Problem configuration eap-tls

listas mailistas at gmail.com
Fri Sep 22 15:27:22 CEST 2006


> all of these files mentioned exist and are readable by the radiusd process?

Yes, all of them have "chmod 777" just in case. The contents of server_keycert.pem and cacert.pem is the following:

server_keycert.pem:

-----BEGIN RSA PRIVATE KEY-----
Proc-Type: 4,ENCRYPTED
DEK-Info: DES-EDE3-CBC,****************

****************************************************************
****************************************************************
****************************************************************
****************************************************************
****************************************************************
-----END RSA PRIVATE KEY-----
-----BEGIN CERTIFICATE-----
****************************************************************
****************************************************************
****************************************************************
****************************************************************
****************************************************************
-----END CERTIFICATE-----

cacert.pem:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 0 (0x0)
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: *
        Validity
            Not Before: Sep 19 22:17:43 2006 GMT
            Not After : Sep 18 22:17:43 2009 GMT
        Subject: *
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
            RSA Public Key: (2048 bit)
                Modulus (2048 bit):
                    *
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints:
                CA:FALSE
            Netscape Comment:
                OpenSSL Generated Certificate
            X509v3 Subject Key Identifier:
                *
            X509v3 Authority Key Identifier:
                *

    Signature Algorithm: sha1WithRSAEncryption
        *
-----BEGIN CERTIFICATE-----
****************************************************************
****************************************************************
****************************************************************
****************************************************************
****************************************************************
-----END CERTIFICATE-----






More information about the Freeradius-Users mailing list