On Sep 14, 2017, at 2:12 PM, Nicolás Guerra <ngr@vera.com.uy> wrote:
Hello everybody, I didn't find a thread with exactly my problem, so I start a new thread.
We generally recommend starting new threads.
I'm having problem with new certs in my freeradius server.
I did what README file but didn't work for me.
Follow my guide: http://deployingradius.com/
up to here, everything seems right. but when I start service, in service log I see this:
Thu Sep 14 14:09:13 2017 : ERROR: (4) eap_peap: ERROR: TLS Alert read:fatal:unknown CA Thu Sep 14 14:09:13 2017 : ERROR: (4) eap_peap: ERROR: TLS_accept: Failed in SSLv3 read client key exchange A Thu Sep 14 14:09:13 2017 : ERROR: (4) eap_peap: ERROR: Failed in __FUNCTION__ (SSL_read) Thu Sep 14 14:09:13 2017 : Auth: (4) Login incorrect (eap_peap: TLS Alert read:fatal:unknown CA): [usuario] (from client wrtnicolas.fder port 1 cli 28-56-5A-0B-6D-83)
That is likely a different client machine. And one which doesn't have the CA certificate installed.
any help will be wellcome.
Install the CA certificate on all client machines which need to authenticate. Alan Dekok.