CC3200: EAP-TLS example code

Janet Shen

Expert 7795 points

Part Number: CC3200

Dear Champs,

Does anyone have EAP-TLS example code on CC3200?

We met a error case for running EAP-TLS on CC3200 in freeradius 2.1.12, see below error message.

Debug: WARNING: !! EAP session for state 0x1e64f2ab1e65ffb2 did not finish!

If you have any suggestions, please feel free to let me know.

Thanks a lot.

over 3 years ago

0 Kobi Leibovitch over 3 years ago

TI__Guru 61436 points

Hi Janet,

We don't have specific example. The "ent_wlan" is the closest one but it uses SL_ENT_EAP_METHOD_PEAP1_MSCHAPv2.

For SL_ENT_EAP_METHOD_TLS you will need to add the client certificate (/cert/client.pem) and key (/cert/private.key) as described in chapter 9.1.2 of the user guide (http://www.ti.com/lit/pdf/swru368).

If you still have issues, please provide a more detailed log from the freeradius or the NWP log (https://e2e.ti.com/cfs-file/__key/communityserver-discussions-components-files/968/CC3100-_2600_-CC3200-Capture-NWP-Logs-_2D00_-Texas-Instruments-Wiki.pdf).

Br,

Kobi

0 Janet Shen over 3 years ago in reply to Kobi Leibovitch

TI__Expert 7795 points

Dear Kobi,

Customer had tried "ent_wlan" example code to modify as SL_ENT_EAP_METHOD_TLS and add CA, but it still met problems.

Could I ask your help to look at the log file we captured?

Thanks a lot.

0 Kobi Leibovitch over 3 years ago in reply to Janet Shen

TI__Guru 61436 points

Hi Janet,

It seems like he didn't add the client certificate (and key) which are required for EAP TLS.

Client certificate: /cert/client.pem

Private key: /cert/private.key

0 Janet Shen over 3 years ago in reply to Kobi Leibovitch

TI__Expert 7795 points

Dear Kobi,

Customer actually had added client CA and private key in CC3200.

Why do you mean there is no both files? Do you find any information in log file?

Or any possible wrong steps?

If you have any suggestions, please feel free to let me know.

Thanks a lot.

0 Kobi Leibovitch over 3 years ago in reply to Janet Shen

TI__Guru 61436 points

From the radius server log, it seems that the server requested the client certificate but didn't get one.

This can be explained by not configuring the client certificate correctly on the cc3200.

Please double check the certificate is configured correctly (: /cert/client.pem) and please provide the NWP log (as explained above) so we better understand what is wrong inside the device.

Br,

Kobi

Wi-Fi

Wi-Fi forum

CC3200: EAP-TLS example code