FreeRadius - Warning in windows when try connect to a Wi-Fi network (PEAP/MSCHAPv2)

[Rui Ribeiro]

Hello Helder,

This is a known issue about the Terena certificates being tied to an
intermediate CA. I would like also to talk with you about other issues,
since I am helping people in the PT EDUROAM federation. Please have a look
at your linkedin messages for my personal mobile.


Regards



> Message: 3
> Date: Fri, 13 Feb 2015 09:00:19 +0000
> From: Helder Santos <hsantos at ipbrick.com>
> To: freeradius-users at lists.freeradius.org
> Subject: FreeRadius - Warning in windows when try connect to a Wi-Fi
>         network (PEAP/MSCHAPv2)
> Message-ID: <54DDBD23.8000708 at ipbrick.com>
> Content-Type: text/plain; charset="utf-8"; Format="flowed"
>
>
> Hi,
>
> I setup the FreeRadius EAP module and an AP to authenticate with
> PEAP/MSCHAPv2. However when I connect with any laptop (Windows 7),
> appears the following warning:
>
> "Details Radius Server: xpto Root CA: AddTrust External CA Root The
> server xpto presented a valid certifiate issued by "AddTrust External CA
> Root", but "AddTrus External CA Root" is not configured as a valid trus
> anchor for this profile."
>
> I attached a image with this warning.
> If I ignore the warning, I can connect to the Wi-Fi network, however I
> want understand why this happen and I want that the warning not appear
> any more in other laptops.
>
> I have done several searches but could not solve this problem.
>
> Server details:
> - The server certificate is signed by COMODO
> - OS: Debian Wheezy
> - FreeRadius v2.1.12
>
> I attached the eap.conf and the windows 7 warning.
>
> Can anyone help me solve this problem?
>
> Regards,
> Helder
>
> --
Rui Ribeiro
Senior Sysadm
ISCTE-IUL
https://www.linkedin.com/pub/rui-ribeiro/16/ab8/434