Date: Sat, 13 Jan 2018 18:07:39 +0700 From: Victor Sudakov <vas@mpeks.tomsk.su> To: Eitan Adler <lists@eitanadler.com> Cc: "freebsd-net@freebsd.org" <freebsd-net@freebsd.org> Subject: Re: Fwd: Re: Quasi-enterprise WiFi network Message-ID: <20180113110739.GA20415@admin.sibptus.transneft.ru> In-Reply-To: <CAF6rxgkDugr=dcYptufVR71Fn9pdAtmxZfKe8QwQpChUN0ckTQ@mail.gmail.com> References: <CAOjFWZ6kYSTKmPHpQqd%2BywrUNVLcG6JNzwFJYPyt5z1H4HeRUw@mail.gmail.com> <20180107180422.GA46756@admin.sibptus.transneft.ru> <52165.108.68.171.12.1515350430.squirrel@cosmo.uchicago.edu> <CAOjFWZ5j%2BixKVc0cy6ik=BuU0nmpdUgFyePAVDouKmS=MM9vOg@mail.gmail.com> <20180108072035.GB52442@admin.sibptus.transneft.ru> <CAOjFWZ6XY2pHaVUqwSxL=hK9VdKh0ZdFMeHMdbhsDC=z8zngYw@mail.gmail.com> <20180113095553.GA19901@admin.sibptus.transneft.ru> <CAF6rxgkDugr=dcYptufVR71Fn9pdAtmxZfKe8QwQpChUN0ckTQ@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Eitan Adler wrote: > On 13 January 2018 at 01:55, Victor Sudakov <vas@mpeks.tomsk.su> wrote: > > > > > > Are there any network experts willing to look at the dump of RADIUS > > traffic at http://noc.sibptus.ru/~sudakov/radius.pcap ? > > > >From wireshark: PEAP / EAP-MD5-CHALLENGE Eitan, do you mean it's EAP-MD5 encapsulated in PEAP (TLS tunnel)? Why is the client not checking the server's certificate authenticity and how do I make the client check it against a CA (if I need to)? -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN AS43859
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20180113110739.GA20415>