Home / server / Questions / 1160085
Accepted
Evan Carroll
Asked: 2024-05-29 08:03:33 +0800 CST

Connecting to ATT, I get OpenSSL: pending error: error:0A00018E:SSL routines::ca md too weak

  • 772

When I try to connect to AT&T with WPA Supplicant running on OpenWRT, I'm getting,

10g-2: CTRL-EVENT-EAP-FAILURE EAP authentication failed
10g-2: CTRL-EVENT-EAP-FAILURE EAP authentication failed
10g-2: CTRL-EVENT-EAP-STARTED EAP authentication started
10g-2: CTRL-EVENT-EAP-FAILURE EAP authentication failed
10g-2: CTRL-EVENT-EAP-STARTED EAP authentication started
10g-2: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=13
OpenSSL: pending error: error:0A00018E:SSL routines::ca md too weak
TLS: Failed to set TLS connection parameters
EAP-TLS: Failed to initialize SSL.
10g-2: CTRL-REQ-PASSPHRASE-0:Private key passphrase needed for SSID
10g-2: EAP: Failed to initialize EAP method: vendor 0 method 13 (TLS)

How can I resolve this error?

openwrt

1 Answers

  1. Best Answer

    openssl_ciphers=DEFAULT@SECLEVEL=0

    This error is because I needed to add the line openssl_ciphers=DEFAULT@SECLEVEL=0 to my /etc/config/wpa_supplicant.conf,

    ctrl_interface=/var/run/wpa_supplicant
eapol_version=1
ap_scan=0
fast_reauth=1
openssl_ciphers=DEFAULT@SECLEVEL=0
network={
   ...
}
    • 0