meta data for this page
  •  

This is an old revision of the document!


WiFi WPA Enterprise

Android 11+ Devices

Freeradius log:

eap_peap: TLS Alert read:fatal:unknown CA

Reason: The CA (Certification Authority) is not recognized by the client.

Cerficate used by Freeradius:

/etc/freeradius/3.0/mods-enabled/eap
    private_key_file = /etc/ssl/private/radius.int.example.com.key
    certificate_file = /etc/ssl/certs/radius.int.example.com.crt

https://extremeportal.force.com/ExtrArticleDetail?an=000092023

Workaround for Android based phone:

  • Download own CA from URL. Do not install it.
  • Open Settings –> Security –> Encryption & Credentials –> Install a Certificate –> Wi-Fi Certificate
  • Try to connect to WPA Enterprise network
    • EAP Method: PEAP
    • Phase 2 authentication: MSCHAPV2
    • CA certificate: Install. After installation choose just installed certificate
    • Online certificate status: Do not verify