Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Android10-11 #12

Open
wants to merge 18 commits into
base: master
Choose a base branch
from
Open

Android10-11 #12

wants to merge 18 commits into from

Conversation

JeGoi
Copy link
Contributor

@JeGoi JeGoi commented Apr 16, 2021

  • Add @RequiresApi for functions
  • Remove extra exceptions
  • Add debug view for certificate and ca for eap peap eap tls and android >= 10
  • Remove javax.security lib

Will remove idea and just use Android Studio

@JeGoi JeGoi added the in progress Not ready yet label Apr 16, 2021
@JeGoi
Copy link
Contributor Author

JeGoi commented Apr 16, 2021

PF Issue on radius.log

Apr 16 16:11:32 pf auth[3109]: (1800) eap_tls: ERROR: TLS Alert read:fatal:unknown CA
Apr 16 16:11:32 pf auth[3109]: (1800) eap_tls: ERROR: TLS_accept: Failed in error
Apr 16 16:11:32 pf auth[3109]: (1800) eap_tls: ERROR: Failed in __FUNCTION__ (SSL_read)
Apr 16 16:11:32 pf auth[3109]: [mac:11:22:33:44:55:66] Rejected user: test
Apr 16 16:11:32 pf auth[3109]: (1800) Login incorrect (eap_tls: TLS Alert read:fatal:unknown CA): [test] (from client 10.1.0.10/32 port 0 cli 11:22:33:44:55:66)

@JeGoi
Copy link
Contributor Author

JeGoi commented Apr 19, 2021

It looks that the issue may be related to lets encrypt and certificate with postal code.

@nqb
Copy link

nqb commented Apr 20, 2021

It looks that the issue may be related to lets encrypt and certificate with postal code.

You can try with Venom code related to dot1x_eap_tls_pfpki: no more postal code or street address.

@JeGoi
Copy link
Contributor Author

JeGoi commented Apr 20, 2021

@nqb thanks. It looks hat it has been fixed in 10.3.0 and we need a public CA to test android PLI.
I am not sure that dot1x_eap_tls_pfpki is using a public CA. I will take a look.

@nqb
Copy link

nqb commented Apr 20, 2021

I am not sure that dot1x_eap_tls_pfpki is using a public CA. I will take a look.

You're right, it's a private CA.

@JeGoi JeGoi removed the in progress Not ready yet label Sep 14, 2022
@JeGoi
Copy link
Contributor Author

JeGoi commented Sep 15, 2022

There is an issue with username that is not saved correctly

@JeGoi JeGoi added the in progress Not ready yet label Sep 15, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
in progress Not ready yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants