Why Unsupported Phase2 EAP method?

[Michael Kurecka]

I'm getting the following messages

EAP: Received EAP-Request id=70 method=25 vendor=0 vendorMethod=0
EAP: EAP entering state GET_METHOD
EAP: Initialize selected EAP method: vendor 0 method 25 (PEAP)
TLS: Unsupported Phase2 EAP method 'MSCHAPv2'
TLS: Phase2 EAP types - hexdump(len=8): 00 00 00 00 1a 00 00 00
TLS: using phase1 config options
TLS: Trusted root certificate(s) loaded
CTRL-EVENT-EAP-METHOD EAP vendor 0 method 25 (PEAP) selected
EAP: EAP entering state METHOD
SSL: Received packet(len=6) - Flags 0x20
EAP-PEAP: Start (server ver=0, own ver=1)
EAP-PEAP: Using PEAP version 0

with the following config file:

ctrl_interface=/var/run/wpa_supplicant
ap_scan=1
network={
ssid="OSD"
proto=RSN
key_mgmt=WPA-EAP
group=CCMP
eap=PEAP
identity="admin"
password="wpi01"
ca_cert="/etc/cert/TrustedCA.pem"
phase2="auth=MSCHAPv2"
priority=2
}

Why is the

TLS: Unsupported Phase2 EAP method 'MSCHAPv2'

line being displayed? Do I have a problem with my setup?

[Dan Williams]

Post by Michael Kurecka
I'm getting the following messages
EAP: Received EAP-Request id=70 method=25 vendor=0 vendorMethod=0
EAP: EAP entering state GET_METHOD
EAP: Initialize selected EAP method: vendor 0 method 25 (PEAP)
TLS: Unsupported Phase2 EAP method 'MSCHAPv2'

What options have you compiled your wpa_supplicant with? What's
the .config you used to build it, or that your distribution provider
used to build it?

Dan

Post by Michael Kurecka
TLS: Phase2 EAP types - hexdump(len=8): 00 00 00 00 1a 00 00 00
TLS: using phase1 config options
TLS: Trusted root certificate(s) loaded
CTRL-EVENT-EAP-METHOD EAP vendor 0 method 25 (PEAP) selected
EAP: EAP entering state METHOD
SSL: Received packet(len=6) - Flags 0x20
EAP-PEAP: Start (server ver=0, own ver=1)
EAP-PEAP: Using PEAP version 0
ctrl_interface=/var/run/wpa_supplicant
ap_scan=1
network={
ssid="OSD"
proto=RSN
key_mgmt=WPA-EAP
group=CCMP
eap=PEAP
identity="admin"
password="wpi01"
ca_cert="/etc/cert/TrustedCA.pem"
phase2="auth=MSCHAPv2"
priority=2
}
Why is the
TLS: Unsupported Phase2 EAP method 'MSCHAPv2'
line being displayed? Do I have a problem with my setup?
_______________________________________________
HostAP mailing list
http://lists.shmoo.com/mailman/listinfo/hostap

[Dan Williams]

It helps to cc the list too...

CC=gcc
CONFIG_DRIVER_MADWIFI=y
CFLAGS += -I/usr/src/madwifi-0.9.4
OPENSSL_FIPS=1
OPENSSLDIR = /usr/local/ssl/fips
OPENSSLSRCDIR = /usr/src/openssl
LIBCRYPTO = $(OPENSSLDIR)/lib/libcrypto.a
CFLAGS += -I$(OPENSSLDIR)/include
LIBS += -L$(OPENSSLSRCDIR)
LIBS += -L$(OPENSSLDIR)
LIBS += -L/usr/lib
CONFIG_IEEE8021X_EAPOL=y
CONFIG_EAP_MSCHAPV2=y
CONFIG_EAP_TLS=y
CONFIG_EAP_PEAP=y
CONFIG_EAP_TTLS=y
CONFIG_PKCS12=y
CONFIG_CTRL_IFACE=unix
CONFIG_BACKEND=file
CONFIG_MAIN=main
CONFIG_OS=unix
CONFIG_ELOOP=eloop
CONFIG_L2_PACKET=linux
CONFIG_PEERKEY=y
CONFIG_TLS=openssl

[Jouni Malinen]

Post by Michael Kurecka
phase2="auth=MSCHAPv2"
Why is the
TLS: Unsupported Phase2 EAP method 'MSCHAPv2'
line being displayed? Do I have a problem with my setup?

Yes, that should have been MSCHAPV2 (the match is case sensitive).