rlm_eap: SSL error error:0D07209B:asn1 encoding routines:ASN1_get_object:too long

[Michael Duckett]

Can someone help me understand what I'm doing wrong?  I would be so
appreciative!

Tried freeradius on both ubuntu and mac o/s.  Getting rlm_eap: SSL error
error:0D07209B:asn1 encoding routines:ASN1_get_object:too long error.

Verified certificates with openssl.

Ubuntu freeradius: FreeRADIUS Version 2.2.8, for host x86_64-pc-linux-gnu,
built on Jul 26 2017 at 15:27:21

openssl version
OpenSSL 1.0.2g  1 Mar 2016

Here's info from the log:

[tls] --> verify return:1
[tls]     TLS_accept: unknown state
[tls] <<< Unknown TLS version [length 0005]
[tls] <<< Unknown TLS version [length 0106]
[tls]     TLS_accept: unknown state
[tls] <<< Unknown TLS version [length 0005]
[tls] <<< Unknown TLS version [length 0088]
[tls] >>> Unknown TLS version [length 0005]
[tls] >>> Unknown TLS version [length 0002]
*TLS Alert write:fatal:decrypt error*
*    TLS_accept: failed in error*
*rlm_eap: SSL error error:0D07209B:asn1 encoding
routines:ASN1_get_object:too long*
*SSL: SSL_read failed inside of TLS (-1), TLS session fails.*
*TLS receive handshake failed during operation*
[tls] eaptls_process returned 4
[eap] Handler failed in EAP/tls
[eap] Failed in EAP select
++[eap] = invalid
+} # group authenticate = invalid
Failed to authenticate the user.
Using Post-Auth-Type Reject

Thanks in advance for any help you can provide.

Mike