On Wed, Jan 21, 2015 at 02:03:35PM +0100, marcos wrote:
Thanks, last information discovered is that CA certificate needs to have the intermediate CA included, but there is no instructions about how to do that. In Freeradius you need to create a ca-bundle file how apache?
As I said in the last message - just cat the .pem files together in the right order. e.g. it will look something like: -----BEGIN CERTIFICATE----- MIIF9TCCBN2gAwIBAg5wAAAHaIoSn5uBGFosNDfw0BAQUFADBeMRrRoLwK ... Uv7oSKSro7A7Hg3y0vqWa0snndL2mPDlHFrqR9qQ== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIF9TCCBN2gAwIBAg5wAAAHaIoSn5uBGFosNDfw0BAQUFADBeMRrRoLwK ... Uv7oSKSro7A7Hg3y0vqWa0snndL2mPDlHFrqR9qQ== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIF9TCCBN2gAwIBAg5wAAAHaIoSn5uBGFosNDfw0BAQUFADBeMRrRoLwK ... Uv7oSKSro7A7Hg3y0vqWa0snndL2mPDlHFrqR9qQ== -----END CERTIFICATE----- Matthew
.pem certificate file on FreeRADIUS containing (in this order):
RADIUS server certificate Intermediate certifiate
-- Matthew Newton, Ph.D. <mcn4@le.ac.uk> Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk>