Decoupled accounting
Devinder Singh
devinbhullar at gmail.com
Mon Aug 3 08:29:41 CEST 2009
Hi Ivan,
these are the files in the /cert directory after i had ran the
instruction in RREADME
Could you let me know how to fix the errors
Thanks
linux-h9qt:/etc/raddb/certs # ls
01.pem ca.cnf client.cnf client.p12 index.txt
Makefile serial.old server.key
02.pem ca.der client.crt client.pem
index.txt.attr random server.cnf server.p12
03.pem ca.key client.csr devinder at palettemm.com.pem
index.txt.attr.old README server.crt server.pem
bootstrap ca.pem client.key dh
index.txt.old serial server.csr xpextensions
2009/8/3 Devinder Singh <devinbhullar at gmail.com>:
> Hi Ivan.
>
> Ok i have reformetated my machine and installed Radius 2.1.1 from Yast
> Open Suse 11.
>
> I followed the instructions in /etc/raddb/certs/README
>
>
> Module: Linked to sub-module rlm_eap_tls
> Module: Instantiating eap-tls
> tls {
> rsa_key_exchange = no
> dh_key_exchange = yes
> rsa_key_length = 512
> dh_key_length = 512
> verify_depth = 0
> pem_file_type = yes
> private_key_file = "/etc/raddb/certs/server.pem"
> certificate_file = "/etc/raddb/certs/server.pem"
> CA_file = "/etc/raddb/certs/ca.pem"
> private_key_password = "whatever"
> dh_file = "/etc/raddb/certs/dh"
> random_file = "/etc/raddb/certs/random"
> fragment_size = 1024
> include_length = yes
> check_crl = no
> cipher_list = "DEFAULT"
> make_cert_command = "/etc/raddb/certs/bootstrap"
> cache {
> enable = no
> lifetime = 24
> max_entries = 255
> }
> }
> rlm_eap: SSL error error:0200100D:system library:fopen:Permission
> denied
> rlm_eap_tls: Error reading certificate file
> /etc/raddb/certs/server.pem
> rlm_eap: Failed to initialize type tls
> /etc/raddb/eap.conf[17]: Instantiation failed for module "eap"
> /etc/raddb/sites-enabled/inner-tunnel[223]: Failed to find module
> "eap".
> /etc/raddb/sites-enabled/inner-tunnel[176]: Errors parsing
> authenticate section.
> }
> }
> Errors initializing modules
>
> 2009/8/1 Ivan Kalik <tnt at kalik.net>:
>>> I refeer only to version 1.0.4 for the serial file as its not there in
>>> /etc/raddb/certs/demoCA so i get the serial file from version 1.0.4
>>>
>>> But i still get the errror message Bad Encrypt.
>>>
>>> What shoud i do next.
>>
>> How about following the instructions in raddb/certs/README file?
>>
>> Ivan Kalik
>> Kalik Informatika ISP
>>
>>
>
>
>
> --
> Devinder
>
--
Devinder
More information about the Freeradius-Users
mailing list