Re: After Upgrade from freeradius 2 to 3 (Debian 8 - 9): TLS Alert write:fatal:unsupported certificate

On Dec 20, 2017, at 1:51 AM, Boris Lytochkin <lytboris@yandex-team.ru> wrote:

Hi.

It's much better to fix your "CA" cert (which is not). ================ X509v3 Basic Constraints: critical CA:TRUE ================ is missing.

If that's the case then yes, the certs are broken. And hell will freeze over before I update FreeRADIUS to allow broken CA certs. Alan DeKok.