Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Freeradius and Android 11

    Scheduled Pinned Locked Moved General pfSense Questions
    2 Posts 1 Posters 1.4k Views 1 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • ? Offline
      A Former User
      last edited by

      Hey maybe someone can help me. My wifi setup is WPA2 EAP-PEAP with MSCHAPv2 and i use freeradius package for authentication.
      For the server certificate and CA I used the pfsense cert-manager.
      This was all working fine for multiple different devices (android, ipad, iphone, windows laptops, etc.) but since the latest android 11 update it stopped working for my android device. In this update they disabled the option to choose "do not validate" under the CA certificate.
      I have exported the freeradius CA that I use and installed it on my android such that i can select it but it doesn't work. It tries to connect but it fails and the error in systemlogs is "Login incorrect (Failed retrieving values required to evaluate condition):".
      I also tried changing to EAP-TTLS with MSCHAPv2 with the same results. I haven't tried EAP-TLS because i would prefer not to issue a whole bunch of user certificates.
      Some help would be greatly appreciated

      ? 1 Reply Last reply Reply Quote 0
      • ? Offline
        A Former User @Guest
        last edited by

        @kurisuchan
        Okay never mind I solved it. Apparently when i created the CA I did not fill out all the optional fields.
        So I created a new CA with all fields filled in, also created a new server certificate and also filled in all the fields and now it works.

        1 Reply Last reply Reply Quote 0
        • First post
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.