现在的位置: 首页 > 综合 > 正文

EAP-TLS认证过程

2018年04月16日 ⁄ 综合 ⁄ 共 19379字 ⁄ 字号 评论关闭

EAP-TLS认证过程如下: 

1)客户端发出EAP-start消息请求认证; 

2)AP发出请求帧,要求客户端输入用户名; 

3)客户机响应请求,将用户名信息通过数据帧发送至AP; 

4)AP将客户端传来的信息重新封装成RADIUSAccessRequest包发送给服务器; 

5)RADIUS服务器验证用户名合法后向客户端发送数字 证书

6)客户端通过数字证书验证服务器的身份; 

7)客户端向服务器发送自己的数字证书; 

8)服务器通过数字证书验证客户端的身份,至此完成相互认证; 

9)在相互认证的过程中,客户端和服务器获得主会话密钥; 

10)认证成功,RADIUS服务器向AP发送RADIUSACCEPT消息,其中包含密钥信息; 

11)AP向客户端转发EAPSuccess消息,认证成功 

虽然EAP-TLS的安全核心是验证数字证书,但是在此之前仍然需要client提供identity以供验证身份的合法性才会开始证书的双向验证,所以需要先在UI上输入identity(username).

EAP-SIM的连接不需要安装证书,identity是以SIM卡的IMEI

EAP

受保护的可扩展的身份验证协议 (PEAP) 是可扩展的身份验证协议 (EAP) 家族的一个新成员。PEAP 使用传输级别安全性 (TLS)在正在验证的 PEAP 客户端(例如无线计算机)和 PEAP 身份验证器(例如 Internet 验证服务 (IAS) 或远程验证拨号用户服务 (RADIUS)
服务器)之间创建加密通道。PEAP 不指定验证方法,但是会为其他 EAP 验证协议提供额外的安全性,例如 EAP-MSCHAPv2 协议,该协议可以通过 PEAP 提供的 TLS 加密通道得以实现。PEAP 用作 802.11 无线客户端计算机的身份验证方法,


整个 EAP 通信,包括 EAP 协商在内,都通过 TLS 通道进行。IAS 服务器对用户和客户端计算机进行身份验证,具体方法由 EAP 类型决定,在 PEAP 内部选择使用(EAP-TLS 或 EAP-MS-CHAPv2)。访问点只会在无线客户端和 RADIUS 服务器之间转发消息,由于不是 TLS 终结点,访问点(或者对它们进行监视的人)无法对这些消息进行解密。

可以在两种 EAP 类型中选择一种与 PEAP 共同使用:EAP-MS-CHAPv2 或 EAP-TLS。EAP-MS-CHAPv2使用凭据(用户名和密码)进行用户身份验证,使用服务器计算机证书存储中的证书进行服务器验证。EAP-TLS使用安装在客户端计算机或智能卡中的证书进行用户和客户端计算机验证,使用服务器计算机证书存储中的证书进行服务器验证。

带 EAP-MS-CHAPv2 (PEAP-EAP-MS-CHAPv2) 的 PEAP 比 EAP-TLS
更易于部署,因为用户身份验证是使用基于密码的凭据(用户名和密码)来完成的,而不是使用证书或智能卡 -- 只有 IAS 或 RADIUS 服务器需要有证书
。另外,服务器证书可以由客户端计算机所信任的公共证书颁发机构 (CA) 颁发(即,公用的 CA 证书已经存在于客户端计算机证书存储中的“受信根证书颁发机构”文件夹内)。在这种情况下,服务器证书不会被下载和添加到客户端受信任的根证书存储中,用户也不会被提示来决定是否信任服务器。
PEAP-EAP-MS-CHAPv2 可以提供比 MS-CHAPv2 更高的安全性,它使用相互身份验证,防止未经授权的服务器协商最不安全的身份验证方法,提供 TLS 生成的密钥。PEAP-EAP-MS-CHAPv2 要求客户端信任服务器提供的证书。

Line 14704: 02-10 15:35:36.011  6385  6385 D wpa_supplicant: EAPOL: SUPP_PAE entering state DISCONNECTED
Line 14705: 02-10 15:35:36.012  6385  6385 D wpa_supplicant: EAPOL: Supplicant port status: Unauthorized
Line 14706: 02-10 15:35:36.012  6385  6385 D wpa_supplicant: EAPOL: KEY_RX entering state NO_KEY_RECEIVE
Line 14707: 02-10 15:35:36.012  6385  6385 D wpa_supplicant: EAPOL: SUPP_BE entering state INITIALIZE
Line 14708: 02-10 15:35:36.012  6385  6385 D wpa_supplicant: EAP: EAP entering state DISABLED
Line 14709: 02-10 15:35:36.012  6385  6385 D wpa_supplicant: EAPOL: Supplicant port status: Unauthorized
Line 14710: 02-10 15:35:36.013  6385  6385 D wpa_supplicant: EAPOL: Supplicant port status: Unauthorized
Line 14861: 02-10 15:35:36.160  6385  6385 D wpa_supplicant: EAPOL: SUPP_PAE entering state DISCONNECTED
Line 14862: 02-10 15:35:36.160  6385  6385 D wpa_supplicant: EAPOL: Supplicant port status: Unauthorized
Line 14863: 02-10 15:35:36.161  6385  6385 D wpa_supplicant: EAPOL: KEY_RX entering state NO_KEY_RECEIVE
Line 14864: 02-10 15:35:36.161  6385  6385 D wpa_supplicant: EAPOL: SUPP_BE entering state INITIALIZE
Line 14865: 02-10 15:35:36.161  6385  6385 D wpa_supplicant: EAP: EAP entering state DISABLED
Line 14866: 02-10 15:35:36.161  6385  6385 D wpa_supplicant: EAPOL: Supplicant port status: Unauthorized
Line 14867: 02-10 15:35:36.162  6385  6385 D wpa_supplicant: EAPOL: Supplicant port status: Unauthorized
Line 16680: 02-10 15:35:36.941  6385  6385 D wpa_supplicant: EAPOL: External notification - EAP success=0
Line 16681: 02-10 15:35:36.941  6385  6385 D wpa_supplicant: EAPOL: Supplicant port status: Unauthorized
Line 16682: 02-10 15:35:36.942  6385  6385 D wpa_supplicant: EAPOL: External notification - EAP fail=0
Line 16683: 02-10 15:35:36.942  6385  6385 D wpa_supplicant: EAPOL: Supplicant port status: Unauthorized
Line 16684: 02-10 15:35:36.942  6385  6385 D wpa_supplicant: EAPOL: External notification - portControl=Auto
Line 16685: 02-10 15:35:36.942  6385  6385 D wpa_supplicant: EAPOL: Supplicant port status: Unauthorized
Line 16979: 02-10 15:35:36.991  6385  6385 D wpa_supplicant: EAPOL: External notification - portEnabled=0
Line 16980: 02-10 15:35:36.991  6385  6385 D wpa_supplicant: EAPOL: Supplicant port status: Unauthorized
Line 16987: 02-10 15:35:36.991  6385  6385 D wpa_supplicant: EAPOL: External notification - portValid=0
Line 16988: 02-10 15:35:36.991  6385  6385 D wpa_supplicant: EAPOL: Supplicant port status: Unauthorized
Line 16989: 02-10 15:35:36.992  6385  6385 D wpa_supplicant: EAPOL: External notification - portEnabled=1
Line 16990: 02-10 15:35:36.992  6385  6385 D wpa_supplicant: EAPOL: SUPP_PAE entering state CONNECTING
Line 16992: 02-10 15:35:36.992  6385  6385 D wpa_supplicant: EAPOL: SUPP_BE entering state IDLE
Line 16993: 02-10 15:35:36.992  6385  6385 D wpa_supplicant: EAP: EAP entering state INITIALIZE
Line 16994: 02-10 15:35:36.992  6385  6385 D wpa_supplicant: EAP: EAP entering state IDLE
Line 17009: 02-10 15:35:36.994  6385  6385 D wpa_supplicant: EAPOL: Received EAP-Packet frame
Line 17010: 02-10 15:35:36.994  6385  6385 D wpa_supplicant: EAPOL: SUPP_PAE entering state RESTART
Line 17011: 02-10 15:35:36.994  6385  6385 D wpa_supplicant: EAP: EAP entering state INITIALIZE
Line 17012: 02-10 15:35:36.994  6385  6385 D wpa_supplicant: EAP: EAP entering state IDLE
Line 17013: 02-10 15:35:36.995  6385  6385 D wpa_supplicant: EAPOL: SUPP_PAE entering state AUTHENTICATING
Line 17014: 02-10 15:35:36.995  6385  6385 D wpa_supplicant: EAPOL: SUPP_BE entering state REQUEST
Line 17015: 02-10 15:35:36.995  6385  6385 D wpa_supplicant: EAPOL: getSuppRsp
Line 17016: 02-10 15:35:36.995  6385  6385 D wpa_supplicant: EAP: EAP entering state RECEIVED
Line 17017: 02-10 15:35:36.995  6385  6385 D wpa_supplicant: EAP: Received EAP-Request id=1 method=1 vendor=0 vendorMethod=0
Line 17018: 02-10 15:35:36.995  6385  6385 D wpa_supplicant: EAP: EAP entering state IDENTITY
Line 17022: 02-10 15:35:36.995  6385  6385 D wpa_supplicant: EAP: EAP-Request Identity data - hexdump(len=49): 00 6e 65 74 77 6f 72 6b 69 64 3d 6c 65 6e 6f 76 6f 2d 52 44 2c 6e 61 73 69 64 3d 43 4e 58 4d 57 ...
Line 17023: 02-10 15:35:36.995  6385  6385 D wpa_supplicant: EAP: using real identity - hexdump(len=5): 6c 75 6d 79 31
Line 17024: 02-10 15:35:36.995  6385  6385 D wpa_supplicant: EAP: EAP entering state SEND_RESPONSE
Line 17025: 02-10 15:35:36.995  6385  6385 D wpa_supplicant: EAP: EAP entering state IDLE
Line 17026: 02-10 15:35:36.995  6385  6385 D wpa_supplicant: EAPOL: SUPP_BE entering state RESPONSE
Line 17027: 02-10 15:35:36.995  6385  6385 D wpa_supplicant: EAPOL: txSuppRsp
Line 17032: 02-10 15:35:37.002  6385  6385 D wpa_supplicant: EAPOL: SUPP_BE entering state RECEIVE
Line 17042: 02-10 15:35:37.014  6385  6385 D wpa_supplicant: EAPOL: startWhen --> 0
Line 17056: 02-10 15:35:37.025  6385  6385 D wpa_supplicant: EAPOL: Received EAP-Packet frame
Line 17057: 02-10 15:35:37.025  6385  6385 D wpa_supplicant: EAPOL: SUPP_BE entering state REQUEST
Line 17058: 02-10 15:35:37.025  6385  6385 D wpa_supplicant: EAPOL: getSuppRsp
Line 17059: 02-10 15:35:37.025  6385  6385 D wpa_supplicant: EAP: EAP entering state RECEIVED
Line 17060: 02-10 15:35:37.025  6385  6385 D wpa_supplicant: EAP: Received EAP-Request id=89 method=25 vendor=0 vendorMethod=0
Line 17061: 02-10 15:35:37.025  6385  6385 D wpa_supplicant: EAP: EAP entering state GET_METHOD
Line 17065: 02-10 15:35:37.025  6385  6385 D wpa_supplicant: EAP:Status notification: accept proposed method (param=PEAP)
Line 17066: 02-10 15:35:37.025  6385  6385 D wpa_supplicant: EAP: Initialize selected EAP method: vendor 0 method 25 (PEAP)
Line 17073: 02-10 15:35:37.026  6385  6385 D wpa_supplicant: EAP: EAP entering state METHOD
Line 17075: 02-10 15:35:37.026  6385  6385 D wpa_supplicant: EAP-PEAP: Start (server ver=1, own ver=1)
Line 17076: 02-10 15:35:37.026  6385  6385 D wpa_supplicant: EAP-PEAP: Using PEAP version 1
Line 17089: 02-10 15:35:37.027  6385  6385 D wpa_supplicant: EAP: method process -> ignore=FALSE methodState=MAY_CONT decision=FAIL
Line 17090: 02-10 15:35:37.027  6385  6385 D wpa_supplicant: EAP: EAP entering state SEND_RESPONSE
Line 17091: 02-10 15:35:37.027  6385  6385 D wpa_supplicant: EAP: EAP entering state IDLE
Line 17092: 02-10 15:35:37.027  6385  6385 D wpa_supplicant: EAPOL: SUPP_BE entering state RESPONSE
Line 17093: 02-10 15:35:37.027  6385  6385 D wpa_supplicant: EAPOL: txSuppRsp
Line 17097: 02-10 15:35:37.028  6385  6385 D wpa_supplicant: EAPOL: SUPP_BE entering state RECEIVE
Line 17158: 02-10 15:35:37.080  6385  6385 D wpa_supplicant: EAPOL: Received EAP-Packet frame
Line 17159: 02-10 15:35:37.080  6385  6385 D wpa_supplicant: EAPOL: SUPP_BE entering state REQUEST
Line 17160: 02-10 15:35:37.080  6385  6385 D wpa_supplicant: EAPOL: getSuppRsp
Line 17161: 02-10 15:35:37.080  6385  6385 D wpa_supplicant: EAP: EAP entering state RECEIVED
Line 17162: 02-10 15:35:37.080  6385  6385 D wpa_supplicant: EAP: Received EAP-Request id=90 method=25 vendor=0 vendorMethod=0
Line 17163: 02-10 15:35:37.080  6385  6385 D wpa_supplicant: EAP: EAP entering state METHOD
Line 17168: 02-10 15:35:37.080  6385  6385 D wpa_supplicant: EAP: method process -> ignore=FALSE methodState=MAY_CONT decision=FAIL
Line 17169: 02-10 15:35:37.080  6385  6385 D wpa_supplicant: EAP: EAP entering state SEND_RESPONSE
Line 17170: 02-10 15:35:37.080  6385  6385 D wpa_supplicant: EAP: EAP entering state IDLE
Line 17171: 02-10 15:35:37.080  6385  6385 D wpa_supplicant: EAPOL: SUPP_BE entering state RESPONSE
Line 17172: 02-10 15:35:37.080  6385  6385 D wpa_supplicant: EAPOL: txSuppRsp
Line 17174: 02-10 15:35:37.081  6385  6385 D wpa_supplicant: EAPOL: SUPP_BE entering state RECEIVE
Line 17186: 02-10 15:35:37.105  6385  6385 D wpa_supplicant: EAPOL: Received EAP-Packet frame
Line 17187: 02-10 15:35:37.105  6385  6385 D wpa_supplicant: EAPOL: SUPP_BE entering state REQUEST
Line 17188: 02-10 15:35:37.105  6385  6385 D wpa_supplicant: EAPOL: getSuppRsp
Line 17189: 02-10 15:35:37.105  6385  6385 D wpa_supplicant: EAP: EAP entering state RECEIVED
Line 17190: 02-10 15:35:37.105  6385  6385 D wpa_supplicant: EAP: Received EAP-Request id=91 method=25 vendor=0 vendorMethod=0
Line 17191: 02-10 15:35:37.105  6385  6385 D wpa_supplicant: EAP: EAP entering state METHOD
Line 17199: 02-10 15:35:37.106  6385  6385 D wpa_supplicant: EAP: Status notification: remote certificate verification (param=success)
Line 17205: 02-10 15:35:37.107  6385  6385 D wpa_supplicant: EAP: Status notification: remote certificate verification (param=success)
Line 17210: 02-10 15:35:37.107  6385  6385 D wpa_supplicant: EAP: Status notification: remote certificate verification (param=success)
Line 17228: 02-10 15:35:37.110  6385  6385 D wpa_supplicant: EAP: method process -> ignore=FALSE methodState=MAY_CONT decision=FAIL
Line 17229: 02-10 15:35:37.110  6385  6385 D wpa_supplicant: EAP: EAP entering state SEND_RESPONSE
Line 17230: 02-10 15:35:37.110  6385  6385 D wpa_supplicant: EAP: EAP entering state IDLE
Line 17231: 02-10 15:35:37.110  6385  6385 D wpa_supplicant: EAPOL: SUPP_BE entering state RESPONSE
Line 17232: 02-10 15:35:37.110  6385  6385 D wpa_supplicant: EAPOL: txSuppRsp
Line 17235: 02-10 15:35:37.111  6385  6385 D wpa_supplicant: EAPOL: SUPP_BE entering state RECEIVE
Line 17283: 02-10 15:35:37.140  6385  6385 D wpa_supplicant: EAPOL: Received EAP-Packet frame
Line 17284: 02-10 15:35:37.140  6385  6385 D wpa_supplicant: EAPOL: SUPP_BE entering state REQUEST
Line 17285: 02-10 15:35:37.140  6385  6385 D wpa_supplicant: EAPOL: getSuppRsp
Line 17286: 02-10 15:35:37.141  6385  6385 D wpa_supplicant: EAP: EAP entering state RECEIVED
Line 17287: 02-10 15:35:37.141  6385  6385 D wpa_supplicant: EAP: Received EAP-Request id=92 method=25 vendor=0 vendorMethod=0
Line 17288: 02-10 15:35:37.141  6385  6385 D wpa_supplicant: EAP: EAP entering state METHOD
Line 17297: 02-10 15:35:37.141  6385  6385 D wpa_supplicant: EAP-PEAP: TLS done, proceed to Phase 2
Line 17298: 02-10 15:35:37.141  6385  6385 D wpa_supplicant: EAP-PEAP: using label 'client EAP encryption' in key derivation
Line 17301: 02-10 15:35:37.142  6385  6385 D wpa_supplicant: EAP: method process -> ignore=FALSE methodState=MAY_CONT decision=FAIL
Line 17302: 02-10 15:35:37.142  6385  6385 D wpa_supplicant: EAP: EAP entering state SEND_RESPONSE
Line 17303: 02-10 15:35:37.142  6385  6385 D wpa_supplicant: EAP: EAP entering state IDLE
Line 17304: 02-10 15:35:37.142  6385  6385 D wpa_supplicant: EAPOL: SUPP_BE entering state RESPONSE
Line 17305: 02-10 15:35:37.142  6385  6385 D wpa_supplicant: EAPOL: txSuppRsp
Line 17310: 02-10 15:35:37.145  6385  6385 D wpa_supplicant: EAPOL: SUPP_BE entering state RECEIVE
Line 17362: 02-10 15:35:37.163  6385  6385 D wpa_supplicant: EAPOL: disable timer tick
Line 17363: 02-10 15:35:37.163  6385  6385 D wpa_supplicant: EAPOL: Supplicant port status: Unauthorized
Line 17370: 02-10 15:35:37.165  6385  6385 D wpa_supplicant: EAPOL: Received EAP-Packet frame
Line 17371: 02-10 15:35:37.165  6385  6385 D wpa_supplicant: EAPOL: SUPP_BE entering state REQUEST
Line 17372: 02-10 15:35:37.165  6385  6385 D wpa_supplicant: EAPOL: getSuppRsp
Line 17373: 02-10 15:35:37.165  6385  6385 D wpa_supplicant: EAP: EAP entering state RECEIVED
Line 17374: 02-10 15:35:37.165  6385  6385 D wpa_supplicant: EAP: Received EAP-Request id=93 method=25 vendor=0 vendorMethod=0
Line 17375: 02-10 15:35:37.165  6385  6385 D wpa_supplicant: EAP: EAP entering state METHOD
Line 17377: 02-10 15:35:37.166  6385  6385 D wpa_supplicant: EAP-PEAP: received 37 bytes encrypted data for Phase 2
Line 17378: 02-10 15:35:37.166  6385  6385 D wpa_supplicant: EAP-PEAP: Decrypted Phase 2 EAP
Line 17380: 02-10 15:35:37.166  6385  6385 D wpa_supplicant: EAP-PEAP: received Phase 2: code=1 identifier=93 length=5
Line 17381: 02-10 15:35:37.166  6385  6385 D wpa_supplicant: EAP-PEAP: Phase 2 Request: type=1
Line 17382: 02-10 15:35:37.166  6385  6385 D wpa_supplicant: EAP: using real identity - hexdump(len=5): 6c 75 6d 79 31
Line 17384: 02-10 15:35:37.166  6385  6385 D wpa_supplicant: EAP: method process -> ignore=FALSE methodState=MAY_CONT decision=FAIL
Line 17385: 02-10 15:35:37.166  6385  6385 D wpa_supplicant: EAP: EAP entering state SEND_RESPONSE
Line 17386: 02-10 15:35:37.166  6385  6385 D wpa_supplicant: EAP: EAP entering state IDLE
Line 17387: 02-10 15:35:37.166  6385  6385 D wpa_supplicant: EAPOL: SUPP_BE entering state RESPONSE
Line 17388: 02-10 15:35:37.166  6385  6385 D wpa_supplicant: EAPOL: txSuppRsp
Line 17392: 02-10 15:35:37.167  6385  6385 D wpa_supplicant: EAPOL: SUPP_BE entering state RECEIVE
Line 17421: 02-10 15:35:37.193  6385  6385 D wpa_supplicant: EAPOL: Received EAP-Packet frame
Line 17422: 02-10 15:35:37.193  6385  6385 D wpa_supplicant: EAPOL: SUPP_BE entering state REQUEST
Line 17423: 02-10 15:35:37.193  6385  6385 D wpa_supplicant: EAPOL: getSuppRsp
Line 17424: 02-10 15:35:37.193  6385  6385 D wpa_supplicant: EAP: EAP entering state RECEIVED
Line 17425: 02-10 15:35:37.193  6385  6385 D wpa_supplicant: EAP: Received EAP-Request id=94 method=25 vendor=0 vendorMethod=0
Line 17426: 02-10 15:35:37.193  6385  6385 D wpa_supplicant: EAP: EAP entering state METHOD
Line 17429: 02-10 15:35:37.193  6385  6385 D wpa_supplicant: EAP-PEAP: received 69 bytes encrypted data for Phase 2
Line 17431: 02-10 15:35:37.193  6385  6385 D wpa_supplicant: EAP-PEAP: Decrypted Phase 2 EAP
Line 17433: 02-10 15:35:37.193  6385  6385 D wpa_supplicant: EAP-PEAP: received Phase 2: code=1 identifier=94 length=40
Line 17434: 02-10 15:35:37.193  6385  6385 D wpa_supplicant: EAP-PEAP: Phase 2 Request: type=26
Line 17436: 02-10 15:35:37.193  6385  6385 D wpa_supplicant:EAP-PEAP: Selected Phase 2 EAP vendor 0 method 26
Line 17437: 02-10 15:35:37.193  6385  6385 D wpa_supplicant:EAP-MSCHAPV2: RX identifier 94 mschapv2_id 94
Line 17438: 02-10 15:35:37.193  6385  6385 D wpa_supplicant: EAP-MSCHAPV2: Received challenge
Line 17439: 02-10 15:35:37.193  6385  6385 D wpa_supplicant: EAP-MSCHAPV2: Authentication Servername - hexdump(len=14): 43 4e 53 5a 41 43 53 31 31 32 31 2d 30 31
Line 17442: 02-10 15:35:37.193  6385  6385 D wpa_supplicant: EAP-MSCHAPV2: Generating Challenge Response
Line 17457: 02-10 15:35:37.197  6385  6385 D wpa_supplicant: EAP-MSCHAPV2: TX identifier 94 mschapv2_id 94 (response)
Line 17459: 02-10 15:35:37.198  6385  6385 D wpa_supplicant: EAP: method process -> ignore=FALSE methodState=MAY_CONT decision=FAIL
Line 17460: 02-10 15:35:37.198  6385  6385 D wpa_supplicant: EAP: EAP entering state SEND_RESPONSE
Line 17461: 02-10 15:35:37.198  6385  6385 D wpa_supplicant: EAP: EAP entering state IDLE
Line 17462: 02-10 15:35:37.198  6385  6385 D wpa_supplicant: EAPOL: SUPP_BE entering state RESPONSE
Line 17463: 02-10 15:35:37.198  6385  6385 D wpa_supplicant: EAPOL: txSuppRsp
Line 17465: 02-10 15:35:37.199  6385  6385 D wpa_supplicant: EAPOL: SUPP_BE entering state RECEIVE
Line 17536: 02-10 15:35:37.282  6385  6385 D wpa_supplicant: EAPOL: Received EAP-Packet frame
Line 17537: 02-10 15:35:37.282  6385  6385 D wpa_supplicant: EAPOL: SUPP_BE entering state REQUEST
Line 17538: 02-10 15:35:37.282  6385  6385 D wpa_supplicant: EAPOL: getSuppRsp
Line 17539: 02-10 15:35:37.282  6385  6385 D wpa_supplicant: EAP: EAP entering state RECEIVED
Line 17540: 02-10 15:35:37.282  6385  6385 D wpa_supplicant: EAP: Received EAP-Request id=95 method=25 vendor=0 vendorMethod=0
Line 17541: 02-10 15:35:37.282  6385  6385 D wpa_supplicant: EAP: EAP entering state METHOD
Line 17543: 02-10 15:35:37.282  6385  6385 D wpa_supplicant: EAP-PEAP: received 85 bytes encrypted data for Phase 2
Line 17544: 02-10 15:35:37.282  6385  6385 D wpa_supplicant: EAP-PEAP: Decrypted Phase 2 EAP
Line 17546: 02-10 15:35:37.282  6385  6385 D wpa_supplicant: EAP-PEAP: received Phase 2: code=1 identifier=95 length=51
Line 17547: 02-10 15:35:37.282  6385  6385 D wpa_supplicant: EAP-PEAP: Phase 2 Request: type=26
Line 17548: 02-10 15:35:37.282  6385  6385 D wpa_supplicant: EAP-MSCHAPV2: RX identifier 95 mschapv2_id 94
Line 17549: 02-10 15:35:37.282  6385  6385 D wpa_supplicant: EAP-MSCHAPV2: Received success
Line 17550: 02-10 15:35:37.283  6385  6385 D wpa_supplicant: EAP-MSCHAPV2: Success message - hexdump(len=0):
Line 17551: 02-10 15:35:37.283  6385  6385 I wpa_supplicant: EAP-MSCHAPV2: Authentication succeeded
Line 17553: 02-10 15:35:37.283  6385  6385 D wpa_supplicant: EAP: method process -> ignore=FALSE methodState=MAY_CONT decision=FAIL
Line 17554: 02-10 15:35:37.283  6385  6385 D wpa_supplicant: EAP: EAP entering state SEND_RESPONSE
Line 17555: 02-10 15:35:37.283  6385  6385 D wpa_supplicant: EAP: EAP entering state IDLE
Line 17556: 02-10 15:35:37.283  6385  6385 D wpa_supplicant: EAPOL: SUPP_BE entering state RESPONSE
Line 17557: 02-10 15:35:37.283  6385  6385 D wpa_supplicant: EAPOL: txSuppRsp
Line 17561: 02-10 15:35:37.284  6385  6385 D wpa_supplicant: EAPOL: SUPP_BE entering state RECEIVE
Line 17574: 02-10 15:35:37.303  6385  6385 D wpa_supplicant: EAPOL: Received EAP-Packet frame
Line 17575: 02-10 15:35:37.303  6385  6385 D wpa_supplicant: EAPOL: SUPP_BE entering state REQUEST
Line 17576: 02-10 15:35:37.303  6385  6385 D wpa_supplicant: EAPOL: getSuppRsp
Line 17577: 02-10 15:35:37.303  6385  6385 D wpa_supplicant: EAP: EAP entering state RECEIVED
Line 17578: 02-10 15:35:37.303  6385  6385 D wpa_supplicant: EAP: Received EAP-Request id=96 method=25 vendor=0 vendorMethod=0
Line 17579: 02-10 15:35:37.303  6385  6385 D wpa_supplicant: EAP: EAP entering state METHOD
Line 17581: 02-10 15:35:37.303  6385  6385 D wpa_supplicant: EAP-PEAP: received 37 bytes encrypted data for Phase 2
Line 17582: 02-10 15:35:37.304  6385  6385 D wpa_supplicant: EAP-PEAP: Decrypted Phase 2 EAP
Line 17584: 02-10 15:35:37.304  6385  6385 D wpa_supplicant: EAP-PEAP: received Phase 2: code=3 identifier=95 length=4
Line 17585: 02-10 15:35:37.304  6385  6385 D wpa_supplicant: EAP-PEAP: Phase 2 Success
Line 17586: 02-10 15:35:37.304  6385  6385 D wpa_supplicant: EAP-PEAP: Version 1 - EAP-Success within TLS tunnel - authentication completed
Line 17587: 02-10 15:35:37.304  6385  6385 D wpa_supplicant: EAP-PEAP: Use TLS ACK to finish authentication
Line 17589: 02-10 15:35:37.304  6385  6385 D wpa_supplicant: EAP: method process -> ignore=FALSE methodState=DONE decision=UNCOND_SUCC
Line 17590: 02-10 15:35:37.304  6385  6385 D wpa_supplicant: EAP: EAP entering state SEND_RESPONSE
Line 17591: 02-10 15:35:37.304  6385  6385 D wpa_supplicant: EAP: EAP entering state IDLE
Line 17592: 02-10 15:35:37.304  6385  6385 D wpa_supplicant: EAPOL: SUPP_BE entering state RESPONSE
Line 17593: 02-10 15:35:37.304  6385  6385 D wpa_supplicant: EAPOL: txSuppRsp
Line 17595: 02-10 15:35:37.305  6385  6385 D wpa_supplicant: EAPOL: SUPP_BE entering state RECEIVE
Line 17610: 02-10 15:35:37.327  6385  6385 D wpa_supplicant: EAPOL: Received EAP-Packet frame
Line 17611: 02-10 15:35:37.327  6385  6385 D wpa_supplicant: EAPOL: SUPP_BE entering state REQUEST
Line 17612: 02-10 15:35:37.327  6385  6385 D wpa_supplicant: EAPOL: getSuppRsp
Line 17613: 02-10 15:35:37.327  6385  6385 D wpa_supplicant: EAP: EAP entering state RECEIVED
Line 17614: 02-10 15:35:37.327  6385  6385 D wpa_supplicant: EAP: Received EAP-Success
Line 17615: 02-10 15:35:37.327  6385  6385 D wpa_supplicant: EAP: Status notification: completion (param=success)
Line 17616: 02-10 15:35:37.327  6385  6385 D wpa_supplicant: EAP: EAP entering state SUCCESS
Line 17621: 02-10 15:35:37.327  6385  6385 D wpa_supplicant: EAPOL: SUPP_BE entering state RECEIVE
Line 17622: 02-10 15:35:37.327  6385  6385 D wpa_supplicant: EAPOL: SUPP_BE entering state SUCCESS
Line 17623: 02-10 15:35:37.327  6385  6385 D wpa_supplicant: EAPOL: SUPP_BE entering state IDLE
Line 17625: 02-10 15:35:37.327  6385  6385 D wpa_supplicant: EAPOL: Ignoring WPA EAPOL-Key frame in EAPOL state machines
Line 17655: 02-10 15:35:37.328  6385  6385 D wpa_supplicant: EAPOL: Successfully fetched key (len=32)
Line 17694: 02-10 15:35:37.340  6385  6385 D wpa_supplicant: EAPOL: Ignoring WPA EAPOL-Key frame in EAPOL state machines
Line 17728: 02-10 15:35:37.347  6385  6385 D wpa_supplicant: EAPOL: External notification - portValid=1
Line 17729: 02-10 15:35:37.347  6385  6385 D wpa_supplicant: EAPOL: SUPP_PAE entering state AUTHENTICATED
Line 17730: 02-10 15:35:37.347  6385  6385 D wpa_supplicant: EAPOL: Supplicant port status: Authorized
Line 17731: 02-10 15:35:37.347  6385  6385 D wpa_supplicant: EAPOL authentication completed successfully
Line 17779: 02-10 15:35:37.357  6385  6385 D wpa_supplicant: EAPOL: External notification - portValid=1

抱歉!评论已关闭.