On Oct 9, 2021, at 2:52 AM, P.Thirunavukkarasu <drthiruna@tanuvas.org.in> wrote:
The FreeRADIUS server is working fine with eduroam. But showing the following error message for our local users while connecting with google ldap in debug mode
More messages show up in debug mode, yes...
*(108) eap_ttls: ERROR: TLS Alert read:fatal:unknown CA(108) eap_ttls: ERROR: TLS_accept: Failed in error(108) eap_ttls: ERROR: Failed in __FUNCTION__ (SSL_read)(108) eap_ttls: ERROR: error:14094418:SSL routines:ssl3_read_bytes:tlsv1 alert unknown ca(108)
Formatting it correctly would help, but whatever. This message means that the client does not recognize the CA used by FreeRADIUS. The solution is to configure the client correctly, so that it knows about the CA. Alan DeKok.