Re: eap-tls and checking crl

Stefan Nowak wrote:

I configured Freeradius with eap/tls , everything is ok, the clients have access-accept but i have set in eap.conf "check_crl=no" and now i wanna use crl, then i changed "check_crl=yes" and write "CA_path= /bin/raddb/certs/" i create crl.pem and move it to /etc/raddb/certs/, next i used 'c_rechash /etc/raddb/certs/'. I think it was everything what i must do, but in radiusd -X show me some problem. rlm_eap: Handler failed in EAP/tls rlm_eap: Failed in EAP select

There's usually more output than that. i.e. the real cause of the problem is an error you deleted, and didn't post here. Alan DeKok.