Help with Certificates
Arron Fox
arronf at hotmail.com
Thu Aug 10 10:18:36 CEST 2017
I have read many articles, tried various things and now going round in circles. Is anyone able to point me in the right direction, which certificate has expired. When I checked them they are valid?
Many thanks in advance
Arron
tls {
ca_file = "/etc/openldap/certs/cacert.pem"
ca_path = "/etc/openldap/certs"
certificate_file = "/etc/openldap/certs/radius.pem"
private_key_file = "/etc/openldap/certs/radius.key"
start_tls = yes
}
}
rlm_ldap: Falling back to build time libldap version info. Query for LDAP_OPT_API_INFO returned: -1
rlm_ldap: libldap vendor: OpenLDAP version: 20439
accounting {
reference = "%{tolower:type.%{Acct-Status-Type}}"
}
post-auth {
reference = "."
}
rlm_ldap (ldap): Initialising connection pool
pool {
start = 5
min = 4
max = 32
spare = 3
uses = 0
lifetime = 0
cleanup_interval = 30
idle_timeout = 60
retry_delay = 1
spread = no
}
rlm_ldap (ldap): Opening additional connection (0) rlm_ldap (ldap): Connecting to ldap.prom.co.uk:389
TLS: error: the certificate '/etc/openldap/certs/radius.pem' could not be found in the database - error -8174:security library: bad database..
TLS: certificate '/etc/openldap/certs/radius.pem' successfully loaded from PEM file.
TLS: no unlocked certificate for certificate 'E=radius at domainA.co.uk,CN=domainA.dmz.local,OU=Company,O=Radius,L=Newbury,ST=Berkshire,C=GB'.
TLS: certificate [(null)] is not valid - error -8181:Peer's Certificate has expired..
TLS: error: connect - force handshake failure: errno 21 - moznss error -8174
TLS: can't connect: TLS error -8174:security library: bad database..
rlm_ldap (ldap): Could not start TLS: Connect error rlm_ldap (ldap): Opening connection failed (0) rlm_ldap (ldap): Removing connection pool
/etc/raddb/mods-enabled/ldap[8]: Instantiation failed for module "ldap"
More information about the Freeradius-Users
mailing list