<html><head></head><body bgcolor="#FFFFFF"><div>You have three possible issues.</div><div><br></div><div>1). You need to chain all of the certs into one file.</div><div><br></div><div>2). MS requires that the cert have a "special purpose". This is documented and needs to be included in the CSR. BS, but that's MS for you.</div>
<div><br></div><div>3). MS might not like wild cards. Not sure about this but it may be an issue. Easy enough to test. If 1 and 2 don't work, try with a non-wildcard cert +1 and 2. Post your results so we can all learn from it.</div>
<div><br></div><div>Carl Peterson<br><br><br></div><div><br>On Sep 14, 2012, at 10:44 AM, Tyller D <<a href="mailto:tyllerd@gmail.com">tyllerd@gmail.com</a>> wrote:<br><br></div><div></div><blockquote type="cite"><div>
<br><br><div class="gmail_quote">On Fri, Sep 14, 2012 at 4:07 PM, Alan DeKok <span dir="ltr"><<a href="mailto:aland@deployingradius.com" target="_blank">aland@deployingradius.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div class="im">Tyller D wrote:<br>
> I have everything configured and working when I disabled "validate<br>
> server Certificate" on windows.<br>
> I have a wildcard certificate purchased from <a href="http://godaddy.com" target="_blank">godaddy.com</a>.<br>
<br>
</div> I'm not sure that will work.<br></blockquote><div> </div><div>Is there a reason for that? Godaddy is in the list of servers to validate against? <br></div><div><br> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div class="im">
> I had a problem when using it with apache as I had to add the<br>
> intermediate chain in the config but can't find a place to do that in<br>
> FreeRaius.<br>
<br>
</div> You should have the CA cert, and all of the certs leading to the<br>
server certificate.<br></blockquote><div><br>Correct, I do. But which one do add as "certificate_file" in eap.conf?<br> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div class="im"><br>
> When Auth fails because of validation then I get this in Freeradius debug<br>
<br>
</div> So... did you read eap.conf, and configure the certificates as<br>
documented there?<br>
<div class="im"><br></div></blockquote><div><br>Are you referring to this?<br><br> - Windows requires the root certificates to be on the client PC.<br> If it doesn't have them, you will see the same issue as above.<br>
<br>I'm just guessing but it seems like that would be the cause.<br><br> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="im">
> Is there something that I can do to get this to work?<br>
<br>
</div> Read the documentation?<br></blockquote><div><br>My question is, all the certificates leading to the server certifcate - where do I add them?<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<span class="HOEnZb"><font color="#888888"><br>
Alan DeKok.<br>
</font></span><div class="HOEnZb"><div class="h5">-<br>
List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a><br>
</div></div></blockquote></div><br>
</div></blockquote><blockquote type="cite"><div><span>-</span><br><span>List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</a></span></div></blockquote>
</body></html>