<html><head><style type="text/css"><!-- DIV {margin:0px;} --></style></head><body><div style="font-family:times new roman, new york, times, serif;font-size:12pt"><div>HOW TO FIX THE PROBLEM OF THE ISSUER of clients certificates in default configuration?<br><br>- this bug is suspected to make i can't do EAP-PEAP and affect the CRL management too. it's a real problem<br><br><br></div><div style="font-family: times new roman,new york,times,serif; font-size: 12pt;"><br><div style="font-family: arial,helvetica,sans-serif; font-size: 13px;">----- Message d'origine ----<br>De : Alan DeKok <aland@deployingradius.com><br>À : FreeRadius users mailing list <freeradius-users@lists.freeradius.org><br>Envoyé le : Jeudi, 24 Juillet 2008, 19h54mn 32s<br>Objet : Re: cert bootstrap bug? (was Re: definitively, I have a problem with eap-tls)<br><br>Sergio wrote:<br>> But the debug I posted shows that radius doesn't recognize the issuer of<br>>
client cert using default certs. If default certs works and I don't need<br>> to install server.pem and ca.pem into ssl/certs dir, what I'm forgetting<br>> alan?<br><br> You need to follow the documentation in eap.conf.<br><br> # If CA_file (below) is not used, then the<br> # certificate_file below MUST include not<br> # only the server certificate, but ALSO all<br> # of the CA certificates used to sign the<br> # server certificate.<br> certificate_file = ${certdir}/server.pem<br><br> Have you done that?<br><br> Alan DeKok.<br>-<br>List info/subscribe/unsubscribe? See <a
href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a><br></div></div></div><br>
<hr size="1">
Envoyé avec <a href="http://us.rd.yahoo.com/mailuk/taglines/isp/control/*http://us.rd.yahoo.com/evt=52423/*http://fr.docs.yahoo.com/mail/overview/index.html">Yahoo! Mail</a>.<br>Une boite mail plus intelligente. </a></body></html>