Freeradius-Users Digest, Vol 82, Issue 33

[Gilmour, Scott]

Alan,
I already have certificates created on my 2008 Server so I want to use those certificates on my Ubuntu Server without creating new ones.
You mentioned my openssl configuration is wrong.  Any suggestions on how I can fix the openssl configuration?
Thanks
Scott


Message: 1
Date: Sun, 12 Feb 2012 10:26:44 +0100
From: Alan DeKok <aland at deployingradius.com>
Subject: Re: Cetificates to Use with Ubuntu Server
To: FreeRadius users mailing list
	<freeradius-users at lists.freeradius.org>
Message-ID: <4F3785D4.3020103 at deployingradius.com>
Content-Type: text/plain; charset=ISO-8859-1

Gilmour, Scott wrote:
> I have Ubuntu Server installed and I have a Windows 2008 Server 
> Certificate Authority
> 
> When I type the openssl command I keep on getting this error:  CA 
> certificate and CA private key do not match

  Your OpenSSL configuration is wrong.

> Ps.  I was able to get Samba to work after loading the lates server 
> Ubuntu 11.10.  Thanks for everyones help.

  That's good to hear.

> root at FreeRadius:/etc/freeradius/certs# openssl ca -policy 
> policy_anything -out certificate.pem -passin pass:enterasys -key 
> enterasys -extensions xpserver_ext -extfile xpextensions -infiles 
> server.csr

  Don't do that.  There's a lot of magic in OpenSSL.  Instead, see raddb/certs/README.  The process for creating certificates is automated, documented, and it *works*.

  Alan DeKok.