Problems with the authentication of users and certificates TLS
Good morning everyone! Well, I have progressed a bit in the installation of RADIUS EAP TLS. what I did was install the version FreeRADIUS-1.0.4.tar.gz on my server, configure the client (AP) and modules to work with eap tls, probe with "radtest" and the response was: Sending Access-Request of id 240 to 127.0.0.1:1812 User-Name = "test" User-Password = "testing123" NAS-IP-Address = radius NAS-Port = 1812 rad_recv: Access-Accept packet from host 127.0.0.1:1812, id=240, length=20 by what I see this perfec! my problem is that I already have everything set up, including the AP and try to connect with a notebook but, first, the SSID of the notebook is not if but listed under the name hidden, when I want to connect asks me to configure the profile of the connection, but it set the connection fails. to consider: -configure a local user on the server - + EAP TLS is handled with certificates, and I do not install any certificate or touch any folder and cert / I have this: -rw-r--r-- 1 root root 721 Aug 20 15:44 cert-clt.der -rw-r--r-- 1 root root 1741 Aug 20 15:44 cert-clt.p12 -rw-r--r-- 1 root root 2452 Aug 20 15:44 cert-clt.pem -rw-r--r-- 1 root root 717 Aug 20 15:44 cert-srv.der -rw-r--r-- 1 root root 1733 Aug 20 15:44 cert-srv.p12 -rw-r--r-- 1 root root 2439 Aug 20 15:44 cert-srv.pem drwxr-xr-x 2 root root 4096 Aug 20 15:44 demoCA -rw-r--r-- 1 root root 0 Aug 20 15:44 dh -rw-r--r-- 1 root root 2913 Aug 20 15:44 newcert.pem -rw-r--r-- 1 root root 1753 Aug 20 15:44 newreq.pem -rw-r--r-- 1 root root 1024 Aug 20 15:44 random -rw-r--r-- 1 root root 431 Aug 20 15:44 README -rw-r--r-- 1 root root 954 Aug 20 15:44 root.der -rw-r--r-- 1 root root 1973 Aug 20 15:44 root.p12 -rw-r--r-- 1 root root 2764 Aug 20 15:44 root.pem should they have to install certificates is not what (I Wxp service pack 3) they occur any idea? -- -- Silvero Martin
Hi,
Well, I have progressed a bit in the installation of RADIUS EAP TLS. what I did was install the version FreeRADIUS-1.0.4.tar.gz on my server,
whoa. stop there. today is the 3rd of sept 2008. the current release of FreeRADIUS is 2.0.5 the last 1.x release was 1.1.7 so the question os why have you installed, today, an obsolete version of the server and then written to the list to ask for support? regarding EAP - if you want to use eg PEAP, you _can_ connect with no RADIUS cert on the client - IF the client has been configured to not bother checking certs. great for testing but an absolute no-no for a production system. alan
participants (2)
-
A.L.M.Buxey@lboro.ac.uk -
Martin Silvero