problem with CA certificate using mschapv2

[Matthew Newton]

On Wed, Jan 21, 2015 at 02:03:35PM +0100, marcos wrote:
> Thanks, last information discovered is that CA certificate needs to have
> the intermediate CA included, but there is no instructions about how to
> do that. In Freeradius you need to create a ca-bundle file how apache?

As I said in the last message - just cat the .pem files together
in the right order.

e.g. it will look something like:

-----BEGIN CERTIFICATE-----
MIIF9TCCBN2gAwIBAg5wAAAHaIoSn5uBGFosNDfw0BAQUFADBeMRrRoLwK
...
Uv7oSKSro7A7Hg3y0vqWa0snndL2mPDlHFrqR9qQ==
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
MIIF9TCCBN2gAwIBAg5wAAAHaIoSn5uBGFosNDfw0BAQUFADBeMRrRoLwK
...
Uv7oSKSro7A7Hg3y0vqWa0snndL2mPDlHFrqR9qQ==
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
MIIF9TCCBN2gAwIBAg5wAAAHaIoSn5uBGFosNDfw0BAQUFADBeMRrRoLwK
...
Uv7oSKSro7A7Hg3y0vqWa0snndL2mPDlHFrqR9qQ==
-----END CERTIFICATE-----

Matthew

> > .pem certificate file on FreeRADIUS containing (in this order):
> >
> >   RADIUS server certificate
> >   Intermediate certifiate

-- 
Matthew Newton, Ph.D. <mcn4 at le.ac.uk>

Systems Specialist, Infrastructure Services,
I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom

For IT help contact helpdesk extn. 2253, <ithelp at le.ac.uk>