check if u r having server.cnf, ca.cnf & client.cnf in certs directory. If yes run bootstrap , to make client cert run make client. On Wed, Mar 14, 2012 at 8:09 PM, suggestme <suggest_me@hotmail.com> wrote:
I tried: openssl dhparam -out dh 1024 as you suggested and dh file is created as below:
#openssl dhparam -out dh 1024 Generating DH parameters, 1024 bit long safe prime, generator 2 This is going to take a long time
...................................................................+...+....+...................................................................................+...........+.......+.....................................+................+........+...........................................................................+..................................................+..............................+.............................................................+.........................................................................................................................................++*++*++*
Inside Dh file I can see:
-----BEGIN DH PARAMETERS----- MIGHAoGBAKUwai2pBXG3jEBbBRk08wDTE+l0m6USXQcq5AF1FMM/3RxFOZvfgotu qEqQJAYvUawmG2JScnPqPNeP2kHOCPyGrtCgAeXXKu0kbN8liniRLWpvUoy9LlJE XMr0RyuNUJFUvnBdGL8Hup5X7pqIezIKTpvrgGmnNze+tytw8ZkjAgEC -----END DH PARAMETERS-----
*Does this mean my OpenSSL is ok?*
I have used "make install" to install ports in freebsd and this command works and everything is working good till now. I have already configured Freeradius for the users in Active directory; everything is working perfect for other authentications method. Should I try "make install" command instead of "make" or "./bootstrap" going inside /usr/local/etc/raddb/certs directory?
Thanks
-- View this message in context: http://freeradius.1045715.n5.nabble.com/Creating-Certificates-for-EAP-tp5564... Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html