Hi...<br><br>as i see log says , "Error: TLS Alert read:fatal:unknown CA" . and you need to specify the certificate Authority in your client when testing.<br>Certifcate authority is a File called "CA.pem" once you added to the client error should go away. And make sure debian sever hostname should be same as "commonName" specified in server.cnf <br>
<br>Thank You<br><br><div class="gmail_quote">On 15 September 2012 08:44, austin wonderly <span dir="ltr"><<a href="mailto:lacrosse1991@gmail.com" target="_blank">lacrosse1991@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
hello, thanks for the tip, although unfortunately im am still getting problems :( have included the out of eapol_test right here <a href="http://pastebin.com/8iKsCUfn" target="_blank">http://pastebin.com/8iKsCUfn</a> and also what shows up in the freeradius logs as well (have included the file names that i currently have in in my /etc/freeradius/certs directory) <a href="http://pastebin.com/MtQDVaWL" target="_blank">http://pastebin.com/MtQDVaWL</a>, would you guys know of anything that I could do to resolve this? it actually seems like the same problem that i've been having with the other solutions that I have tried earlier on (yesterday and today), thanks again for the help too<div class="HOEnZb">
<div class="h5"><br>
<br><div class="gmail_quote">On Fri, Sep 14, 2012 at 9:17 PM, val john <span dir="ltr"><<a href="mailto:valjohn1647@gmail.com" target="_blank">valjohn1647@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Download the tar.gz file form freeradius , in that file , in folder
"freeradius-server-xxx/raddb/certs" provide very easy way generate
certs (./bootstrap) , just copy its its content to the freeradius in
debian "/etc/freeradius/certs/" <br>
<br>
Thank you<br><br><br><div class="gmail_quote"><div><div>---------- Forwarded message ----------<br>From: <b class="gmail_sendername">austin wonderly</b> <span dir="ltr"><<a href="mailto:lacrosse1991@gmail.com" target="_blank">lacrosse1991@gmail.com</a>></span><br>
Date: 15 September 2012 03:23<br>Subject: generating ssl certs in debian squeeze<br>To: <a href="mailto:freeradius-users@lists.freeradius.org" target="_blank">freeradius-users@lists.freeradius.org</a><br><br><br>Hello, I was wondering if anyone knew of any tutorials for generating ssl certificates for freeradius in debian squeeze? Have been trying to find a method that would work over the last few days and have not found a solution yet (have probably spent around 6-7 hrs just getting this part to work so far), I am trying to setup a radius server to provide eap-ttls authentication for a non public network (windows machines, as well linux based machines would be on the network), if someone could point me in the right direction though or possibly offer some advice I would really appreciate it as i've pretty much exhausted my options at this point in time. having said that, would there be any downsides to just using the "snakeoil" certificates in this type of configuration? thanks
<br></div></div>-<br>
List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a><br></div><br>
<br>-<br>
List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a><br></blockquote></div><br>
</div></div><br>-<br>
List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a><br></blockquote></div><br>