After Upgrade from freeradius 2 to 3 (Debian 8 - 9): TLS Alert write:fatal:unsupported certificate
aland at deployingradius.com
Wed Dec 20 13:31:19 CET 2017
> On Dec 20, 2017, at 1:51 AM, Boris Lytochkin <lytboris at yandex-team.ru> wrote:
> It's much better to fix your "CA" cert (which is not).
> X509v3 Basic Constraints: critical
> is missing.
If that's the case then yes, the certs are broken. And hell will freeze over before I update FreeRADIUS to allow broken CA certs.
More information about the Freeradius-Users