<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>Thanks Alan, please see below. Unless I am missing something, the files are there...<br><br>[root@lasamiq3 raddb]# dir -l certs/radius*<br>-rw-r--r-- 1 root root 3016 Nov 6 16:42 certs/radius-srv-pri-cert.pem<br>-rw-r--r-- 1 root root 1606 Nov 6 16:42 certs/radius-srv-pri-key.pem<br><br>[root@lasamiq3 raddb]# dir -l certs/demoCA<br>total 16<br>-rw-r--r-- 1 root root 751 Nov 6 16:10 cacert.der<br>-rw-r--r-- 1 root root 1074 Nov 6 16:10 cacert.pem<br>-rw-r----- 1 root radiusd 1074 Nov 5 18:48 cacert.pem.rpmsave<br>-rw-r--r-- 1 root root 963 Nov 6 16:10 cakey.pem<br><br> tls {<br> rsa_key_exchange = no<br> dh_key_exchange = yes<br> rsa_key_length = 512<br> dh_key_length = 512<br> verify_depth = 0<br> CA_path = "/etc/raddb/certs/demoCA"<br> pem_file_type = yes<br> private_key_file = "/etc/raddb/certs/radius-priv-key.pem"<br> certificate_file = "/etc/raddb/certs/radius-priv-cert.pem"<br> CA_file = "/etc/raddb/certs/demoCA/cacert.pem"<br> private_key_password = "mercury"<br> dh_file = "/etc/raddb/certs/dh"<br> random_file = "/etc/raddb/certs/random"<br> fragment_size = 1024<br> include_length = yes<br> check_crl = no<br> cipher_list = "DEFAULT"<br> cache {<br> enable = no<br> lifetime = 24<br> max_entries = 255<br> }<br> verify {<br> }<br> ocsp {<br> enable = no<br> override_cert_url = yes<br> url = "http://127.0.0.1/ocsp/"<br> }<br> }<br>rlm_eap: SSL error error:02001002:system library:fopen:No such file or directory<br>rlm_eap_tls: Error reading certificate file /etc/raddb/certs/radius-priv-cert.pem<br>rlm_eap: Failed to initialize type tls<br>/etc/raddb/eap.conf[17]: Instantiation failed for module "eap"<br>/etc/raddb/sites-enabled/default[310]: Failed to load module "eap".<br>/etc/raddb/sites-enabled/default[252]: Errors parsing authenticate section. <br><div>> Date: Thu, 6 Nov 2014 13:06:51 -0500<br>> From: aland@deployingradius.com<br>> To: freeradius-users@lists.freeradius.org<br>> Subject: Re: EAP-TLS not initializing<br>> <br>> Ben Tucker wrote:<br>> > Ok, installed v2, recreated my certs and still getting same problem.<br>> <br>> No, you're not.<br>> <br>> > rlm_eap: SSL error error:02001002:system library:fopen:No such file or<br>> directory<br>> <br>> That's a different error.<br>> <br>> > Any other ideas?<br>> <br>> Use the correct filename in the configuration. Ensure that the file<br>> exists.<br>> <br>> Alan DeKok.<br>> -<br>> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html<br></div> </div></body>
</html>