wireless access to cavalier with ubuntu

Does anyone have advice for connecting to cavalier with wpa_supplicant
under ubuntu?

Thanks in advance,
Andrew


:::: DETAILS ::::


I have unsecure wireless and WPA wireless working on Linksys routers,
but cavalier is rather more complicated because of the authentication,
and google searching some of the errors suggests that wpa_supplicant and
Cisco access points have problems playing nice with each other.



##### /etc/wpa_supplicant.conf ######

ctrl_interface=/var/run/wpa_supplicant

network={
ssid="cavalier"
key_mgmt=IEEE8021X
eap=TLS
identity="agh9a@virginia.edu"
ca_cert="/home/agh9a/agh9a-cavalier.pem"
client_cert="/home/agh9a/agh9a-cavalier.pem"
private_key="uva-security.p12"
private_key_passwd="xxxxxxxxxx"
phase1="include_tls_length=1"
eapol_flags=3
scan_ssid=1
priority=4
}

###################



I created the file agh9a-cavalier.pem with the following command :

$ openssl pkcs12 -in uva-security.p12 -out agh9a-cavalier.pem

and entered what is under private_key_passwd="xxxxxxxxxx" in
wpa_supplicant.conf for the PEM passphrase (I assumed this was an
arbitrary password).



When I run

# wpa_supplicant -w -Dwext -ieth1 -c/etc/wpa_supplicant.conf -dd

I receive a ton of output. The errors in the output seem to be limited
to 2.


1) it skips access points
.....

10: 00:17:0f:e5:29:90 ssid='cavalier' wpa_ie_len=0 rsn_ie_len=0 caps=0x11
skip - no WPA/RSN IE

.....

2) authentication fails


TLS: Trusted root certificate(s) loaded
OpenSSL: tls_connection_client_cert - SSL_use_certificate_file (DER)
failed erro
r:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag
OpenSSL: pending error: error:0D07803A:asn1 encoding
routines:ASN1_ITEM_EX_D2I:n
ested asn1 error
OpenSSL: pending error: error:140C800D:SSL
routines:SSL_use_certificate_file:ASN
1 lib
OpenSSL: SSL_use_certificate_file (PEM) --> OK
OpenSSL: tls_connection_private_key - SSL_use_PrivateKey_File (DER)
failed error
:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag
OpenSSL: pending error: error:0D06C03A:asn1 encoding
routines:ASN1_D2I_EX_PRIMIT
IVE:nested asn1 error
OpenSSL: pending error: error:0D08303A:asn1 encoding
routines:ASN1_TEMPLATE_NOEX
P_D2I:nested asn1 error
OpenSSL: pending error: error:0D09A00D:asn1 encoding
routines:d2i_PrivateKey:ASN
1 lib
OpenSSL: pending error: error:140CB00D:SSL
routines:SSL_use_PrivateKey_file:ASN1
lib
OpenSSL: tls_connection_private_key - SSL_use_PrivateKey_File (PEM)
failed error
:0906D06C:PEM routines:PEM_read_bio:no start line

EAP: EAP entering state SEND_RESPONSE
EAP: EAP entering state IDLE
EAPOL: SUPP_BE entering state RESPONSE
EAPOL: txSuppRsp
TX EAPOL - hexdump(len=27): 01 00 00 17 02 01 00 17 01 61 67 68 39 61 40
76 69 7
2 67 69 6e 69 61 2e 65 64 75
EAPOL: SUPP_BE entering state RECEIVE
RX EAPOL from 00:17:0f:e5:1e:70
RX EAPOL - hexdump(len=46): 01 00 00 06 01 02 00 06 0d 20 00 00 00 00 00
00 00 0
0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00
00 00
EAPOL: Received EAP-Packet frame
EAPOL: SUPP_BE entering state REQUEST
EAPOL: getSuppRsp
EAP: EAP entering state RECEIVED
EAP: Received EAP-Request id=2 method=13 vendor=0 vendorMethod=0
EAP: EAP entering state GET_METHOD
EAP: Initialize selected EAP method: vendor 0 method 13 (TLS)
TLS: Trusted root certificate(s) loaded
OpenSSL: tls_connection_client_cert - SSL_use_certificate_file (DER)
failed erro
r:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag
OpenSSL: pending error: error:0D07803A:asn1 encoding
routines:ASN1_ITEM_EX_D2I:n
ested asn1 error
OpenSSL: pending error: error:140C800D:SSL
routines:SSL_use_certificate_file:ASN
1 lib
OpenSSL: SSL_use_certificate_file (PEM) --> OK
OpenSSL: tls_connection_private_key - SSL_use_PrivateKey_File (DER)
failed error
:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag
OpenSSL: pending error: error:0D06C03A:asn1 encoding
routines:ASN1_D2I_EX_PRIMIT
IVE:nested asn1 error
OpenSSL: pending error: error:0D08303A:asn1 encoding
routines:ASN1_TEMPLATE_NOEX
P_D2I:nested asn1 error
OpenSSL: pending error: error:0D09A00D:asn1 encoding
routines:d2i_PrivateKey:ASN
1 lib
OpenSSL: pending error: error:140CB00D:SSL
routines:SSL_use_PrivateKey_file:ASN1
lib
OpenSSL: tls_connection_private_key - SSL_use_PrivateKey_File (PEM)
failed error
:0906D06C:PEM routines:PEM_read_bio:no start line

OpenSSL: pending error: error:140CB009:SSL
routines:SSL_use_PrivateKey_file:PEM
lib
OpenSSL: tls_parse_pkcs12 - Failed to parse PKCS12 file
error:23076071:PKCS12 ro
utines:PKCS12_parse:mac verify failure
OpenSSL: Failed to load private key
TLS: Failed to load private key 'uva-security.p12'
TLS: Failed to set TLS connection parameters
EAP-TLS: Failed to initialize SSL.
ENGINE: engine deinit
EAP: Failed to initialize EAP method: vendor 0 method 13 (TLS)
EAP: Building EAP-Nak (requested type 13 vendor=0 method=0 not allowed)
EAP: allowed methods - hexdump(len=0):