algorithm<br />
OpenSSL: pending error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
↧