Thanks, I created certificate openssl req -new -keyout /etc/freeradius/eap/client_key.pem -out /etc/freeradius/eap/client_req.pem -days 730 -passin pass:password -passout pass:password openssl ca -config /etc/ssl/openssl.cnf -policy policy_anything -out /etc/freeradius/eap/client_cert.pem -passin pass:password -key password -extensions xpclient_ext -extfile /etc/freeradius/eap/xpextensions -infiles /etc/freeradius/eap/client_req.pem And I put cliet_cert.pem to both certificate stores Trusted CA and Personal Are you sure that I should not change anything in my server config files Anyway it is still not working :(. Bartosz On Fri, May 15, 2009 at 2:38 PM, Ivan Kalik <tnt@kalik.net> wrote:
tls { private_key_file = /etc/freeradius/eap/newkey.pem certificate_file = /etc/freeradius/eap/newcert.pem CA_file = /etc/freeradius/eap/eapCA/cacert.pem dh_file = /etc/freeradius/eap/dh random_file = /etc/freeradius/eap/random fragment_size = 1024 include_length = yes check_crl = no }
I tryied both: newcert.pem and/or cacert.pem but still no communicate on debug screen:
Neither of them are client certificates.
newcert - server certificate cacert - ca certificate
Ivan Kalik Kalik Informatika ISP
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html