Hi, Thanks for the reply. Now TLS connection is established. I get following error after 33seconds and sockets will be closed. waking up in 29.4 seconds. Reached idle timeout on socket auth from client (10.253.6.11, 1645) -> (*, 2083, virtual-server=default) ... shutting down socket auth from client (10.253.6.11, 1645) -> (*, 2083, virtual-server=default) Waking up in 2.9 seconds. ... cleaning up socket auth from client (10.253.6.11, 1645) -> (*, 2083, virtual-server=default) I have changed idle_timeout period to 0 from 30.(in tls and default file) According to my understanding 0 means infinite. So sockets and conenction has to be up for infinite amount of time. Please Correct me if I am wrong! Thanks, Kavya On Thu, Oct 16, 2014 at 3:30 PM, < freeradius-users-request@lists.freeradius.org> wrote:

Send Freeradius-Users mailing list submissions to freeradius-users@lists.freeradius.org

To subscribe or unsubscribe via the World Wide Web, visit http://lists.freeradius.org/mailman/listinfo/freeradius-users or, via email, send a message with subject or body 'help' to freeradius-users-request@lists.freeradius.org

You can reach the person managing the list at freeradius-users-owner@lists.freeradius.org

When replying, please edit your Subject line so it is more specific than "Re: Contents of Freeradius-Users digest..."

Today's Topics:

1. Re: Beginner help (A.L.M.Buxey@lboro.ac.uk)

----------------------------------------------------------------------

Message: 1 Date: Thu, 16 Oct 2014 08:48:30 +0000 From: A.L.M.Buxey@lboro.ac.uk To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Subject: Re: Beginner help Message-ID: <20141016084830.GA25352@lboro.ac.uk> Content-Type: text/plain; charset=us-ascii

Hi,

...

I generated .csr using openssl command and used this csr to generate CA signed certificate. I installed this CA signed certificate under trusted root of server. But when I run freeradius in debug mode, I get the following error:

eap.conf (2.x) or mods-enabled/eap files give clear documentation on the cert files etc required. the FreeRADIUS system comes with fully documented information about certificate generation and requirements

but your error looks like the client is using the wrong CA when talking to the RADIUS server

please use the history feature of the users mailing list to see exactly this same issue talked about many many times over the past years

alan

------------------------------

- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

End of Freeradius-Users Digest, Vol 114, Issue 50 *************************************************