freeradius server not running
Hi List members With ssh-keygen I have created -with password- server.pem and ca.pem. Moved them to /etc/raddb/certs. but now I've got the following errors: tls: Failed reading certificate file "/etc/raddb/certs/server.pem" tls: error:0906D06C:PEM routines:PEM_read_bio:no start line tls: error:140DC009:SSL routines:use_certificate_chain_file:PEM lib rlm_eap_tls: Failed initializing SSL context rlm_eap (EAP): Failed to initialise rlm_eap_tls /etc/raddb/mods-enabled/eap[14]: Instantiation failed for module "eap" Please bear in mind I am new here and this is the first time I going to use freeradius. A little patience is highly appreciated. What is recommended to solve this problem? Thanks in advance Peter
On 25 Jul 2019, at 20:21, peter <peterthesing@gmail.com> wrote:
Hi List members
With ssh-keygen I have created -with password- server.pem and ca.pem. Moved them to /etc/raddb/certs.
ssh-keygen?
but now I've got the following errors:
tls: Failed reading certificate file "/etc/raddb/certs/server.pem"
tls: error:0906D06C:PEM routines:PEM_read_bio:no start line tls: error:140DC009:SSL routines:use_certificate_chain_file:PEM lib rlm_eap_tls: Failed initializing SSL context rlm_eap (EAP): Failed to initialise rlm_eap_tls /etc/raddb/mods-enabled/eap[14]: Instantiation failed for module "eap"
Please bear in mind I am new here and this is the first time I going to use freeradius. A little patience is highly appreciated.
What is recommended to solve this problem?
Thanks in advance
Peter
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
ssh-keygen is a tool to create keys in opensuse 15.1 you type in: "ssh-keygen" then it asks you the name in which file you wish to store the generated key in. In my case e.g. server.pem. Then a key-file is generated with the for-mentioned name. Subsequently I copied the file from /etc to /etc/raddb/certs. Op 26-07-19 om 01:29 schreef Jorge Pereira:
On 25 Jul 2019, at 20:21, peter <peterthesing@gmail.com> wrote:
Hi List members
With ssh-keygen I have created -with password- server.pem and ca.pem. Moved them to /etc/raddb/certs.
ssh-keygen?
but now I've got the following errors:
tls: Failed reading certificate file "/etc/raddb/certs/server.pem"
tls: error:0906D06C:PEM routines:PEM_read_bio:no start line tls: error:140DC009:SSL routines:use_certificate_chain_file:PEM lib rlm_eap_tls: Failed initializing SSL context rlm_eap (EAP): Failed to initialise rlm_eap_tls /etc/raddb/mods-enabled/eap[14]: Instantiation failed for module "eap"
Please bear in mind I am new here and this is the first time I going to use freeradius. A little patience is highly appreciated.
What is recommended to solve this problem?
Thanks in advance
Peter
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
El 25 de julio de 2019 19:42:21 GMT-04:00, peter <peterthesing@gmail.com> escribió:
ssh-keygen is a tool to create keys
in opensuse 15.1 you type in:
"ssh-keygen" then it asks you the name in which file you wish to store the generated key in. In my case e.g. server.pem.
Then a key-file is generated with the for-mentioned name. Subsequently
I copied the file from /etc to /etc/raddb/certs.
Op 26-07-19 om 01:29 schreef Jorge Pereira:
On 25 Jul 2019, at 20:21, peter <peterthesing@gmail.com> wrote:
Hi List members
With ssh-keygen I have created -with password- server.pem and
ssh-keygen?
but now I've got the following errors:
tls: Failed reading certificate file "/etc/raddb/certs/server.pem"
tls: error:0906D06C:PEM routines:PEM_read_bio:no start line tls: error:140DC009:SSL routines:use_certificate_chain_file:PEM lib rlm_eap_tls: Failed initializing SSL context rlm_eap (EAP): Failed to initialise rlm_eap_tls /etc/raddb/mods-enabled/eap[14]: Instantiation failed for module "eap"
Please bear in mind I am new here and this is the first time I going to use freeradius. A little patience is highly appreciated.
What is recommended to solve this problem?
Thanks in advance
Peter
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
ca.pem. Moved them to /etc/raddb/certs. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Try with openssl req -new -x509 -keyout ca.key -out ca.pem -config ./ca.cnf Generating a 2048 bit RSA private Refer to: http://deployingradius.com/documents/configuration/certificates.html Saludos, Rogelio Guerra Riverón ______________________________ Empresa de Logistica Azumat Garantía de la Producción Azucarera ______________________________
done that, same error Op 26-07-19 om 02:01 schreef Rogelio Guerra Riverón via Freeradius-Users: > El 25 de julio de 2019 19:42:21 GMT-04:00, peter <peterthesing@gmail.com> escribió: >> ssh-keygen is a tool to create keys >> >> in opensuse 15.1 you type in: >> >> "ssh-keygen" then it asks you the name in which file you wish to store >> the generated key in. In my case e.g. server.pem. >> >> Then a key-file is generated with the for-mentioned name. Subsequently >> >> I copied the file from /etc to /etc/raddb/certs. >> >> Op 26-07-19 om 01:29 schreef Jorge Pereira: >>>> On 25 Jul 2019, at 20:21, peter <peterthesing@gmail.com> wrote: >>>> >>>> Hi List members >>>> >>>> With ssh-keygen I have created -with password- server.pem and >> ca.pem. Moved them to /etc/raddb/certs. >>> ssh-keygen? >>> >>> >>>> but now I've got the following errors: >>>> >>>> tls: Failed reading certificate file "/etc/raddb/certs/server.pem" >>>> >>>> tls: error:0906D06C:PEM routines:PEM_read_bio:no start line tls: >> error:140DC009:SSL routines:use_certificate_chain_file:PEM lib >> rlm_eap_tls: Failed initializing SSL context rlm_eap (EAP): Failed to >> initialise rlm_eap_tls /etc/raddb/mods-enabled/eap[14]: Instantiation >> failed for module "eap" >>>> Please bear in mind I am new here and this is the first time I going >> to use freeradius. A little patience is highly appreciated. >>>> What is recommended to solve this problem? >>>> >>>> Thanks in advance >>>> >>>> Peter >>>> >>>> - >>>> List info/subscribe/unsubscribe? See >> http://www.freeradius.org/list/users.html >>> - >>> List info/subscribe/unsubscribe? See >> http://www.freeradius.org/list/users.html >> - >> List info/subscribe/unsubscribe? See >> http://www.freeradius.org/list/users.html > Try with > > openssl req -new -x509 -keyout ca.key -out ca.pem -config ./ca.cnf Generating a 2048 bit RSA private > > Refer to: > > http://deployingradius.com/documents/configuration/certificates.html > > Saludos, > > Rogelio Guerra Riverón > > ______________________________ > > Empresa de Logistica Azumat > Garantía de la Producción Azucarera > ______________________________ > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Please, just use the current scripts as can be seen in https://wiki.freeradius.org/config/Certificates <https://wiki.freeradius.org/config/Certificates> > On 25 Jul 2019, at 21:03, peter <peterthesing@gmail.com> wrote: > > done that, same error > > Op 26-07-19 om 02:01 schreef Rogelio Guerra Riverón via Freeradius-Users: >> El 25 de julio de 2019 19:42:21 GMT-04:00, peter <peterthesing@gmail.com> escribió: >>> ssh-keygen is a tool to create keys >>> >>> in opensuse 15.1 you type in: >>> >>> "ssh-keygen" then it asks you the name in which file you wish to store >>> the generated key in. In my case e.g. server.pem. >>> >>> Then a key-file is generated with the for-mentioned name. Subsequently >>> >>> I copied the file from /etc to /etc/raddb/certs. >>> >>> Op 26-07-19 om 01:29 schreef Jorge Pereira: >>>>> On 25 Jul 2019, at 20:21, peter <peterthesing@gmail.com> wrote: >>>>> >>>>> Hi List members >>>>> >>>>> With ssh-keygen I have created -with password- server.pem and >>> ca.pem. Moved them to /etc/raddb/certs. >>>> ssh-keygen? >>>> >>>> >>>>> but now I've got the following errors: >>>>> >>>>> tls: Failed reading certificate file "/etc/raddb/certs/server.pem" >>>>> >>>>> tls: error:0906D06C:PEM routines:PEM_read_bio:no start line tls: >>> error:140DC009:SSL routines:use_certificate_chain_file:PEM lib >>> rlm_eap_tls: Failed initializing SSL context rlm_eap (EAP): Failed to >>> initialise rlm_eap_tls /etc/raddb/mods-enabled/eap[14]: Instantiation >>> failed for module "eap" >>>>> Please bear in mind I am new here and this is the first time I going >>> to use freeradius. A little patience is highly appreciated. >>>>> What is recommended to solve this problem? >>>>> >>>>> Thanks in advance >>>>> >>>>> Peter >>>>> >>>>> - >>>>> List info/subscribe/unsubscribe? See >>> http://www.freeradius.org/list/users.html >>>> - >>>> List info/subscribe/unsubscribe? See >>> http://www.freeradius.org/list/users.html >>> - >>> List info/subscribe/unsubscribe? See >>> http://www.freeradius.org/list/users.html >> Try with >> >> openssl req -new -x509 -keyout ca.key -out ca.pem -config ./ca.cnf Generating a 2048 bit RSA private >> >> Refer to: >> >> http://deployingradius.com/documents/configuration/certificates.html >> Saludos, >> >> Rogelio Guerra Riverón >> >> ______________________________ >> >> Empresa de Logistica Azumat >> Garantía de la Producción Azucarera >> ______________________________ >> - >> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Ok I will but if errors do occur may I call upon you once more? Greetz Peter Op 26-07-19 om 02:05 schreef Jorge Pereira: > Please, just use the current scripts as can be seen in https://wiki.freeradius.org/config/Certificates <https://wiki.freeradius.org/config/Certificates> > > >> On 25 Jul 2019, at 21:03, peter <peterthesing@gmail.com> wrote: >> >> done that, same error >> >> Op 26-07-19 om 02:01 schreef Rogelio Guerra Riverón via Freeradius-Users: >>> El 25 de julio de 2019 19:42:21 GMT-04:00, peter <peterthesing@gmail.com> escribió: >>>> ssh-keygen is a tool to create keys >>>> >>>> in opensuse 15.1 you type in: >>>> >>>> "ssh-keygen" then it asks you the name in which file you wish to store >>>> the generated key in. In my case e.g. server.pem. >>>> >>>> Then a key-file is generated with the for-mentioned name. Subsequently >>>> >>>> I copied the file from /etc to /etc/raddb/certs. >>>> >>>> Op 26-07-19 om 01:29 schreef Jorge Pereira: >>>>>> On 25 Jul 2019, at 20:21, peter <peterthesing@gmail.com> wrote: >>>>>> >>>>>> Hi List members >>>>>> >>>>>> With ssh-keygen I have created -with password- server.pem and >>>> ca.pem. Moved them to /etc/raddb/certs. >>>>> ssh-keygen? >>>>> >>>>> >>>>>> but now I've got the following errors: >>>>>> >>>>>> tls: Failed reading certificate file "/etc/raddb/certs/server.pem" >>>>>> >>>>>> tls: error:0906D06C:PEM routines:PEM_read_bio:no start line tls: >>>> error:140DC009:SSL routines:use_certificate_chain_file:PEM lib >>>> rlm_eap_tls: Failed initializing SSL context rlm_eap (EAP): Failed to >>>> initialise rlm_eap_tls /etc/raddb/mods-enabled/eap[14]: Instantiation >>>> failed for module "eap" >>>>>> Please bear in mind I am new here and this is the first time I going >>>> to use freeradius. A little patience is highly appreciated. >>>>>> What is recommended to solve this problem? >>>>>> >>>>>> Thanks in advance >>>>>> >>>>>> Peter >>>>>> >>>>>> - >>>>>> List info/subscribe/unsubscribe? See >>>> http://www.freeradius.org/list/users.html >>>>> - >>>>> List info/subscribe/unsubscribe? See >>>> http://www.freeradius.org/list/users.html >>>> - >>>> List info/subscribe/unsubscribe? See >>>> http://www.freeradius.org/list/users.html >>> Try with >>> >>> openssl req -new -x509 -keyout ca.key -out ca.pem -config ./ca.cnf Generating a 2048 bit RSA private >>> >>> Refer to: >>> >>> http://deployingradius.com/documents/configuration/certificates.html >>> Saludos, >>> >>> Rogelio Guerra Riverón >>> >>> ______________________________ >>> >>> Empresa de Logistica Azumat >>> Garantía de la Producción Azucarera >>> ______________________________ >>> - >>> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html >> - >> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Jul 25, 2019, at 7:21 PM, peter <peterthesing@gmail.com> wrote:
With ssh-keygen I have created -with password- server.pem and ca.pem.
Why? The process for creating certificates is documented, and works. $ cd raddb/certs $ make Edit the "cnf" files if you need to have custom fields for the certificates. Then, "make" again.
Moved them to /etc/raddb/certs.
but now I've got the following errors:
tls: Failed reading certificate file "/etc/raddb/certs/server.pem"
tls: error:0906D06C:PEM routines:PEM_read_bio:no start line tls: error:140DC009:SSL routines:use_certificate_chain_file:PEM lib rlm_eap_tls: Failed initializing SSL context rlm_eap (EAP): Failed to initialise rlm_eap_tls /etc/raddb/mods-enabled/eap[14]: Instantiation failed for module "eap"
The certificate that was created isn't in the correct format.
Please bear in mind I am new here and this is the first time I going to use freeradius. A little patience is highly appreciated.
What is recommended to solve this problem?
Follow the documentation. Don't use random third-party tools to create certificates in some random format. Alan DeKok.
participants (5)
-
Alan Buxey -
Alan DeKok -
Jorge Pereira -
peter -
Rogelio Guerra Riverón