Hello list.

I am sorry about my poor english skills but hope i could be understood anyway.

I use freeradius 1.1-7 on fedora 8 (installed with yum command). right now, my users in the "/etc/raddb/users" file are able to authenticate without no problem.

i intend to use eap-tls and eap-peap to authenticate my users. to do so, i read this tutorial: http://www.wi-fiplanet.com/tutorials/article.php/3557251 (two sheets) which is very helpfull.

but on the second part of the tuto, i encounter a problem with the extensions part:

- it is said to create a file named "extensions" (my case /etc/pki/tls/extensions) and to copy that lines into:

[ xpclient_ext]
extendedKeyUsage = 1.3.6.1.5.5.7.3.2
[ xpserver_ext ]
extendedKeyUsage = 1.3.6.1.5.5.7.3.1

and then to modify my previous certificate like that:

# openssl ca -out master_cert.pem -extensions xpserver -infiles ./masterreq.pem
# openssl ca -out client_cert.pem -extensions xpserver -infiles ./clientreq.pem

when i do this, the system give me an error message:

[root@ensiasra ensiasCA]# pwd
/etc/pki/CA/ensiasCA
[root@ensiasra ensiasCA]# openssl ca -out certs/ensias_cert.pem -extensions xpserver_ext -infiles certs/radiusserverreq.pem
Using configuration from /etc/pki/tls/openssl.cnf
Enter pass phrase for /etc/pki/CA/ensiasCA/private/cakey.pem:
Error Loading extension section xpserver_ext
4230:error:0E06D06C:configuration file routines:NCONF_get_string:no value:conf_lib.c:329:group=CA_default name=email_in_dn
[root@ensiasra ensiasCA]#

i suppose i have problem creating extensions....

there's a long time i try to fix it (and some many before), and right now, i come and ask your help to fix it.

thanx for helping

MBA OYONE Joël
Lot. El Firdaous
Bât GH20, Porte A 204, Appt 8
20000 Oulfa
Casablanca - Maroc

Tél. : +212 69 25 85 70