30 May
2021
30 May
'21
9:33 a.m.
On May 30, 2021, at 7:21 AM, Piotr Rudzki <ryba.lodz@gmail.com> wrote:
I've managed to resolve problem. Client device to verify certificate needs domain listed in the server's certificate CN or SAN, but I've got only server's FQDN in CN and IP in SAN. When I pass FQDN as domain it work's as expected.
Ah, OK. I suspect that the "internal" error is that you're running an older version of FreeRADIUS, which doesn't understand all of the newer OpenSSL errors. It should be better with 3.0.22. Alan DeKok.