[MSCHAP/PEAP/EAP-TLS] Default example certificate error

[Pete Flynt]

Hi again,

On my quest to get working FreeRadius with Active Directory, I am now stuck 
in the TLS section.

Following some posts on the list ntlm_auth requires mschapv2 and mschapv2 
requires peap which needs tls to work!

So I tried this but without success. I'm using the default example 
certificates. It looks like the errors are in the source files.

That's what I get when executing radiusd:

tls: rsa_key_exchange = no
tls: dh_key_exchange = yes
tls: rsa_key_length = 512
tls: dh_key_length = 512
tls: verify_depth = 0
tls: CA_path = "(null)"
tls: pem_file_type = yes
tls: private_key_file = "/usr/local/etc/raddb/certs/cert-srv.pem"
tls: certificate_file = "(null)"
tls: CA_file = "/usr/local/etc/raddb/certs/demoCA/cacert.pem"
tls: private_key_password = "SecretKeyPass77"
tls: dh_file = "/usr/local/etc/raddb/certs/dh"
tls: random_file = "/dev/urandom"
tls: fragment_size = 1024
tls: include_length = yes
tls: check_crl = no
tls: check_cert_cn = "(null)"
4121:error:0906D06C:PEM routines:PEM_read_bio:no start 
line:pem_lib.c:632:Expecting: CERTIFICATE
4121:error:0200100E:system library:fopen:Bad 
address:bss_file.c:259:fopen('','r')
4121:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:261:
4121:error:140AD002:SSL routines:SSL_CTX_use_certificate_file:system 
lib:ssl_rsa.c:513:
rlm_eap_tls: Error reading certificate file
rlm_eap: Failed to initialize type tls
radiusd.conf[9]: eap: Module instantiation failed.

What could be wrong? I just followed the description of the conf files and 
some hints on the list here.


Regards,
Pete

_________________________________________________________________
FREE pop-up blocking with the new MSN Toolbar - get it now! 
http://toolbar.msn.click-url.com/go/onm00200415ave/direct/01/