<DIV>
<DIV>
<DIV>
<DIV>Hi,all:</DIV>
<DIV> I am new to freeradius world. I am trying to setup EAP-TLS using freeradius server. Would you pls tell me which cisco access point is preferred for the EAP-TLS setup?</DIV>
<DIV> </DIV>
<DIV>I have installed openssl-0.9.8 and freeradius-1.0.5 on Redhat 9.0. I tried several times to generate certificate by runing CA.all script which was downloaded from <A href="http://www.missl.cs.umd.edu/wireless/eaptls" target=_blank><FONT color=#003399>www.missl.cs.umd.edu/wireless/eaptls</FONT></A>. But each time I met same issue and failed to generate the certificates. <SPAN class=234223902-27092005> I just typed "./CA.all" to run the script, is there any optional parameters need I input ?</SPAN> <SPAN class=234223902-27092005>(I did not update the file /usr/local/openssl/ssl/openssl.cnf and CA.all) </SPAN></DIV>
<DIV> </DIV>
<DIV> the following is part of the error log:</DIV>
<DIV> </DIV>
<DIV><U><EM>Please enter the following 'extra' attributes<BR>to be sent with your certificate request<BR>A challenge password []:whatever<BR>An optional company name []:radius<BR>Using configuration from /usr/local/openssl/ssl/openssl.cnf<BR>Enter pass phrase for ./demoCA/private/cakey.pem:</EM></U> <EM><U><FONT color=#0000ff>(I entered "whatever" for pass phrase, right? I don't know what is the pass phrase?)</FONT></U></EM><BR><U><EM>./demoCA/serial: No such file or directory <FONT color=#0000ff>(I think this file ./demoCA/serial will be created automatically when running the CA.all, right?)</FONT><BR><BR>error while loading serial number<BR>4427:error:02001002:system library:fopen:No such file or directory:bss_file.c:349:fopen('./demoCA/serial','r')<BR>4427:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:351:<BR>No certificate matches private key<BR>4429:error:0D07207B:asn1 encoding routines:ASN1_get_object:header too long:asn1_lib.c:150:<BR>unable to load
certificate<BR>4430:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:644:Expecting: TRUSTED CERTIFICATE</EM></U></DIV>
<DIV> </DIV>
<DIV>Enclosed is the complete log of runing the script CA.all. I am not clear the root cause. Your help is very appreciated. had better provide me a successful log of running the CA.all. I don't know which information I should input when runing the CA.all.</DIV>
<DIV> </DIV>
<DIV>Thanks a lot</DIV>
<DIV>ann</DIV></DIV></DIV></DIV><p>
<hr size=1><a href="http://cn.mail.yahoo.com" target=blank>
ÑÅ»¢Ãâ·ÑGÓÊÏä£ÖйúµÚÒ»¾øÎÞÀ¬»øÓʼþɧÈų¬´óÓÊÏä</a><br>
<a href="http://cn.zs.yahoo.com" target=blank>ÑÅ»¢ÖúÊÖ£ËÑË÷¡¢É±¶¾¡¢·ÀɧÈÅ</a>