Alan, I already have certificates created on my 2008 Server so I want to use those certificates on my Ubuntu Server without creating new ones. You mentioned my openssl configuration is wrong. Any suggestions on how I can fix the openssl configuration? Thanks Scott Message: 1 Date: Sun, 12 Feb 2012 10:26:44 +0100 From: Alan DeKok <aland@deployingradius.com> Subject: Re: Cetificates to Use with Ubuntu Server To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Message-ID: <4F3785D4.3020103@deployingradius.com> Content-Type: text/plain; charset=ISO-8859-1 Gilmour, Scott wrote:
I have Ubuntu Server installed and I have a Windows 2008 Server Certificate Authority
When I type the openssl command I keep on getting this error: CA certificate and CA private key do not match
Your OpenSSL configuration is wrong.
Ps. I was able to get Samba to work after loading the lates server Ubuntu 11.10. Thanks for everyones help.
That's good to hear.
root@FreeRadius:/etc/freeradius/certs# openssl ca -policy policy_anything -out certificate.pem -passin pass:enterasys -key enterasys -extensions xpserver_ext -extfile xpextensions -infiles server.csr
Don't do that. There's a lot of magic in OpenSSL. Instead, see raddb/certs/README. The process for creating certificates is automated, documented, and it *works*. Alan DeKok.