Thanks,

I created certificate

openssl  req -new -keyout /etc/freeradius/eap/client_key.pem -out  /etc/freeradius/eap/client_req.pem -days 730 -passin pass:password -passout pass:password

openssl ca -config /etc/ssl/openssl.cnf -policy policy_anything -out /etc/freeradius/eap/client_cert.pem  -passin pass:password -key password -extensions xpclient_ext -extfile /etc/freeradius/eap/xpextensions -infiles /etc/freeradius/eap/client_req.pem

And I put cliet_cert.pem to both certificate stores Trusted CA and Personal

Are you sure that I should not change anything in my server config files

Anyway it is still not working :(.

Bartosz

On Fri, May 15, 2009 at 2:38 PM, Ivan Kalik <tnt@kalik.net> wrote:
> tls {
>       private_key_file = /etc/freeradius/eap/newkey.pem
>       certificate_file = /etc/freeradius/eap/newcert.pem
>       CA_file = /etc/freeradius/eap/eapCA/cacert.pem
>       dh_file = /etc/freeradius/eap/dh
>       random_file = /etc/freeradius/eap/random
>       fragment_size = 1024
>       include_length = yes
>       check_crl = no
>    }
>
> I tryied both:
> newcert.pem and/or cacert.pem
> but still no communicate on debug screen:

Neither of them are client certificates.

newcert - server certificate
cacert - ca certificate

Ivan Kalik
Kalik Informatika ISP

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html