problem with CA certificate using mschapv2
Matthew Newton
mcn4 at leicester.ac.uk
Wed Jan 21 15:27:04 CET 2015
On Wed, Jan 21, 2015 at 02:03:35PM +0100, marcos wrote:
> Thanks, last information discovered is that CA certificate needs to have
> the intermediate CA included, but there is no instructions about how to
> do that. In Freeradius you need to create a ca-bundle file how apache?
As I said in the last message - just cat the .pem files together
in the right order.
e.g. it will look something like:
-----BEGIN CERTIFICATE-----
MIIF9TCCBN2gAwIBAg5wAAAHaIoSn5uBGFosNDfw0BAQUFADBeMRrRoLwK
...
Uv7oSKSro7A7Hg3y0vqWa0snndL2mPDlHFrqR9qQ==
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
MIIF9TCCBN2gAwIBAg5wAAAHaIoSn5uBGFosNDfw0BAQUFADBeMRrRoLwK
...
Uv7oSKSro7A7Hg3y0vqWa0snndL2mPDlHFrqR9qQ==
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
MIIF9TCCBN2gAwIBAg5wAAAHaIoSn5uBGFosNDfw0BAQUFADBeMRrRoLwK
...
Uv7oSKSro7A7Hg3y0vqWa0snndL2mPDlHFrqR9qQ==
-----END CERTIFICATE-----
Matthew
> > .pem certificate file on FreeRADIUS containing (in this order):
> >
> > RADIUS server certificate
> > Intermediate certifiate
--
Matthew Newton, Ph.D. <mcn4 at le.ac.uk>
Systems Specialist, Infrastructure Services,
I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom
For IT help contact helpdesk extn. 2253, <ithelp at le.ac.uk>
More information about the Freeradius-Users
mailing list