25 Jul
2019
25 Jul
'19
8:05 p.m.
Please, just use the current scripts as can be seen in https://wiki.freeradius.org/config/Certificates <https://wiki.freeradius.org/config/Certificates> > On 25 Jul 2019, at 21:03, peter <peterthesing@gmail.com> wrote: > > done that, same error > > Op 26-07-19 om 02:01 schreef Rogelio Guerra Riverón via Freeradius-Users: >> El 25 de julio de 2019 19:42:21 GMT-04:00, peter <peterthesing@gmail.com> escribió: >>> ssh-keygen is a tool to create keys >>> >>> in opensuse 15.1 you type in: >>> >>> "ssh-keygen" then it asks you the name in which file you wish to store >>> the generated key in. In my case e.g. server.pem. >>> >>> Then a key-file is generated with the for-mentioned name. Subsequently >>> >>> I copied the file from /etc to /etc/raddb/certs. >>> >>> Op 26-07-19 om 01:29 schreef Jorge Pereira: >>>>> On 25 Jul 2019, at 20:21, peter <peterthesing@gmail.com> wrote: >>>>> >>>>> Hi List members >>>>> >>>>> With ssh-keygen I have created -with password- server.pem and >>> ca.pem. Moved them to /etc/raddb/certs. >>>> ssh-keygen? >>>> >>>> >>>>> but now I've got the following errors: >>>>> >>>>> tls: Failed reading certificate file "/etc/raddb/certs/server.pem" >>>>> >>>>> tls: error:0906D06C:PEM routines:PEM_read_bio:no start line tls: >>> error:140DC009:SSL routines:use_certificate_chain_file:PEM lib >>> rlm_eap_tls: Failed initializing SSL context rlm_eap (EAP): Failed to >>> initialise rlm_eap_tls /etc/raddb/mods-enabled/eap[14]: Instantiation >>> failed for module "eap" >>>>> Please bear in mind I am new here and this is the first time I going >>> to use freeradius. A little patience is highly appreciated. >>>>> What is recommended to solve this problem? >>>>> >>>>> Thanks in advance >>>>> >>>>> Peter >>>>> >>>>> - >>>>> List info/subscribe/unsubscribe? See >>> http://www.freeradius.org/list/users.html >>>> - >>>> List info/subscribe/unsubscribe? See >>> http://www.freeradius.org/list/users.html >>> - >>> List info/subscribe/unsubscribe? See >>> http://www.freeradius.org/list/users.html >> Try with >> >> openssl req -new -x509 -keyout ca.key -out ca.pem -config ./ca.cnf Generating a 2048 bit RSA private >> >> Refer to: >> >> http://deployingradius.com/documents/configuration/certificates.html >> Saludos, >> >> Rogelio Guerra Riverón >> >> ______________________________ >> >> Empresa de Logistica Azumat >> Garantía de la Producción Azucarera >> ______________________________ >> - >> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html