evansgp / docker-radius-eap-tls Goto Github PK

Seems some changes have been made by Google since Android 11 that breaks EAP-TLS.

https://www.xda-developers.com/android-11-break-enterprise-wifi-connection/
https://www.reddit.com/r/networking/comments/j7ero1/psa_android_11s_december_security_update_will/
https://www.securew2.com/blog/android-11-server-certificate-validation-error-solution
https://www.reddit.com/r/GooglePixel/comments/lk3q0w/android_11_can_no_longer_select_do_not_validate/
https://extremeportal.force.com/ExtrArticleDetail?an=000092023

Hi!

What is the easiest way to get generated keys from the container? I see the volume called "pki" but how to I export the keys to my physical host from the pki volume or the /easyrsa/pki/private/ directory?

Thanks.

Hello

radiusd crashes on startup with errors in logs:

# Loading authenticate {...}
/etc/raddb/sites-enabled/site[35]: Failed to find "eap" as a module or policy.
/etc/raddb/sites-enabled/site[35]: Please verify that the configuration exists in /etc/raddb/mods-enabled/eap.
/etc/raddb/sites-enabled/site[34]: Errors parsing authenticate section. 

probably the problem lies here
COPY eap /etc/raddb/modules-available
but Radius is looking for module inside mods-enabled dir

Actualy I tried to replace modules-available to mods-enabled in the COPY instruction inside Dockerfile
then rebuild docker image

but this time I ve got this:

 # Creating Auth-Type = eap
radiusd: #### Instantiating modules ####
 modules {
/etc/raddb/mods-enabled/eap[1]: Failed to link to module 'rlm_eap': Error loading shared library /usr/lib/freeradius/rlm_eap.so: No such file or directory 

It seems like the freeradius package had been changed a lot since you maintained the project