SSL3_GET_CLIENT_CERTIFICATE:peer did not return a certificate

john lists.john at
Sat Jun 13 06:44:56 CEST 2009

Hi Ivan,

I used the Makefile to generate the certs. I then exported ca.der and
client.p12 and installed them on the XP box. Did I get the wrong



On 6/12/09, Ivan Kalik <tnt at> wrote:
>> The same problem happens when I use the native MS PEAP client on XP/sp2.
>> I did indeed give the client a cert however it looks like I didn't
>> managed to generate it correctly. When I look in the "Control
>> Panel>Internet Properties>Certificates>" Section I see that it has a
>> red X next to it and it says "The integrity of this certificate cannot
>> be guaranteed. The certificate may be corrupted or may have been
>> altered." And When I look at Certification Path I see a message "This
>> certificate has a non-valid digital signature".
> Freeradius includes scripts for certificate creation. Instructions are in
> raddb/certs/README.
> Ivan Kalik
> Kalik Informatika ISP
> -
> List info/subscribe/unsubscribe? See

More information about the Freeradius-Users mailing list