RE: SSL error

31 May 2013

      I recompiled and it shows ssl module being complied.  Here is the debug:

radiusd: FreeRADIUS Version 3.0.0 (git #f027a2e), for host i686-pc-linux-gnu, built on May 31 2013 at 12:04:34

There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A

PARTICULAR PURPOSE.

You may redistribute copies of FreeRADIUS under the terms of the

GNU General Public License.

For more information about these matters, see the file named COPYRIGHT.

Starting - reading configuration files ...

including dictionary file /usr/local/etc/raddb/dictionary

including configuration file /usr/local/etc/raddb/radiusd.conf

including configuration file /usr/local/etc/raddb/proxy.conf

including configuration file /usr/local/etc/raddb/clients.conf

including files in directory /usr/local/etc/raddb/mods-enabled/

including configuration file /usr/local/etc/raddb/mods-enabled/ntlm_auth

including configuration file /usr/local/etc/raddb/mods-enabled/preprocess

including configuration file /usr/local/etc/raddb/mods-enabled/realm

including configuration file /usr/local/etc/raddb/mods-enabled/passwd

including configuration file /usr/local/etc/raddb/mods-enabled/exec

including configuration file /usr/local/etc/raddb/mods-enabled/unix

including configuration file /usr/local/etc/raddb/mods-enabled/utf8

including configuration file /usr/local/etc/raddb/mods-enabled/detail

including configuration file /usr/local/etc/raddb/mods-enabled/dynamic_clients

including configuration file /usr/local/etc/raddb/mods-enabled/echo

including configuration file /usr/local/etc/raddb/mods-enabled/eap

including configuration file /usr/local/etc/raddb/mods-enabled/sradutmp

including configuration file /usr/local/etc/raddb/mods-enabled/dhcp

including configuration file /usr/local/etc/raddb/mods-enabled/files

including configuration file /usr/local/etc/raddb/mods-enabled/digest

including configuration file /usr/local/etc/raddb/mods-enabled/mschap

including configuration file /usr/local/etc/raddb/mods-enabled/soh

including configuration file /usr/local/etc/raddb/mods-enabled/detail.log

including configuration file /usr/local/etc/raddb/mods-enabled/linelog

including configuration file /usr/local/etc/raddb/mods-enabled/pap

including configuration file /usr/local/etc/raddb/mods-enabled/expiration

including configuration file /usr/local/etc/raddb/mods-enabled/expr

including configuration file /usr/local/etc/raddb/mods-enabled/attr_filter

including configuration file /usr/local/etc/raddb/mods-enabled/cache_eap

including configuration file /usr/local/etc/raddb/mods-enabled/logintime

including configuration file /usr/local/etc/raddb/mods-enabled/radutmp

including configuration file /usr/local/etc/raddb/mods-enabled/chap

including configuration file /usr/local/etc/raddb/mods-enabled/always

including configuration file /usr/local/etc/raddb/mods-enabled/replicate

including files in directory /usr/local/etc/raddb/policy.d/

including configuration file /usr/local/etc/raddb/policy.d/eap

including configuration file /usr/local/etc/raddb/policy.d/control

including configuration file /usr/local/etc/raddb/policy.d/dhcp

including configuration file /usr/local/etc/raddb/policy.d/accounting

including configuration file /usr/local/etc/raddb/policy.d/filter

including configuration file /usr/local/etc/raddb/policy.d/canonicalization

including configuration file /usr/local/etc/raddb/policy.d/cui

including configuration file /usr/local/etc/raddb/policy.d/operator-name

including files in directory /usr/local/etc/raddb/sites-enabled/

including configuration file /usr/local/etc/raddb/sites-enabled/default

including configuration file /usr/local/etc/raddb/sites-enabled/inner-tunnel

main {

security {

        allow_core_dumps = no

}

}

main {

        name = "radiusd"

        prefix = "/usr/local"

        localstatedir = "/usr/local/var"

        sbindir = "/usr/local/sbin"

        logdir = "/usr/local/var/log/radius"

        run_dir = "/usr/local/var/run/radiusd"

        libdir = "/usr/local/lib"

        radacctdir = "/usr/local/var/log/radius/radacct"

        hostname_lookups = no

        max_request_time = 30

        cleanup_delay = 5

        max_requests = 1024

        pidfile = "/usr/local/var/run/radiusd/radiusd.pid"

        checkrad = "/usr/local/sbin/checkrad"

        debug_level = 0

        proxy_requests = yes

log {

        stripped_names = no

        auth = no

        auth_badpass = no

        auth_goodpass = no

        colourise = yes

}

security {

        max_attributes = 200

        reject_delay = 1

        status_server = yes

}

}

radiusd: #### Loading Realms and Home Servers ####

proxy server {

        retry_delay = 5

        retry_count = 3

        default_fallback = no

        dead_time = 120

        wake_all_if_all_dead = no

}

home_server localhost {

        ipaddr = 127.0.0.1

        port = 1812

        type = "auth"

        secret = "testing123"

        response_window = 20

        max_outstanding = 65536

        zombie_period = 40

        status_check = "status-server"

        ping_interval = 30

        check_interval = 30

        num_answers_to_alive = 3

        revive_interval = 120

        status_check_timeout = 4

  coa {

        irt = 2

        mrt = 16

        mrc = 5

        mrd = 30

  }

  limit {

        max_connections = 16

        max_requests = 0

        lifetime = 0

        idle_timeout = 0

  }

}

home_server_pool my_auth_failover {

        type = fail-over

        home_server = localhost

}

realm example.com {

        auth_pool = my_auth_failover

}

realm LOCAL {

}

radiusd: #### Loading Clients ####

client localhost {

        ipaddr = 127.0.0.1

        require_message_authenticator = no

        secret = "testing123"

        nastype = "other"

        proto = "*"

  limit {

        max_connections = 16

        lifetime = 0

        idle_timeout = 30

  }

}

radiusd: #### Instantiating modules ####

instantiate {

}

modules {

  # Loaded module rlm_exec

  # Instantiating module "ntlm_auth" from file /usr/local/etc/raddb/mods-enabled/ntlm_auth

  exec ntlm_auth {

        wait = yes

        program = "/path/to/ntlm_auth --request-nt-key --domain=MYDOMAIN --username=%{mschap:User-Name} --password=%{User-Password}"

        input_pairs = "request"

        shell_escape = yes

  }

  # Loaded module rlm_preprocess

  # Instantiating module "preprocess" from file /usr/local/etc/raddb/mods-enabled/preprocess

  preprocess {

        huntgroups = "/usr/local/etc/raddb/huntgroups"

        hints = "/usr/local/etc/raddb/hints"

        with_ascend_hack = no

        ascend_channels_per_line = 23

        with_ntdomain_hack = no

        with_specialix_jetstream_hack = no

        with_cisco_vsa_hack = no

        with_alvarion_vsa_hack = no

  }

reading pairlist file /usr/local/etc/raddb/huntgroups

reading pairlist file /usr/local/etc/raddb/hints

  # Loaded module rlm_realm

  # Instantiating module "IPASS" from file /usr/local/etc/raddb/mods-enabled/realm

  realm IPASS {

        format = "prefix"

        delimiter = "/"

        ignore_default = no

        ignore_null = no

  }

  # Instantiating module "suffix" from file /usr/local/etc/raddb/mods-enabled/realm

  realm suffix {

        format = "suffix"

        delimiter = "@"

        ignore_default = no

        ignore_null = no

  }

  # Instantiating module "realmpercent" from file /usr/local/etc/raddb/mods-enabled/realm

  realm realmpercent {

        format = "suffix"

        delimiter = "%"

        ignore_default = no

        ignore_null = no

  }

  # Instantiating module "ntdomain" from file /usr/local/etc/raddb/mods-enabled/realm

  realm ntdomain {

        format = "prefix"

        delimiter = "\"

        ignore_default = no

        ignore_null = no

  }

  # Loaded module rlm_passwd

  # Instantiating module "etc_passwd" from file /usr/local/etc/raddb/mods-enabled/passwd

  passwd etc_passwd {

        filename = "/etc/passwd"

        format = "*User-Name:Crypt-Password:"

        delimiter = ":"

        ignorenislike = no

        ignoreempty = yes

        allowmultiplekeys = no

        hashsize = 100

  }

rlm_passwd: nfields: 3 keyfield 0(User-Name) listable: no

  # Instantiating module "exec" from file /usr/local/etc/raddb/mods-enabled/exec

  exec {

        wait = no

        input_pairs = "request"

        shell_escape = yes

  }

  # Loaded module rlm_unix

  # Instantiating module "unix" from file /usr/local/etc/raddb/mods-enabled/unix

  unix {

        radwtmp = "/usr/local/var/log/radius/radwtmp"

  }

  # Loaded module rlm_utf8

  # Instantiating module "utf8" from file /usr/local/etc/raddb/mods-enabled/utf8

  # Loaded module rlm_detail

  # Instantiating module "detail" from file /usr/local/etc/raddb/mods-enabled/detail

  detail {

        detailfile = "/usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d"

        header = "%t"

        detailperm = 384

        dirperm = 493

        locking = no

        log_packet_header = no

  }

  # Loaded module rlm_dynamic_clients

  # Instantiating module "dynamic_clients" from file /usr/local/etc/raddb/mods-enabled/dynamic_clients

  # Instantiating module "echo" from file /usr/local/etc/raddb/mods-enabled/echo

  exec echo {

        wait = yes

        program = "/bin/echo %{User-Name}"

        input_pairs = "request"

        output_pairs = "reply"

        shell_escape = yes

  }

  # Loaded module rlm_eap

  # Instantiating module "eap" from file /usr/local/etc/raddb/mods-enabled/eap

  eap {

        default_eap_type = "md5"

        timer_expire = 60

        ignore_unknown_eap_types = no

        mod_accounting_username_bug = no

        max_sessions = 4096

  }

   # Linked to sub-module rlm_eap_md5

   # Linked to sub-module rlm_eap_leap

   # Linked to sub-module rlm_eap_gtc

   gtc {

        challenge = "Password: "

        auth_type = "PAP"

   }

   # Linked to sub-module rlm_eap_tls

   tls {

        tls = "tls-common"

   }

   tls-config tls-common {

        rsa_key_exchange = no

        dh_key_exchange = yes

        rsa_key_length = 512

        dh_key_length = 512

        verify_depth = 0

        CA_path = "/usr/local/etc/raddb/certs"

        pem_file_type = yes

        private_key_file = "/usr/local/etc/raddb/certs/server.pem"

        certificate_file = "/usr/local/etc/raddb/certs/server.pem"

        CA_file = "/usr/local/etc/raddb/certs/ca.pem"

        private_key_password = "whatever"

        dh_file = "/usr/local/etc/raddb/certs/dh"

        fragment_size = 1024

        include_length = yes

        check_crl = no

        cipher_list = "DEFAULT"

        make_cert_command = "/usr/local/etc/raddb/certs/bootstrap"

        ecdh_curve = "prime256v1"

    cache {

        enable = yes

        lifetime = 24

        max_entries = 255

    }

    verify {

    }

    ocsp {

        enable = no

        override_cert_url = yes

        url = "http://127.0.0.1/ocsp/"

        use_nonce = yes

        timeout = 0

        softfail = yes

    }

   }

rlm_eap_tls: Failed initializing SSL context

rlm_eap (EAP): Failed to initialise rlm_eap_tls

/usr/local/etc/raddb/mods-enabled/eap[17]: Instantiation failed for module "eap"

From: freeradius-users-bounces+davidp=wirelessconnections.net@lists.freeradius.org [mailto:freeradius-users-bounces+davidp=wirelessconnections.net@lists.freeradius.org] On Behalf Of Alan Buxey
Sent: Friday, May 31, 2013 11:55 AM
To: FreeRadius users mailing list
Subject: Re: SSL error

Compiled without required ssl environment being present? The debug output will have printed or more information regarding the error

alan

RE: SSL error

David Peterson