Alan,<div><br></div><div>The permission problem has been solved as I mentioned at my earlier email. Now, as a last step, I'm installing the certificates. I created the certificates by following the README file under /etc/raddb/certs/ folder. Now I have the following certificates;</div>
<div><br></div><div>ca.der</div><div>ca.key</div><div>ca.pem</div><div>client.crt</div><div>client.csr</div><div>client.key</div><div>client.p12</div><div>client.pem</div><div>server.crt</div><div>server.csr</div><div>server.key<br>
</div><div>server.p12<br></div><div>server.pem<br></div><div><br></div><div>I used ca.der and client.p12 to be installed to Windows XP SP2 client. I followed the instructions at the <a href="http://freeradius.org/doc/EAPTLS.pdf">http://freeradius.org/doc/EAPTLS.pdf</a>. But at the end of the installation, where the client certificate installation is tested at page 16, I have a different Windows message; it says " Windows does not have enough information to verify this certificate". I followed all the instructions there without any problem. Am I missing anything?</div>
<div><br></div><div>Are those the right certificates that copied to the Windows machine? Why are there so many certificates created and we are just using 2?</div><div><br></div><div>Thank you</div><div><br></div><div>George Knight</div>
<div><br><div class="gmail_quote">On Thu, May 1, 2008 at 1:29 PM, Alan DeKok <<a href="mailto:aland@deployingradius.com">aland@deployingradius.com</a>> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div class="Ih2E3d">George KNIGHT wrote:<br>
> Permissions are as follow;<br>
> ..<br>
> comp-010:/etc/raddb # dir<br>
<br>
</div> Uh... which OS are you using?<br>
<br>
In any case, this is an OS issue. FreeRADIUS & OpenSSL use the normal<br>
OS API's to access files. If the server gets a "permission denied"<br>
error, it's because the OS is denying permission.<br>
<br>
So... the OS needs to be fixed. I have no idea how to do that.<br>
<br>
Maybe you're running some "security" feature that blocks access to<br>
files. e.g. AppArmor, SELinux, etc. Go see your OS documentation for<br>
details.<br>
<br>
i.e. Sorry, this isn't a FreeRADIUS problem.<br>
<div><div></div><div class="Wj3C7c"><br>
Alan DeKok.<br>
-<br>
List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a><br>
</div></div></blockquote></div><br></div>