Re: HOWTO PEAP + FreeRadius + XP Client

["George KNIGHT" <georgeknight@gmail.com>]

Alan,

The permission problem has been solved as I mentioned at my earlier email. Now, as a last step,   I'm installing the certificates. I created the certificates by following the README file under /etc/raddb/certs/ folder. Now I have the following certificates;

ca.der

ca.key

ca.pem

client.crt

client.csr

client.key

client.p12

client.pem

server.crt

server.csr

server.key

server.p12

server.pem

I used ca.der and client.p12 to be installed to Windows XP SP2 client. I followed the instructions at the http://freeradius.org/doc/EAPTLS.pdf. But at the end of the installation, where the client certificate installation is tested at page 16, I have a different Windows message; it says " Windows does not have enough information to verify this certificate". I followed all the instructions there without any problem. Am I missing anything?

Are those the right certificates that copied to the Windows machine? Why are there so many certificates created and we are just using 2?

Thank you

George Knight

On Thu, May 1, 2008 at 1:29 PM, Alan DeKok <aland@deployingradius.com> wrote:

George KNIGHT wrote:
> Permissions are as follow;
> ..
> comp-010:/etc/raddb # dir

 Uh... which OS are you using?

 In any case, this is an OS issue.  FreeRADIUS & OpenSSL use the normal
OS API's to access files.  If the server gets a "permission denied"
error, it's because the OS is denying permission.

 So... the OS needs to be fixed.  I have no idea how to do that.

 Maybe you're running some "security" feature that blocks access to
files.  e.g. AppArmor, SELinux, etc.  Go see your OS documentation for
details.

 i.e. Sorry, this isn't a FreeRADIUS problem.

 Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html