Self Signed Certs Fail - pem/der

Ivan Kalik tnt at kalik.net
Tue Sep 15 10:43:11 CEST 2009


>>edit ca.cnf, server.cnf and client.cnf to ensure that
>>everything matches and expects the same organisation etc...
>>then you can re-run the bootstrap and it'll be fine
>
> I thought you only needed to edit the ca.cnf if you needed to make self
> signed root certs
> for EAP-PEAP clients. I did not see any note that said you needed to make
> the same edits to the
> server.cnf and client.cnf's ??

Issuer details for ca and server certificates need to match. Same applies
for clients if you are making those as well.

Ivan Kalik
Kalik Informatika ISP




More information about the Freeradius-Users mailing list