Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 596780 - net-wireless/wpa_supplicant-2.6: Cannot connect to WPA2-PEAP
Summary: net-wireless/wpa_supplicant-2.6: Cannot connect to WPA2-PEAP
Status: RESOLVED NEEDINFO
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Bjarke Istrup Pedersen (RETIRED)
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2016-10-10 15:15 UTC by Piotr Karbowski (RETIRED)
Modified: 2017-01-24 13:10 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Piotr Karbowski (RETIRED) gentoo-dev 2016-10-10 15:15:23 UTC
After upgrading to wpa_supplicant-2.6 I can no longer authenticate to WPA2-PEAP access point. It does work for regular WPA2 however.

Downgrade to 2.5-r2 fixes it.

fwiw I am using wicd as the interface.

Reproducible: Always

Steps to Reproduce:
]
Comment 1 Bjarke Istrup Pedersen (RETIRED) gentoo-dev 2016-10-10 18:13:10 UTC
Please take this to the upstream mailinglist - bugs in the wpa_supplicant software itself should go there: http://lists.infradead.org/mailman/listinfo/hostap

They know their source code, so they will be able to help resolve the problem.
If they find a bug and comes with a patch, I'll include it in the version we have, to get it fixed :)
Comment 2 Michael Weber (RETIRED) gentoo-dev 2017-01-16 12:19:11 UTC
This hits me with eduroam

network={
        ssid="eduroam"
        key_mgmt=WPA-EAP
        eap=PEAP
        identity="xxx@eduroam.mwn.de"
        anonymous_identity="anonymous@mwn.de"
        password="xxx"
        ca_cert="/etc/ssl/public/rootcert.crt"
        subject_match="radius.lrz.de"
        phase2="auth=MSCHAPv2"
        priority=5
}
Comment 3 Piotr Karbowski (RETIRED) gentoo-dev 2017-01-16 17:03:20 UTC
The fix: Replace lowercase v with uppercase V, so

    phase2="auth=MSCHAPv2"

to

    phase2="auth=MSCHAPV2"


There's a discussion somewhere (sorry, cannot find it right now) that wpa_supplicant stopped supporting mistyped auth and now require it to be proper. I've reported it to upstream wicd to bump the PEAP templates too.
Comment 4 Michael Weber (RETIRED) gentoo-dev 2017-01-23 14:02:17 UTC
There might be another problem, too. I setup up a new laptop and neither 2.5 nor 2.6 works with above config (I changed the v2 to V2).
Comment 5 Michael Weber (RETIRED) gentoo-dev 2017-01-24 13:10:13 UTC
(In reply to Michael Weber from comment #4)
> There might be another problem, too. I setup up a new laptop and neither 2.5
> nor 2.6 works with above config (I changed the v2 to V2).

The ca_cert file did not exist on the new machine.

Hint: run the wpa_supplicant with output to stdout without the -B option for more logging

electra ~ # ps ax | grep wpa_supp
...
11185 ?        Ss     0:00 /usr/sbin/wpa_supplicant -c /etc/wpa_supplicant/wpa_supplicant.conf -W -B -i wlan0 -P /run/wpa_supplicant-wlan0.pid
...

electra ~ # /usr/sbin/wpa_supplicant -c /etc/wpa_supplicant/wpa_supplicant.conf -W -B -i wlan0 -P /run/wpa_supplicant-wlan0.pid