Hi, Openssl support .der format. But I convert the .pem format certificates to .der format. They do not realy work. The pem certificates is OK. Does anyone use .der format certificates? Please help me. Thanks. debug 1: pem_file_type = no tls: private_key_file = "/usr/local/etc/raddb/certs/server_keycert.der" tls: certificate_file = "/usr/local/etc/raddb/certs/server_keycert.der" tls: CA_file = "/usr/local/etc/raddb/certs/demoCA/cacert.der" tls: private_key_password = "whatever" tls: dh_file = "/usr/local/etc/raddb/certs/dh" tls: random_file = "/usr/local/etc/raddb/certs/random" tls: fragment_size = 1024 tls: include_length = yes tls: check_crl = no tls: check_cert_cn = "(null)" tls: cipher_list = "DEFAULT" tls: check_cert_issuer = "(null)" rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) rlm_eap_tls: Error reading Trusted root CA list rlm_eap: Failed to initialize type tls radiusd.conf[1]: eap: Module instantiation failed. radiusd.conf[575] Unknown module "eap". radiusd.conf[555] Failed to parse authenticate section. debug 2: tls: pem_file_type = no tls: private_key_file = "/usr/local/etc/raddb/certs/server_keycert.der" tls: certificate_file = "/usr/local/etc/raddb/certs/server_keycert.der" tls: CA_file = "/usr/local/etc/raddb/certs/demoCA/cacert.pem" tls: private_key_password = "whatever" tls: dh_file = "/usr/local/etc/raddb/certs/dh" tls: random_file = "/usr/local/etc/raddb/certs/random" tls: fragment_size = 1024 tls: include_length = yes tls: check_crl = no tls: check_cert_cn = "(null)" tls: cipher_list = "DEFAULT" tls: check_cert_issuer = "(null)" rlm_eap: SSL error error:0906D06C:PEM routines:PEM_read_bio:no start line rlm_eap_tls: Error reading private key file rlm_eap: Failed to initialize type tls radiusd.conf[1]: eap: Module instantiation failed. radiusd.conf[575] Unknown module "eap". radiusd.conf[555] Failed to parse authenticate section. John. Alan DeKok <aland@deployingradius.com> 写道： John wrote:
I am using freeradius 1.1.6. I want to know which certificate format can be supported on EAP-TLS module? Does it support .pfx format?
FreeRADIUS uses OpenSSL for it's certificate functions. See the OpenSSL documentation for which certificate formats it supports. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html --------------------------------- 雅虎邮箱，您的终生邮箱！