eap_peap: TLS Alert read:fatal:unknown CA

Alan Buxey alan.buxey at gmail.com
Thu Sep 14 21:25:19 CEST 2017


NOT knowing correct CA...ie just clicking 'accept' on a prompt , is a
major security issue.

On 14 September 2017 at 19:53, Nicolás Guerra <ngr at vera.com.uy> wrote:
> that did the trick! thank you a lot!
>
> I copied ca.pem from freeradius server to the client's /etc/ssl/certs/ directory.
> is this the correct place to place the ca.pem file?
>
> I was confused because cellphones (Android, IPhones and Windows phones), and windows notebooks worked fine without the ca.pem
>
> any idea how can I config my Linux distro to conect without ca.pem?
>
> thanks again
>
> saludos/greetings,
> Nicolás.
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



More information about the Freeradius-Users mailing list