error in SSLv3 read client certificate A

[Alan DeKok]

Ancalagon wrote:
> That is on a Suse 10. The FR version is 1.1.0.

  Why?  1.1.7 has been out for a while.  Use it.

> I made a Xen domU with a Suse 10. I copy the /etc/raddb to the xen domU,
> and start the server. With the xen domU I'm able to make MAC
> authentication, but, when I want to enable also the EAP/TLS.
> I got the following error :
...
>    *TLS_accept*: *SSLv3* write certificate request A
>    *TLS_accept*: *SSLv3* flush data
>    *TLS_accept*:*error* in *SSLv3* read client certificate A

  It means nothing.  If you were using a recent version of the server,
that message wouldn't appear.

> After that, there is a loop with "Access-Challenge" and the port keep to
> be closed.

  If you were using a recent version of the server, you would see that
"eap.conf" contains documentation describing this issue, and how to fix it.

  The FAQ also talks about this issue.

  Alan DeKok.