<HTML>
<HEAD>
<TITLE>rlm_eap: SSL error error on Start Up, Compile question</TITLE>
</HEAD>
<BODY>
<FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'><BR>
I am trying to install FreeRadius 2.1.8, on my initial package build I ran into issues with lintian<BR>
Running Ubuntu with 2.6.24-27-server kernel<BR>
<BR>
dpkg-buildpackage -d -b –uc ( I had to use the –d option as I received dependency errors)<BR>
<BR>
...<BR>
dh_installman<BR>
dh_lintian<BR>
/bin/bash: dh_lintian: command not found<BR>
make[1]: *** [binary-common] Error 127<BR>
make[1]: Leaving directory `/usr/local/freeradius'<BR>
make: *** [binary-arch] Error 2<BR>
dpkg-buildpackage: failure: debian/rules binary gave error exit status 2<BR>
<BR>
I modified the /usr/local/freeradius/debian/rules and removed the dh_lintian reference <BR>
under the tree “Binary Common” IS dh_lintian REQUIRED for freeradius to compile and<BR>
operate correctly ????<BR>
<BR>
I recompiled my debian package with no errors then installed freeradius I need to use<BR>
radius with my backend LDAP Database, we are configuring 802.1X for all of our LAN<BR>
switches.<BR>
<BR>
dpkg -i freeradius-common_2.1.8+git_all.deb<BR>
dpkg -i libfreeradius2_2.1.8+git_i386.deb<BR>
dpkg -i freeradius_2.1.8+git_i386.deb<BR>
dpkg -i freeradius-ldap_2.1.8+git_i386.deb<BR>
dpkg -i freeradius-dialupadmin_2.1.8+git_all.deb<BR>
<BR>
then when I start freeradius I get an error for rlm_eap and SSL this is when it is Instantiating the eap-tls Module.<BR>
<BR>
rlm_eap: SSL error error:02001002:system library:fopen:No such file or directory<BR>
rlm_eap_tls: Error reading certificate file /etc/freeradius/certs/server.pem<BR>
rlm_eap: Failed to initialize type tls<BR>
/etc/freeradius/eap.conf[17]: Instantiation failed for module "eap"<BR>
/etc/freeradius/sites-enabled/inner-tunnel[223]: Failed to find module "eap".<BR>
/etc/freeradius/sites-enabled/inner-tunnel[176]: Errors parsing authenticate section.<BR>
<BR>
under my “certs” directory I do not have a server.pem certificate (how do I generate it? )<BR>
<BR>
ls /etc/freeradius/certs/demoCA/index.txt.dpkg-bak serial.dpkg-bak<BR>
<BR>
<BR>
Module: Instantiating eap-tls<BR>
tls {<BR>
rsa_key_exchange = no<BR>
dh_key_exchange = yes<BR>
rsa_key_length = 512<BR>
dh_key_length = 512<BR>
verify_depth = 0<BR>
pem_file_type = yes<BR>
private_key_file = "/etc/freeradius/certs/server.pem"<BR>
certificate_file = "/etc/freeradius/certs/server.pem"<BR>
CA_file = "/etc/freeradius/certs/ca.pem"<BR>
private_key_password = "whatever"<BR>
dh_file = "/etc/freeradius/certs/dh"<BR>
random_file = "/etc/freeradius/certs/random"<BR>
fragment_size = 1024<BR>
include_length = yes<BR>
check_crl = no<BR>
cipher_list = "DEFAULT"<BR>
make_cert_command = "/etc/freeradius/certs/bootstrap"<BR>
cache {<BR>
enable = no<BR>
lifetime = 24<BR>
max_entries = 255<BR>
<BR>
any assistance with this is greatly appreciated.<BR>
<BR>
Thank You<BR>
Jeff Stout </SPAN></FONT>
</BODY>
</HTML>