After Upgrade from freeradius 2 to 3 (Debian 8 - 9): TLS Alert write:fatal:unsupported certificate

[Alan DeKok]

> On Dec 20, 2017, at 1:51 AM, Boris Lytochkin <lytboris at yandex-team.ru> wrote:
> 
> Hi.
> 
> It's much better to fix your "CA" cert (which is not).
> ================
>             X509v3 Basic Constraints: critical
>                 CA:TRUE
> ================
> is missing.

  If that's the case then yes, the certs are broken.  And hell will freeze over before I update FreeRADIUS to allow broken CA certs.

  Alan DeKok.