Help with Certificates

Arron Fox arronf at hotmail.com
Thu Aug 10 10:18:36 CEST 2017


I have read many articles, tried various things and now going round in circles. Is anyone able to point me in the right direction, which certificate has expired. When I checked them they are valid?

Many thanks in advance 

Arron

 tls {
        ca_file = "/etc/openldap/certs/cacert.pem"
        ca_path = "/etc/openldap/certs"
        certificate_file = "/etc/openldap/certs/radius.pem"
        private_key_file = "/etc/openldap/certs/radius.key"
        start_tls = yes
   }
  }
rlm_ldap: Falling back to build time libldap version info.  Query for LDAP_OPT_API_INFO returned: -1
rlm_ldap: libldap vendor: OpenLDAP version: 20439
   accounting {
        reference = "%{tolower:type.%{Acct-Status-Type}}"
   }
   post-auth {
        reference = "."
   }
rlm_ldap (ldap): Initialising connection pool
   pool {
        start = 5
        min = 4
        max = 32
        spare = 3
        uses = 0
        lifetime = 0
        cleanup_interval = 30
        idle_timeout = 60
        retry_delay = 1
        spread = no
   }
rlm_ldap (ldap): Opening additional connection (0) rlm_ldap (ldap): Connecting to ldap.prom.co.uk:389
TLS: error: the certificate '/etc/openldap/certs/radius.pem' could not be found in the database - error -8174:security library: bad database..
TLS: certificate '/etc/openldap/certs/radius.pem' successfully loaded from PEM file.
TLS: no unlocked certificate for certificate 'E=radius at domainA.co.uk,CN=domainA.dmz.local,OU=Company,O=Radius,L=Newbury,ST=Berkshire,C=GB'.
TLS: certificate [(null)] is not valid - error -8181:Peer's Certificate has expired..
TLS: error: connect - force handshake failure: errno 21 - moznss error -8174
TLS: can't connect: TLS error -8174:security library: bad database..
rlm_ldap (ldap): Could not start TLS: Connect error rlm_ldap (ldap): Opening connection failed (0) rlm_ldap (ldap): Removing connection pool
/etc/raddb/mods-enabled/ldap[8]: Instantiation failed for module "ldap"



More information about the Freeradius-Users mailing list