check if u r having server.cnf, ca.cnf  & client.cnf in certs directory. If yes run bootstrap , to make client cert run make client.


On Wed, Mar 14, 2012 at 8:09 PM, suggestme <suggest_me@hotmail.com> wrote:
I tried: openssl dhparam -out dh 1024 as you suggested and dh file is created
as below:

#openssl dhparam -out dh 1024
Generating DH parameters, 1024 bit long safe prime, generator 2
This is going to take a long time
...................................................................+...+....+...................................................................................+...........+.......+.....................................+................+........+...........................................................................+..................................................+..............................+.............................................................+.........................................................................................................................................++*++*++*

Inside Dh file I can see:

-----BEGIN DH PARAMETERS-----
MIGHAoGBAKUwai2pBXG3jEBbBRk08wDTE+l0m6USXQcq5AF1FMM/3RxFOZvfgotu
qEqQJAYvUawmG2JScnPqPNeP2kHOCPyGrtCgAeXXKu0kbN8liniRLWpvUoy9LlJE
XMr0RyuNUJFUvnBdGL8Hup5X7pqIezIKTpvrgGmnNze+tytw8ZkjAgEC
-----END DH PARAMETERS-----

*Does this mean my OpenSSL is ok?*

I have used "make install" to install ports in freebsd and this command
works and everything is working good till now. I have already configured
Freeradius for the users in Active directory; everything is working perfect
for other authentications method. Should I try "make install" command
instead of "make" or "./bootstrap" going inside /usr/local/etc/raddb/certs
directory?


Thanks



--
View this message in context: http://freeradius.1045715.n5.nabble.com/Creating-Certificates-for-EAP-tp5564660p5564962.html
Sent from the FreeRadius - User mailing list archive at Nabble.com.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html