[prev in list] [next in list] [prev in thread] [next in thread] 

List:       freeradius-users
Subject:    Re: EAP-TLS and Windows 10 fails for wireless
From:       Arran Cudbard-Bell <a.cudbardb () freeradius ! org>
Date:       2016-06-12 20:49:13
Message-ID: 9F538205-F47F-4640-9F3B-4D54BC82AEB4 () freeradius ! org
[Download RAW message or body]

[Attachment #2 (multipart/signed)]


> On 12 Jun 2016, at 16:38, Stefan Winter <stefan.winter@restena.lu> wrote:
> 
> Hi,
> 
> > I've installed v3.1x and the problem resolved itself.
> > The Wi-fi menu went through the following steps on Windows 10 laptop (the \
> > certificates are already installed and the wireless connection was manually \
> >                 added):
> > * Choose a certificate [Ok]
> > * Checking network requirements
> > * Continue connecting ?
> > If you expect to find acksys in this location, go ahead and connect. Otherwise, \
> > it may be a different network with the same name. [Show certificate details]
> > [Connect] [Cancel]
> > * Checking network requirements
> > And the connection was established.
> > 
> 
> It's funny how some people think that the workflow above equals "it
> works". If Windows asks the "Show cert details / do you expect"
> question, then this means the server certificate and CA chain checks
> *failed* and it's resorting to user-interactive "D'oh, I'm guessing" mode.
> 
> So, security-wise, seeing this workflow means your setup is still
> broken; just more subtly than before.
> 

http://www.slideshare.net/ArranCudbardBell/networkshop44

See slides 6-16 :)

-Arran

Arran Cudbard-Bell <a.cudbardb@freeradius.org>
FreeRADIUS Development Team

FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2


["signature.asc" (signature.asc)]

-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.28
Comment: GPGTools - http://gpgtools.org
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=zIwF
-----END PGP SIGNATURE-----

[Attachment #6 (text/plain)]

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

[prev in list] [next in list] [prev in thread] [next in thread]