[EAP-TLS Windows 7] Problem with chain certificate on the client side

[jinx_20]

Attached you can find Sub2_CA chain and end user certificate issued by Sub2
CA.


jinx

#####################################################
End user certificate:
#####################################################

Bag Attributes
    localKeyID: B8 D0 2D C0 14 F7 6B 88 15 8A 9E FA C4 F8 4E A5 BE CA D1 46 
    friendlyName: __tmp_enduser
subject=/emailAddress=__tmp_enduser at company.com/CN=__tmp_enduser/GN=Tmp/SN=Enduser/OU=Organizational
Unit/O=Company
issuer=/CN=TMP WIFI CA/O=Company/C=US
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----


#####################################################
CA chain certificate:
#####################################################

Bag Attributes
    friendlyName: TMP ROOT CA
subject=/CN=TMP ROOT CA/OU=Digital Certificate Services/O=Company/C=US
issuer=/CN=TMP ROOT CA/OU=Digital Certificate Services/O=Company/C=US
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Bag Attributes
    friendlyName: TMP CA
subject=/CN=TMP CA/O=Company/C=US
issuer=/CN=TMP ROOT CA/OU=Digital Certificate Services/O=Company/C=US
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Bag Attributes
    friendlyName: TMP WIFI CA
subject=/CN=TMP WIFI CA/O=Company/C=US
issuer=/CN=TMP CA/O=Company/C=US
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----




--
View this message in context: http://freeradius.1045715.n5.nabble.com/EAP-TLS-Windows-7-Problem-with-chain-certificate-on-the-client-side-tp5664334p5669595.html
Sent from the FreeRadius - User mailing list archive at Nabble.com.