Errors while executing 'freeradius -X' command
Hi, I installed freeradius on my ubuntu linux system. I copied my key/certificates to the the location /etc/freeradius/madhu_certs and configured eap.conf accordingly. When I ran freeradius -X command it is giving the errors. Attached my outputs to this mail for reference. Can any one help me please? -- Thanks & Regards... Madhu
On Mon, Sep 24, 2012 at 03:58:12PM +0530, Madhu Sudhana Rao wrote:
I copied my key/certificates to the the location /etc/freeradius/madhu_certs and configured eap.conf accordingly.
rlm_eap_tls: Error reading certificate file /etc/freeradius/madhu_certs/Radius-PC-8-cert.pem
File/directory permissions? -- Matthew Newton, Ph.D. <mcn4@le.ac.uk> Systems Architect (UNIX and Networks), Network Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk>
Changed the file permissions like below but still same error persist; root@idea-desktop:/etc/freeradius/madhu-certs# ls -l total 24 -rwxr-xr-x 1 idea idea 245 2012-09-21 07:43 dh -rwxr-xr-x 1 idea idea 2334 2010-11-10 18:52 madhucerts-cacert.pem -rwxr-xr-x 1 idea idea 5666 2010-11-10 18:53 Radius-PC-8-cert.pem -rwxr-xr-x 1 idea idea 5686 2010-11-10 18:53 WiFi-client-cert.pem root@idea-desktop:/etc/freeradius/madhu-certs# errors: -------- rlm_eap: SSL error error:02001002:system library:fopen:No such file or directory rlm_eap_tls: Error reading certificate file /etc/freeradius/madhu-certs/Radius-PC-8-cert.pem rlm_eap: Failed to initialize type tls /etc/freeradius/eap.conf[17]: Instantiation failed for module "eap" /etc/freeradius/sites-enabled/inner-tunnel[223]: Failed to load module "eap". /etc/freeradius/sites-enabled/inner-tunnel[176]: Errors parsing authenticate section. -Thanks, Madhu. On Mon, Sep 24, 2012 at 6:47 AM, Matthew Newton <mcn4@leicester.ac.uk>wrote:
On Mon, Sep 24, 2012 at 03:58:12PM +0530, Madhu Sudhana Rao wrote:
I copied my key/certificates to the the location /etc/freeradius/madhu_certs and configured eap.conf accordingly.
rlm_eap_tls: Error reading certificate file /etc/freeradius/madhu_certs/Radius-PC-8-cert.pem
File/directory permissions?
-- Matthew Newton, Ph.D. <mcn4@le.ac.uk>
Systems Architect (UNIX and Networks), Network Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom
For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk> - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Thanks & Regards... Madhu
Hi, Now I am getting bit different error: rlm_eap: SSL error error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt rlm_eap_tls: Error reading private key file /etc/freeradius/madhu-certs/Radius-PC-8-cert.pem rlm_eap: Failed to initialize type tls /etc/freeradius/eap.conf[17]: Instantiation failed for module "eap" /etc/freeradius/sites-enabled/inner-tunnel[223]: Failed to load module "eap". /etc/freeradius/sites-enabled/inner-tunnel[176]: Errors parsing authenticate section. -Thanks, Madhu. On Mon, Sep 24, 2012 at 7:22 AM, Madhu Sudhana Rao <madhu542@gmail.com>wrote:
Changed the file permissions like below but still same error persist;
root@idea-desktop:/etc/freeradius/madhu-certs# ls -l total 24 -rwxr-xr-x 1 idea idea 245 2012-09-21 07:43 dh -rwxr-xr-x 1 idea idea 2334 2010-11-10 18:52 madhucerts-cacert.pem -rwxr-xr-x 1 idea idea 5666 2010-11-10 18:53 Radius-PC-8-cert.pem -rwxr-xr-x 1 idea idea 5686 2010-11-10 18:53 WiFi-client-cert.pem root@idea-desktop:/etc/freeradius/madhu-certs#
errors: -------- rlm_eap: SSL error error:02001002:system library:fopen:No such file or directory rlm_eap_tls: Error reading certificate file /etc/freeradius/madhu-certs/Radius-PC-8-cert.pem rlm_eap: Failed to initialize type tls /etc/freeradius/eap.conf[17]: Instantiation failed for module "eap" /etc/freeradius/sites-enabled/inner-tunnel[223]: Failed to load module "eap". /etc/freeradius/sites-enabled/inner-tunnel[176]: Errors parsing authenticate section.
-Thanks, Madhu.
On Mon, Sep 24, 2012 at 6:47 AM, Matthew Newton <mcn4@leicester.ac.uk>wrote:
On Mon, Sep 24, 2012 at 03:58:12PM +0530, Madhu Sudhana Rao wrote:
I copied my key/certificates to the the location /etc/freeradius/madhu_certs and configured eap.conf accordingly.
rlm_eap_tls: Error reading certificate file /etc/freeradius/madhu_certs/Radius-PC-8-cert.pem
File/directory permissions?
-- Matthew Newton, Ph.D. <mcn4@le.ac.uk>
Systems Architect (UNIX and Networks), Network Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom
For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk> - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Thanks & Regards... Madhu
-- Thanks & Regards... Madhu
On 24/09/12 12:29, Madhu Sudhana Rao wrote:
Hi,
Now I am getting bit different error:
What did you change?
rlm_eap: SSL error error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt
These errors all indicate problems with the cert/key files. Inspect them. Pay careful attention to their contents. Validate them using the "openssl" CLI tool. In this case, you've got the password for the private key wrong, or missing.
Hi,
Changed the file permissions like below but still same error persist;
1) what are the permissions for the actual certs/ directory? 2) what user/group does the radiusd daemon run as? best to make the certs directory and contents the same 3) are you running SELinux or AppArmor etc on this server... (what does the output of 'getenforce' say?) what does the output of 'ls -lZ' in the certs directory show? alan
Hi, Thanks for your reply.
1) what are the permissions for the actual certs/ directory?
I gave permissions to madhu-certs/ directory which are similar to certs/ (since I changed the default certs/ path in eap.conf file)
2) what user/group does the radiusd daemon run as? best to make the certs directory and contents the same
I am running freeradius -x as root user otherwise I am getting permissions denied problem.
3) are you running SELinux or AppArmor etc on this server...
(what does the output of 'getenforce' say?)
I am using Ubuntu 10.10 Linux
what does the output of 'ls -lZ' in the certs directory show?
root@idea-desktop:/etc/freeradius# ls -lZ certs/
total 4 lrwxrwxrwx 1 root freerad ? 34 2012-09-21 07:38 ca.pem -> /etc/ssl/certs/ca-certificates.crt -rw-r--r-- 1 root freerad ? 245 2012-09-21 07:38 dh lrwxrwxrwx 1 root freerad ? 12 2012-09-21 07:38 random -> /dev/urandom lrwxrwxrwx 1 root freerad ? 38 2012-09-21 07:38 server.key -> /etc/ssl/private/ssl-cert-snakeoil.key lrwxrwxrwx 1 root freerad ? 36 2012-09-21 07:38 server.pem -> /etc/ssl/certs/ssl-cert-snakeoil.pem root@idea-desktop:/etc/freeradius# ls -lZ madhu-certs total 24 -rwxr-xr-x 1 idea idea ? 245 2012-09-21 07:43 dh -rwxr-xr-x 1 idea idea ? 2334 2010-11-10 18:52 madhucerts-cacert.pem -rwxr-xr-x 1 idea idea ? 5666 2010-11-10 18:53 Radius-PC-8-cert.pem -rwxr-xr-x 1 idea idea ? 5686 2010-11-10 18:53 WiFi-client-cert.pem root@idea-desktop:/etc/freeradius# -Thanks, Madhu.
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Thanks & Regards... Madhu
participants (4)
-
alan buxey -
Madhu Sudhana Rao -
Matthew Newton -
Phil Mayers