EAP-TLS with Windows CA and CRL for Wireless Auth

Phil Mayers p.mayers at imperial.ac.uk
Tue Mar 8 14:06:06 CET 2011


On 08/03/11 13:01, Rudolph Bott wrote:

> Tue Mar 8 13:09:48 2011 : Error: --> verify error:num=36:unhandled
> critical CRL extension

This comes out of OpenSSL. OpenSSL can't parse your CRL.

You may need a newer version of OpenSSL; what does:

openssl crl -text -noout -in <thefile.pem> -inform pem

...say?



More information about the Freeradius-Users mailing list