TLS/SSL Error?

[Alan DeKok]

Mike Diggins wrote:
> I just recently enabled a WPA SSID on our wireless network. PEAP with
> MSCHAP V2 is the EAP method. As far as I know it's working correctly
> (from all my test clients anyway), but I have seen a number of these
> messages logged (FreeRadius 2.1.3) and I don't know where they're coming
> from. My Free radius server has a Thawte Certificate installed. I'm not
> sure what the message means?
> 
> Mar 18 15:01:01 rad01 radiusd[8452]: TLS Alert read:fatal:unknown CA

  The client is connecting with a certificate that is unknown to the
RADIUS server.

  i.e. blame the client.

  Alan DeKok.