Re: problem in configuring PEAP on freeRADIUS1.1.2
- To: freeradius-users@lists.freeradius.org
- Subject: Re: problem in configuring PEAP on freeRADIUS1.1.2
- From: "Pradeep Sengar" <pradeep.sengar@gmail.com>
- Date: Thu, 6 Jul 2006 10:49:06 +0530
- Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:mime-version:content-type; b=mrj4lZDZDB/OrMkeVrCSm/dFZo4IOGg/oG4NWvaMEaNZjoW/VgJC/tfZcSc+8IF7lYvGqSpL8OpwkktJLiDCXFAUqgyv+GFXLw2cALmDriiyaijxyuytZ7HQhlCn9gFonpCh8QaWPIpGOWQVIomU9dnfr3hy44dSjkzbYJt4Ais=
- Reply-to: FreeRadius users mailing list <freeradius-users@lists.freeradius.org>
Thanx Zoltan Ori for ur comments. before getting ur reply i was able to run freeradius server for peap after making following changes in eap.conf file in tls module
xxxxxxxxxx
eap.conf
xxxxxxxxxx
tls {
private_key_password = whatever
private_key_file = ${raddbdir}/certs/cert-srv.pem
certificate_file = ${raddbdir}/certs/cert-srv.pem
CA_file = ${raddbdir}/certs/demoCA/cacert.pem
dh_file = ${raddbdir}/certs/dh
random_file = ${raddbdir}/certs/random
}
xxxxxxxxxxxxxxxx eap.conf ends herexxxxxxxxxxxxxxxxxxxxxxxx
problem persisted till i added last line( random_file = ${raddbdir}/certs/random) and started working fine after this addition without creating any certificate(i didn't create any).
but after this although i m able to start server but its not accepting any requests.
What can be the reason?
One more query: in clients.conf file we mention the IP range for APs or for end client(supplicant).
Regards
Pradeep Singh
Date: Wed, 5 Jul 2006 09:33:14 -0400
From: Zoltan Ori <z.ori@morehead-st.edu>
Subject: Re: problem in configuring PEAP on
freeRADIUS1.1.2
To: FreeRadius users mailing list
<freeradius-users@lists.freeradius.org>
Message-ID: <200607050933.14945.z.ori@morehead-st.edu">
200607050933.14945.z.ori@morehead-st.edu>
Content-Type: text/plain; charset="iso-8859-1"
On Wednesday 05 July 2006 08:48, Pradeep Sengar wrote:
> rlm_eap_tls: Loading the certificate file as a chain
> rlm_eap: SSL error error:0200100E:system library:fopen:Bad address
> rlm_eap_tls: Error reading certificate file
> rlm_eap: Failed to initialize type tls
Did you create any certificates? Are they stored where you indicate in
eap.conf? Do they have the proper permissions?
Zoltan Ori
--
This archive was generated by a fusion of
Pipermail (Mailman edition) and
MHonArc.