Re: Self Signed Certs Fail - pem/der

...

edit ca.cnf, server.cnf and client.cnf to ensure that everything matches and expects the same organisation etc... then you can re-run the bootstrap and it'll be fine

I thought you only needed to edit the ca.cnf if you needed to make self signed root certs for EAP-PEAP clients. I did not see any note that said you needed to make the same edits to the server.cnf and client.cnf's ??

Issuer details for ca and server certificates need to match. Same applies for clients if you are making those as well. Ivan Kalik Kalik Informatika ISP