Re: Ignoring EAP-Type/tls because we do not have OpenSSL,> support.
Hi David and Alexander... thank you, so much... I've tried your tips, but it didn't work... # dpkg -l |grep freeradius ii freeradius 2.1.9+git a high-performance and highly configurable R ii freeradius-common 2.1.9+git FreeRADIUS common files ii freeradius-dialupadmin 2.1.9+git set of PHP scripts for administering a FreeR ii freeradius-ldap 2.1.9+git LDAP module for FreeRADIUS server ii freeradius-utils 2.1.9+git FreeRADIUS client utilities ii libfreeradius-dev 2.1.9+git FreeRADIUS shared library development files ii libfreeradius2 2.1.9+git FreeRADIUS shared library # dpkg -l |grep libssl ii libssl-dev 0.9.8g-15+lenny8 SSL development libraries, header files and ii libssl0.9.8 0.9.8g-15+lenny8 SSL shared libraries # freeradius -v freeradius: FreeRADIUS Version 2.1.9, for host i486-pc-linux-gnu, built on Sep 13 2010 at 09:40:57 Copyright (C) 1999-2009 The FreeRADIUS server project and contributors. The messages keep appearing Ignoring EAP-Type/tls because we do not have OpenSSL support. Ignoring EAP-Type/ttls because we do not have OpenSSL support. Ignoring EAP-Type/peap because we do not have OpenSSL support. Thanks Douglas
Douglas Caro wrote:
Hi David and Alexander... thank you, so much...
I've tried your tips, but it didn't work...
<shrug> The Wiki contains instructions for building your own debian package with OpenSSL support. Alan DeKok.
Douglas Caro wrote:
# freeradius -v freeradius: FreeRADIUS Version 2.1.9, for host i486-pc-linux-gnu, built on Sep 13 2010 at 09:40:57 Copyright (C) 1999-2009 The FreeRADIUS server project and contributors.
It seems suspicious to me that your freeradius is reporting a build date of today. Unless the .deb installation causes this date to up updated, it implies that you built this binary locally. I have to be honest, even though I run Debian a lot I usually compile FreeRadius myself so I'm not that familiar with the packaged version. -David Mitchell
The messages keep appearing Ignoring EAP-Type/tls because we do not have OpenSSL support. Ignoring EAP-Type/ttls because we do not have OpenSSL support. Ignoring EAP-Type/peap because we do not have OpenSSL support.
Thanks Douglas - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- ----------------------------------------------------------------- | David Mitchell (mitchell@ucar.edu) Network Engineer IV | | Tel: (303) 497-1845 National Center for | | FAX: (303) 497-1818 Atmospheric Research | -----------------------------------------------------------------
David Mitchell wrote:
Douglas Caro wrote:
# freeradius -v freeradius: FreeRADIUS Version 2.1.9, for host i486-pc-linux-gnu, built on Sep 13 2010 at 09:40:57 Copyright (C) 1999-2009 The FreeRADIUS server project and contributors.
It seems suspicious to me that your freeradius is reporting a build date of today. Unless the .deb installation causes this date to up updated, it implies that you built this binary locally. I have to be honest, even though I run Debian a lot I usually compile FreeRadius myself so I'm not that familiar with the packaged version.
You tried Alexander's tips, not mine. You built your own binary, and if you didn't get TLS support you will have to debug the configure/make process yourself. The 2.1.8 version in the Lenny backports has TLS support built in. I'm 100% certain of this because I just installed it and checked. -David Mitchell
-David Mitchell
The messages keep appearing Ignoring EAP-Type/tls because we do not have OpenSSL support. Ignoring EAP-Type/ttls because we do not have OpenSSL support. Ignoring EAP-Type/peap because we do not have OpenSSL support.
Thanks Douglas - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- ----------------------------------------------------------------- | David Mitchell (mitchell@ucar.edu) Network Engineer IV | | Tel: (303) 497-1845 National Center for | | FAX: (303) 497-1818 Atmospheric Research | -----------------------------------------------------------------
Hi,
The messages keep appearing Ignoring EAP-Type/tls because we do not have OpenSSL support. Ignoring EAP-Type/ttls because we do not have OpenSSL support. Ignoring EAP-Type/peap because we do not have OpenSSL support.
I'm not sure which bit of this isnt clear enough? the FreeRADIUS daemon was not built with OpenSSL support - which means that when the ./configure stage was done, either the required libraries werent present or it was configured with eg --disable-openssl or such. (cant recall the flag off-hand 'cos I've never built it in that way). if you've installed eg ssl-dev package AFTER the configure and/or install then thigns wont be magically working! you must go through the whole configure stage WITH the right libraries installed. thats the runtime OpenSSL stuff AND the development (headers/includes) for OpenSSL alan
participants (4)
-
Alan Buxey -
Alan DeKok -
David Mitchell -
Douglas Caro