I tried: openssl dhparam -out dh 1024 as you suggested and dh file is created as below: #openssl dhparam -out dh 1024 Generating DH parameters, 1024 bit long safe prime, generator 2 This is going to take a long time ...................................................................+...+....+...................................................................................+...........+.......+.....................................+................+........+...........................................................................+..................................................+..............................+.............................................................+.........................................................................................................................................++*++*++* Inside Dh file I can see: -----BEGIN DH PARAMETERS----- MIGHAoGBAKUwai2pBXG3jEBbBRk08wDTE+l0m6USXQcq5AF1FMM/3RxFOZvfgotu qEqQJAYvUawmG2JScnPqPNeP2kHOCPyGrtCgAeXXKu0kbN8liniRLWpvUoy9LlJE XMr0RyuNUJFUvnBdGL8Hup5X7pqIezIKTpvrgGmnNze+tytw8ZkjAgEC -----END DH PARAMETERS----- *Does this mean my OpenSSL is ok?* I have used "make install" to install ports in freebsd and this command works and everything is working good till now. I have already configured Freeradius for the users in Active directory; everything is working perfect for other authentications method. Should I try "make install" command instead of "make" or "./bootstrap" going inside /usr/local/etc/raddb/certs directory? Thanks -- View this message in context: http://freeradius.1045715.n5.nabble.com/Creating-Certificates-for-EAP-tp5564... Sent from the FreeRadius - User mailing list archive at Nabble.com.