something is wrong with those. either they are not linked correclty or not accessible by the server during the startup or they are linked against something which is not what it should be (openssl 0.9.7 or later)
ciao artur
Manuel S�nchez Cuenca wrote:
Hello, I have radiusd-02.28.02, and I'm configuring eaptls.
* radiusd.conf:
-------------------------------------------------
...
eap {
# Invoke the default supported EAP type when
# EAP-Identity response is received
default_eap_type = tls
# Default expiry time to clean the EAP list,
# It is maintained to co-relate the
# EAP-response for each EAP-request sent.
timer_expire = 60
# Supported EAP-types
md5 {
}
## FIXME: EAP-TLS is highly experimental EAP-Type at the moment. # Please give feedback.
tls {
private_key_password = whatever
private_key_file = /root/software/cert/cert-srv.pem
# Sometimes Private key & Certificate are located
# in the same file, then private_key_file & certificate_file
# must contain the same file name.
certificate_file = /root/software/cert/cert-srv.pem
# Trusted Root CA list
CA_file = /root/software/cert/demoCA/cacert.pem
dh_file = /root/software/cert/dh
random_file = /root/software/cert/random
#
# This can never exceed MAX_RADIUS_LEN (4096)
# preferably half the MAX_RADIUS_LEN, to
# accomodate other attributes in RADIUS packet.
fragment_size = 1024
}
}
...
authorize {
preprocess
suffix
files
eap
}
authenticate {
unix
eap
}
------------------------------------------------
but when radius starts show this error:
--------------------------------------------------
...
Module: Loaded eap
eap: default_eap_type = "tls"
eap: timer_expire = 60
rlm_eap: Loaded and initialized the type md5
tls: private_key_file = "/root/software/cert/cert-srv.pem"
tls: certificate_file = "/root/software/cert/cert-srv.pem"
tls: CA_file = "/root/software/cert/demoCA/cacert.pem"
tls: private_key_password = "whatever"
tls: dh_file = "/root/software/cert/dh"
tls: random_file = "/root/software/cert/random"
tls: fragment_size = 1024
tls: include_length = yes
../sbin2/radiusd: error while loading shared libraries: /usr/local/radius2/lib/rlm_eap_tls.so.0: undefined symbol: SSL_CTX_set_msg_callback
-------------------------------------------------
Somebody can help me, please.
-- Artur Hecker D�partement Informatique et R�seaux, ENST Paris http://www.infres.enst.fr/~hecker
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
