Does not connect to WPA-EAP with PAP, TTLS, Certificate

[Felix]

Binary package hint: plasma-widget-networkmanagement

The manager displays that it is activating my connection, but nothing happens for about 1 minute. Than a window appears asking for connection secrets. This is an infinite loop.

These seem to be the important lines:

2009-11-05 09:21:29 me-laptop wpa_supplicant[1489] OpenSSL: tls_connection_ca_cert - Failed to parse ca_cert_blob error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag
2009-11-05 09:21:29 me-laptop wpa_supplicant[1489] OpenSSL: pending error: error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error
2009-11-05 09:21:29 me-laptop wpa_supplicant[1489] TLS: Failed to set TLS connection parameters
2009-11-05 09:21:29 me-laptop wpa_supplicant[1489] EAP-TTLS: Failed to initialize SSL.

Logs enclosed

[Robert Bredereck (rbredereck)]

I can confirm this.
So after using one of many perfect working gtk network clients on yaunty instead of kde's own one I hoped that network would work on Kubuntu karmic again.

Perhaps I would be a solution to skip the gnome network manager applet or wicd-client instead of the (since it exists) extremly buggy plasma widget.

[Felix (apoapo)]

I reported this issue in different posts which are in bugs marked as "fix released". I think it is ok to report this as a totally new one, cause many other combinations with wpa2 and password mechanisms work and therefore are marked as fixed correctly.

So this report does only affect WPA-Enterprise with PAP, TTLS and a certificate.

Please take in consideration concercing the importance that this bug prevents many students from using their university networks.
That is not only a nice-to-have-ish thing. Thank you.

[Robert Bredereck (rbredereck)]

That's it.
In fact, in germany, for example, many universities use WPA-Enterprise with TTLS with PAP.
They are organised in the "DFNRoaming/eduroam".
(Some of them can be seen here: http://airoserv4.dfn.de/ - but not all are located in this map.)

Students, research assistants and professors sould be a very important usership of Kubuntu.

For comparision:
This is what gnome user have to do to connect to these networks:
http://www.uni-jena.de/Linux_mit_Networkmanager.html (Since at least Ubuntu 7.10 !!)

With KDE you have to install the gnome network manager, wicd-client or write wpa_supplicant config files manually.
But normal users do not know this. They see the option in the plasma widget and try to connect. And so, they might come to the conclusion that Kubuntu, Ubuntu or even Linux has no working WLAN ability. (Not all users are able to report or read bugs.)

I wrote this second comment, because this bug is a gui-only problem (network-manager works correctly) and Kubuntu is affected scince jaunty - by the way: the KDE3 Knetworkmanager works. (More than a half year, no KDE oder Kubuntu Developer commited a final bug fix - Maybe the problem was classified as "very unimportant".)

[Felix (apoapo)]

I was able to connect to my university network with no certificate entered today.

[dpopov (insane-gbg)]

OpenSuSE 11.1 and 11.2 are also affected. Apparently, the problem is in KNetworkManager in general and not in the distribution. So perhaps a KDE bug should be opened.

[dpopov (insane-gbg)]

A KNetworkManager bug has already been registered: https://bugs.kde.org/show_bug.cgi?id=209673

So maybe, this bug should be closed, as it is not a problem in Ubuntu.

[Jonathan Thomas (echidnaman)]

Thanks. Closing as it is not an Ubuntu bug and it is being tracked upstream.

[Maarten Bezemer (veger)]

I have build a snapshot (as of 20-07-2011) containing the patch to solve the certificate problem.
It is available at: https://launchpad.net/~maarten-bezemer/+archive/ppa

[Maarten Bezemer (veger)]

The bug is fixed for Oneiric as it contains a newer snapshot containing the patch provided upstream