[pkg-wpa-devel] Bug#668612: Bug#668612: wpasupplicant: ssl bad certificate

[Stefan Lippers-Hollmann]

reopen 668612
forcemerge 668612 561081 579297
tags 668612 + help
thanks

Hi

On Wednesday 23 May 2012, Luis Fernando Llana Díaz wrote:
> Hi Stefan,
>   I am sorry, today I am a bit sick..... what I wrote is wrong
>   What I meant to say is that it worked with the old version that I
> downloaded from squeeze. But it does NOT work with the version from
> unstable. I am sorry for the mistake. I can help you debugging this
> problem because I am really interested in making this work. I have tried
> with nl80211, but it neither works.

Like I mentioned in my previous mail, the best option would be to find 
a system using wpasupplicant >= 0.7.x that is working, ideally Fedora, 
OpenSuSE, eventually Mandriva/ Mageia - Ubuntu is most likely too 
similar to Debian. Ideally we could also test to build wpa 1.0 against 
libssl-dev 0.9.8 XOR gnutls and to rebuild wpasupplicant 0.6.10 against
libssl 1.0.0, but there are a couple of changes which make this 
relatively difficult.

We also can't rule out misconfiguration yet, because I don't see other
contemporary distros packaging wpasupplicant significantly different…
Given these bugreports and assuming that other distros are using
comparable versions of wpasupplicant and openssl, I find it hard t
believe that it's broken for everyone using (contemporary) linux and
eduroam.

Given that no one of us has access to eduroam installs ourselves, nor
have enough information to recreate an eduroam test environment, we
have very limited options to debug this particular issue. 
wpa_supplicant upstream might have more experience to debug this 
problem with you, but the imho the first attempt should be to find 
other linux users at your institution who might have some advice about
configuration problems.

Regards
	Stefan Lippers-Hollmann
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part.
URL: <http://lists.alioth.debian.org/pipermail/pkg-wpa-devel/attachments/20120523/cbc585f1/attachment.pgp>