|
Hello, I have radiusd-02.28.02, and I'm configuring
eaptls.
* radiusd.conf:
-------------------------------------------------
...
eap
{
# Invoke the default supported EAP type when # EAP-Identity response is received default_eap_type = tls
# Default expiry time to clean the EAP
list,
# It is maintained to co-relate the # EAP-response for each EAP-request sent. timer_expire = 60
# Supported
EAP-types
md5 { }
## FIXME: EAP-TLS is highly experimental EAP-Type at the moment.
# Please give feedback. tls { private_key_password = whatever private_key_file = /root/software/cert/cert-srv.pem
# Sometimes Private key & Certificate
are
located
# in the same file, then private_key_file & certificate_file # must contain the same file name. certificate_file = /root/software/cert/cert-srv.pem
# Trusted Root CA
list
CA_file = /root/software/cert/demoCA/cacert.pem
dh_file =
/root/software/cert/dh
random_file = /root/software/cert/random # # This can never exceed MAX_RADIUS_LEN (4096) # preferably half the MAX_RADIUS_LEN, to # accomodate other attributes in RADIUS packet. fragment_size = 1024 } } ...
authorize
{
preprocess suffix files eap } authenticate
{
unix eap } ------------------------------------------------
but when radius starts show this
error:
--------------------------------------------------
...
Module: Loaded eap
eap: default_eap_type = "tls" eap: timer_expire = 60 rlm_eap: Loaded and initialized the type md5 tls: private_key_file = "/root/software/cert/cert-srv.pem" tls: certificate_file = "/root/software/cert/cert-srv.pem" tls: CA_file = "/root/software/cert/demoCA/cacert.pem" tls: private_key_password = "whatever" tls: dh_file = "/root/software/cert/dh" tls: random_file = "/root/software/cert/random" tls: fragment_size = 1024 tls: include_length = yes ../sbin2/radiusd: error while loading shared libraries: /usr/local/radius2/lib/rlm_eap_tls.so.0: undefined symbol: SSL_CTX_set_msg_callback ------------------------------------------------- Somebody can help me, please.
|
- Re: freeradius and eaptls Manuel S�nchez Cuenca
- Re: freeradius and eaptls Artur Hecker
