Hello Alan, is there a possible way, to ignore all certificates in ttls and send an accept?? Robert -----Ursprüngliche Nachricht----- Von: Freeradius-Users [mailto:freeradius-users-bounces+robert.gladewitz=dbfz.de@lists.freeradius.org] Im Auftrag von Alan DeKok Gesendet: Mittwoch, 20. Dezember 2017 13:31 An: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Betreff: Re: After Upgrade from freeradius 2 to 3 (Debian 8 - 9): TLS Alert write:fatal:unsupported certificate
On Dec 20, 2017, at 1:51 AM, Boris Lytochkin <lytboris@yandex-team.ru> wrote:
Hi.
It's much better to fix your "CA" cert (which is not). ================ X509v3 Basic Constraints: critical CA:TRUE ================ is missing.
If that's the case then yes, the certs are broken. And hell will freeze over before I update FreeRADIUS to allow broken CA certs. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html