<div class="gmail_extra">Well, yes, there is. What I meant to say is, you need to set CA to a file which has all the certificates of the chain: ROOT_CA, Sub1_CA and Sub2_CA.<br><br>When speaking to certificate files, I call the concatenated one "certificate chain file", but it's another concept: <a href="http://publib.boulder.ibm.com/infocenter/wmqv6/v6r0/index.jsp?topic=%2Fcom.ibm.mq.csqzas.doc%2Fsy10600_.htm">http://publib.boulder.ibm.com/infocenter/wmqv6/v6r0/index.jsp?topic=%2Fcom.ibm.mq.csqzas.doc%2Fsy10600_.htm</a><br>
<br><div class="gmail_quote">2012/4/25 jinx_20 <span dir="ltr"><<a href="mailto:gabriel_skupien@o2.pl" target="_blank">gabriel_skupien@o2.pl</a>></span><br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
As I mentioned before CA_file in the eap.conf is set to<br>
${cadir}/Sub2_CA_*entire_chain*.pem<br>
<br>
Is there any difference between concatenated CA file and certificate chain?<br>
<br>
<br>
Gabriel<br>
<br>
--<br>
View this message in context: <a href="http://freeradius.1045715.n5.nabble.com/EAP-TLS-Windows-7-Problem-with-chain-certificate-on-the-client-side-tp5664334p5664397.html" target="_blank">http://freeradius.1045715.n5.nabble.com/EAP-TLS-Windows-7-Problem-with-chain-certificate-on-the-client-side-tp5664334p5664397.html</a><br>

<div class="HOEnZb"><div class="h5">Sent from the FreeRadius - User mailing list archive at Nabble.com.<br>
-<br>
List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a><br>
</div></div></blockquote></div><br>
</div>