configure with eap-tls without openssl
dear all, please can someone tell me if it is possible te compile freeradius with eap tls without openssl because I'll use other certificates (.pem) to load?! and other process using an opnessl in another place?! I you have suggestions, thank you to help me.. On Thu, May 14, 2009 at 1:33 AM, aland <aland@deployingradius.com> wrote:
commit c8f57f3d5d688b9c3ac0b04c68a2fe00c677de87 Author: Alan T. DeKok <aland@freeradius.org> Date: Wed May 13 08:52:09 2009 +0200
More typos
Files changed: scripts/radwatch.in | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-)
====================================================================== commit 5138e7691c78ae2f674a82a5e077666c4109b0fd Author: Alan T. DeKok <aland@freeradius.org> Date: Wed May 13 08:51:53 2009 +0200
Corrected typo in last commit
Files changed: share/dictionary.cisco | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-)
====================================================================== - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html
Hi, .pem does not necessarily mean you use other certificates. What type of certificates do you use? X.509? PGP? At the moment, FreeRADIUS only runs with OpenSSL, but I am working on a GnuTLS EAP-TLS version. Can't promise that will work soon... Cheers Carolin new conf wrote:
dear all,
please can someone tell me if it is possible te compile freeradius with eap tls without openssl because I'll use other certificates (.pem) to load?! and other process using an opnessl in another place?!
I you have suggestions, thank you to help me..
On Thu, May 14, 2009 at 1:33 AM, aland <aland@deployingradius.com <mailto:aland@deployingradius.com>> wrote:
commit c8f57f3d5d688b9c3ac0b04c68a2fe00c677de87 Author: Alan T. DeKok <aland@freeradius.org <mailto:aland@freeradius.org>> Date: Wed May 13 08:52:09 2009 +0200
More typos
Files changed: scripts/radwatch.in <http://radwatch.in> | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-)
====================================================================== commit 5138e7691c78ae2f674a82a5e077666c4109b0fd Author: Alan T. DeKok <aland@freeradius.org <mailto:aland@freeradius.org>> Date: Wed May 13 08:51:53 2009 +0200
Corrected typo in last commit
Files changed: share/dictionary.cisco | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-)
====================================================================== - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html
------------------------------------------------------------------------
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html
I thank you for your response.. i have not any certificate.. all is done in a smartcard, also the process of openssl... that's why I have to use freeradius without openssl .. for instance, i try to serch the link between openssl and freeradius.. it's a bit complicated.. what idea can you have that can helps me? On Fri, May 15, 2009 at 11:01 AM, Carolin Latze <carolin.latze@unifr.ch>wrote:
Hi,
.pem does not necessarily mean you use other certificates. What type of certificates do you use? X.509? PGP?
At the moment, FreeRADIUS only runs with OpenSSL, but I am working on a GnuTLS EAP-TLS version. Can't promise that will work soon...
Cheers Carolin
new conf wrote:
dear all,
please can someone tell me if it is possible te compile freeradius with eap tls without openssl because I'll use other certificates (.pem) to load?! and other process using an opnessl in another place?!
I you have suggestions, thank you to help me..
On Thu, May 14, 2009 at 1:33 AM, aland <aland@deployingradius.com<mailto: aland@deployingradius.com>> wrote:
commit c8f57f3d5d688b9c3ac0b04c68a2fe00c677de87 Author: Alan T. DeKok <aland@freeradius.org <mailto:aland@freeradius.org>> Date: Wed May 13 08:52:09 2009 +0200
More typos
Files changed: scripts/radwatch.in <http://radwatch.in> | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-)
====================================================================== commit 5138e7691c78ae2f674a82a5e077666c4109b0fd Author: Alan T. DeKok <aland@freeradius.org <mailto:aland@freeradius.org>> Date: Wed May 13 08:51:53 2009 +0200
Corrected typo in last commit
Files changed: share/dictionary.cisco | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-)
====================================================================== - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html
------------------------------------------------------------------------
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html
Hi, that depends on your smart card interface. If you can use OpenSSL engines, it should be rather easy to integrate that into FreeRADIUS (if it's not already done, I didn't check that). Otherwise you have to write your own smart card integration I think. Cheers Carolin -----Original Message----- From: freeradius-devel-bounces+carolin.latze=unifr.ch@lists.freeradius.org on behalf of new conf Sent: Sun 24.05.2009 01:07 To: FreeRadius developers mailing list Subject: Re: configure with eap-tls without openssl I thank you for your response.. i have not any certificate.. all is done in a smartcard, also the process of openssl... that's why I have to use freeradius without openssl .. for instance, i try to serch the link between openssl and freeradius.. it's a bit complicated.. what idea can you have that can helps me? On Fri, May 15, 2009 at 11:01 AM, Carolin Latze <carolin.latze@unifr.ch>wrote:
Hi,
.pem does not necessarily mean you use other certificates. What type of certificates do you use? X.509? PGP?
At the moment, FreeRADIUS only runs with OpenSSL, but I am working on a GnuTLS EAP-TLS version. Can't promise that will work soon...
Cheers Carolin
new conf wrote:
dear all,
please can someone tell me if it is possible te compile freeradius with eap tls without openssl because I'll use other certificates (.pem) to load?! and other process using an opnessl in another place?!
I you have suggestions, thank you to help me..
On Thu, May 14, 2009 at 1:33 AM, aland <aland@deployingradius.com<mailto: aland@deployingradius.com>> wrote:
commit c8f57f3d5d688b9c3ac0b04c68a2fe00c677de87 Author: Alan T. DeKok <aland@freeradius.org <mailto:aland@freeradius.org>> Date: Wed May 13 08:52:09 2009 +0200
More typos
Files changed: scripts/radwatch.in <http://radwatch.in> | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-)
====================================================================== commit 5138e7691c78ae2f674a82a5e077666c4109b0fd Author: Alan T. DeKok <aland@freeradius.org <mailto:aland@freeradius.org>> Date: Wed May 13 08:51:53 2009 +0200
Corrected typo in last commit
Files changed: share/dictionary.cisco | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-)
====================================================================== - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html
------------------------------------------------------------------------
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html
no my smartcard is not managed with pkcs#15 to be used with engine opnessl (usedwith pkcs#11) ..isnt the condition to use Openssl engine? thanks! On Mon, May 25, 2009 at 8:43 AM, LATZE Carolin <carolin.latze@unifr.ch>wrote:
Hi,
that depends on your smart card interface. If you can use OpenSSL engines, it should be rather easy to integrate that into FreeRADIUS (if it's not already done, I didn't check that). Otherwise you have to write your own smart card integration I think.
Cheers Carolin
-----Original Message----- From: freeradius-devel-bounces+carolin.latze=unifr.ch@lists.freeradius.orgon behalf of new conf Sent: Sun 24.05.2009 01:07 To: FreeRadius developers mailing list Subject: Re: configure with eap-tls without openssl
I thank you for your response.. i have not any certificate.. all is done in a smartcard, also the process of openssl... that's why I have to use freeradius without openssl .. for instance, i try to serch the link between openssl and freeradius.. it's a bit complicated..
what idea can you have that can helps me?
On Fri, May 15, 2009 at 11:01 AM, Carolin Latze <carolin.latze@unifr.ch
wrote:
Hi,
.pem does not necessarily mean you use other certificates. What type of certificates do you use? X.509? PGP?
At the moment, FreeRADIUS only runs with OpenSSL, but I am working on a GnuTLS EAP-TLS version. Can't promise that will work soon...
Cheers Carolin
new conf wrote:
dear all,
please can someone tell me if it is possible te compile freeradius with eap tls without openssl because I'll use other certificates (.pem) to load?! and other process using an opnessl in another place?!
I you have suggestions, thank you to help me..
On Thu, May 14, 2009 at 1:33 AM, aland <aland@deployingradius.com <mailto: aland@deployingradius.com>> wrote:
commit c8f57f3d5d688b9c3ac0b04c68a2fe00c677de87 Author: Alan T. DeKok <aland@freeradius.org <mailto:aland@freeradius.org <aland@freeradius.org>>> Date: Wed May 13 08:52:09 2009 +0200
More typos
Files changed: scripts/radwatch.in <http://radwatch.in> | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-)
======================================================================
commit 5138e7691c78ae2f674a82a5e077666c4109b0fd Author: Alan T. DeKok <aland@freeradius.org <mailto:aland@freeradius.org <aland@freeradius.org>>> Date: Wed May 13 08:51:53 2009 +0200
Corrected typo in last commit
Files changed: share/dictionary.cisco | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-)
======================================================================
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html
------------------------------------------------------------------------
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html
hm... don't know at the moment. If you can't use OpenSSL, you have to implement the interface yourself into FreeRADIUS :) I think till now there is no standard way to do it. Grep through the source code, find the right position and modify it :-/ Cheers Carolin -----Original Message----- From: freeradius-devel-bounces+carolin.latze=unifr.ch@lists.freeradius.org on behalf of new conf Sent: Tue 26.05.2009 11:28 To: FreeRadius developers mailing list Subject: Re: configure with eap-tls without openssl no my smartcard is not managed with pkcs#15 to be used with engine opnessl (usedwith pkcs#11) ..isnt the condition to use Openssl engine? thanks! On Mon, May 25, 2009 at 8:43 AM, LATZE Carolin <carolin.latze@unifr.ch>wrote:
Hi,
that depends on your smart card interface. If you can use OpenSSL engines, it should be rather easy to integrate that into FreeRADIUS (if it's not already done, I didn't check that). Otherwise you have to write your own smart card integration I think.
Cheers Carolin
-----Original Message----- From: freeradius-devel-bounces+carolin.latze=unifr.ch@lists.freeradius.orgon behalf of new conf Sent: Sun 24.05.2009 01:07 To: FreeRadius developers mailing list Subject: Re: configure with eap-tls without openssl
I thank you for your response.. i have not any certificate.. all is done in a smartcard, also the process of openssl... that's why I have to use freeradius without openssl .. for instance, i try to serch the link between openssl and freeradius.. it's a bit complicated..
what idea can you have that can helps me?
On Fri, May 15, 2009 at 11:01 AM, Carolin Latze <carolin.latze@unifr.ch
wrote:
Hi,
.pem does not necessarily mean you use other certificates. What type of certificates do you use? X.509? PGP?
At the moment, FreeRADIUS only runs with OpenSSL, but I am working on a GnuTLS EAP-TLS version. Can't promise that will work soon...
Cheers Carolin
new conf wrote:
dear all,
please can someone tell me if it is possible te compile freeradius with eap tls without openssl because I'll use other certificates (.pem) to load?! and other process using an opnessl in another place?!
I you have suggestions, thank you to help me..
On Thu, May 14, 2009 at 1:33 AM, aland <aland@deployingradius.com <mailto: aland@deployingradius.com>> wrote:
commit c8f57f3d5d688b9c3ac0b04c68a2fe00c677de87 Author: Alan T. DeKok <aland@freeradius.org <mailto:aland@freeradius.org <aland@freeradius.org>>> Date: Wed May 13 08:52:09 2009 +0200
More typos
Files changed: scripts/radwatch.in <http://radwatch.in> | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-)
======================================================================
commit 5138e7691c78ae2f674a82a5e077666c4109b0fd Author: Alan T. DeKok <aland@freeradius.org <mailto:aland@freeradius.org <aland@freeradius.org>>> Date: Wed May 13 08:51:53 2009 +0200
Corrected typo in last commit
Files changed: share/dictionary.cisco | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-)
======================================================================
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html
------------------------------------------------------------------------
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html
OK :) Thank you for indication! On Tue, May 26, 2009 at 1:54 PM, LATZE Carolin <carolin.latze@unifr.ch>wrote:
hm...
don't know at the moment. If you can't use OpenSSL, you have to implement the interface yourself into FreeRADIUS :) I think till now there is no standard way to do it. Grep through the source code, find the right position and modify it :-/
Cheers Carolin
-----Original Message----- From: freeradius-devel-bounces+carolin.latze=unifr.ch@lists.freeradius.orgon behalf of new conf Sent: Tue 26.05.2009 11:28 To: FreeRadius developers mailing list Subject: Re: configure with eap-tls without openssl
no my smartcard is not managed with pkcs#15 to be used with engine opnessl (usedwith pkcs#11) ..isnt the condition to use Openssl engine?
thanks!
On Mon, May 25, 2009 at 8:43 AM, LATZE Carolin <carolin.latze@unifr.ch
wrote:
Hi,
that depends on your smart card interface. If you can use OpenSSL engines, it should be rather easy to integrate that into FreeRADIUS (if it's not already done, I didn't check that). Otherwise you have to write your own smart card integration I think.
Cheers Carolin
-----Original Message----- From: freeradius-devel-bounces+carolin.latze=unifr.ch@lists.freeradius.orgon behalf of new conf Sent: Sun 24.05.2009 01:07 To: FreeRadius developers mailing list Subject: Re: configure with eap-tls without openssl
I thank you for your response.. i have not any certificate.. all is done in a smartcard, also the process of openssl... that's why I have to use freeradius without openssl .. for instance, i try to serch the link between openssl and freeradius.. it's a bit complicated..
what idea can you have that can helps me?
On Fri, May 15, 2009 at 11:01 AM, Carolin Latze <carolin.latze@unifr.ch
wrote:
Hi,
.pem does not necessarily mean you use other certificates. What type of certificates do you use? X.509? PGP?
At the moment, FreeRADIUS only runs with OpenSSL, but I am working on a GnuTLS EAP-TLS version. Can't promise that will work soon...
Cheers Carolin
new conf wrote:
dear all,
please can someone tell me if it is possible te compile freeradius with eap tls without openssl because I'll use other certificates (.pem) to load?! and other process using an opnessl in another place?!
I you have suggestions, thank you to help me..
On Thu, May 14, 2009 at 1:33 AM, aland <aland@deployingradius.com <mailto: aland@deployingradius.com>> wrote:
commit c8f57f3d5d688b9c3ac0b04c68a2fe00c677de87 Author: Alan T. DeKok <aland@freeradius.org <mailto:aland@freeradius.org >>> Date: Wed May 13 08:52:09 2009 +0200
More typos
Files changed: scripts/radwatch.in <<aland@freeradius.org+%3Caland@freeradius.org> http://radwatch.in> | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-)
======================================================================
commit 5138e7691c78ae2f674a82a5e077666c4109b0fd Author: Alan T. DeKok <aland@freeradius.org <mailto:aland@freeradius.org >>> Date: Wed May 13 08:51:53 2009 +0200
Corrected typo in last commit
Files changed: share/dictionary.cisco | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-)
======================================================================
- List info/subscribe/unsubscribe? See <aland@freeradius.org+%3Caland@freeradius.org> http://www.freeradius.org/list/devel.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html
From your response, I have one more question, please.
The use of freeradius with openssl is considered a standard way to authenticate a clients? I know that the RADIUS Protocol is standard but the software using it... there is many ohters! thank you to help me undertand more!! On Tue, May 26, 2009 at 1:54 PM, LATZE Carolin <carolin.latze@unifr.ch>wrote:
hm...
don't know at the moment. If you can't use OpenSSL, you have to implement the interface yourself into FreeRADIUS :) I think till now there is no standard way to do it. Grep through the source code, find the right position and modify it :-/
Cheers Carolin
-----Original Message----- From: freeradius-devel-bounces+carolin.latze=unifr.ch@lists.freeradius.orgon behalf of new conf Sent: Tue 26.05.2009 11:28 To: FreeRadius developers mailing list Subject: Re: configure with eap-tls without openssl
no my smartcard is not managed with pkcs#15 to be used with engine opnessl (usedwith pkcs#11) ..isnt the condition to use Openssl engine?
thanks!
On Mon, May 25, 2009 at 8:43 AM, LATZE Carolin <carolin.latze@unifr.ch
wrote:
Hi,
that depends on your smart card interface. If you can use OpenSSL engines, it should be rather easy to integrate that into FreeRADIUS (if it's not already done, I didn't check that). Otherwise you have to write your own smart card integration I think.
Cheers Carolin
-----Original Message----- From: freeradius-devel-bounces+carolin.latze=unifr.ch@lists.freeradius.orgon behalf of new conf Sent: Sun 24.05.2009 01:07 To: FreeRadius developers mailing list Subject: Re: configure with eap-tls without openssl
I thank you for your response.. i have not any certificate.. all is done in a smartcard, also the process of openssl... that's why I have to use freeradius without openssl .. for instance, i try to serch the link between openssl and freeradius.. it's a bit complicated..
what idea can you have that can helps me?
On Fri, May 15, 2009 at 11:01 AM, Carolin Latze <carolin.latze@unifr.ch
wrote:
Hi,
.pem does not necessarily mean you use other certificates. What type of certificates do you use? X.509? PGP?
At the moment, FreeRADIUS only runs with OpenSSL, but I am working on a GnuTLS EAP-TLS version. Can't promise that will work soon...
Cheers Carolin
new conf wrote:
dear all,
please can someone tell me if it is possible te compile freeradius with eap tls without openssl because I'll use other certificates (.pem) to load?! and other process using an opnessl in another place?!
I you have suggestions, thank you to help me..
On Thu, May 14, 2009 at 1:33 AM, aland <aland@deployingradius.com <mailto: aland@deployingradius.com>> wrote:
commit c8f57f3d5d688b9c3ac0b04c68a2fe00c677de87 Author: Alan T. DeKok <aland@freeradius.org <mailto:aland@freeradius.org >>> Date: Wed May 13 08:52:09 2009 +0200
More typos
Files changed: scripts/radwatch.in <<aland@freeradius.org+%3Caland@freeradius.org> http://radwatch.in> | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-)
======================================================================
commit 5138e7691c78ae2f674a82a5e077666c4109b0fd Author: Alan T. DeKok <aland@freeradius.org <mailto:aland@freeradius.org >>> Date: Wed May 13 08:51:53 2009 +0200
Corrected typo in last commit
Files changed: share/dictionary.cisco | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-)
======================================================================
- List info/subscribe/unsubscribe? See <aland@freeradius.org+%3Caland@freeradius.org> http://www.freeradius.org/list/devel.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html
participants (3)
-
Carolin Latze -
LATZE Carolin
-
new conf