Certificate Compatibility

[Ben Wiechman]

You don't have the right CA certificate installed on the SM. Check the
certificates listed under the Security tab in the SM and make sure
that YOUR CA cert is shown in one of the two available slots.

You might also be running into an issue with the issue date on the
certificate if the AP doesn't have the proper time. (I don't recall
what error gets spit out in that case.) If the AP doesn't have NTP or
the proper time set it reverts to starting from 1/1/2001 so your
certificate may not have a valid issue date if it was recently
created.

Ben

On Tue, Mar 29, 2011 at 9:17 AM, Jim Rice <jmrice6640 at yahoo.com> wrote:
> Those intructions worked fine for a PC.
>
> But this time I am trying to test a Canopy AP and an SM.
> It seems to be stopping after the server hello.
> It is possible that the AP does not like the server certificate
> (or its encryption method), but I don't think MS MIBs will help ;-)
>
> Looks like the wiki is still down...
>
>
> --- On Mon, 3/28/11, Alan DeKok <aland at deployingradius.com> wrote:
>
>> From: Alan DeKok <aland at deployingradius.com>
>> Subject: Re: Certificate Compatibility
>> To: "FreeRadius users mailing list" <freeradius-users at lists.freeradius.org>
>> Date: Monday, March 28, 2011, 10:46 PM
>> Jim Rice wrote:
>> > Getting this:   (FR 2.1.10)...
>> >
>> > WARNING:
>> !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
>> > WARNING: !! EAP session for state 0x2f1a7f7f2b1c6afb
>> did not finish!
>> > WARNING: !! Please read http://wiki.freeradius.org/Certificate_Compatibility
>> > WARNING:
>> !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
>>
>>   It means that the PC didn't like the server
>> certificate.
>>
>>   Follow the instructions on http://deployingradius.com/ for configuring
>> EAP.  It's a bit long, but it's *guaranteed* to work.
>>
>> > Unfortunately the wiki is down...
>>
>>   Hmm... I hadn't seen that.  I'll take a look.
>>
>>   Alan DeKok.
>> -
>> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>>
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>