There's a good link here too: https://wiki.geant.org/display/H2eduroam/EAP+Server+Certificate+consideratio... On Sat, Oct 3, 2015 at 4:31 AM, Jim Seymour <jseymour@linxnet.com> wrote:
On Fri, 2 Oct 2015 21:38:58 -0400 Alan DeKok <aland@deployingradius.com> wrote:
[snip]
And... how did you create the self-signed certs?
By editing /etc/ssl/openssl.cnf and running CA.pl. That's all I've *ever* done. (Well, CA.sh, before. But similar results.)
[snip]
I have *zero* clue how people find random third-party web sites from nearly a decade ago, and cannot find the documentation that ships with the server.
Probably because...
The method to create certs is documented in raddb/certs/ . It's been there since before that crappy page was written.
*sigh* Except Debian, Ubuntu or whomever decided it would be a Good Idea to move it.
The locate command I ran, earlier, to find xpextensions?
$ ls -1 /usr/share/doc/freeradius/examples/certs bootstrap ca.cnf client.cnf Makefile README server.cnf xpextensions
PLEASE read the documentation that we've written. Pretty much everything else is old, broken, crappy, and lying to you.
Now that I found it: I just did.
I really wish people wouldn't move stuff around.
Thanks for the help, Alan, and everybody else.
Regards, Jim -- Note: My mail server employs *very* aggressive anti-spam filtering. If you reply to this email and your email is rejected, please accept my apologies and let me know via my web form at <http://jimsun.LinxNet.com/contact/scform.php>. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html