Hi Jeson, Thanks for your help. I finally found the problem. It was because I use the same name for the client and the server, and that names were not correct on the local network (I forgot to add the domain). You have to use names that are in the DNS...
Jean-Guillaume ----- Original Message ----- From: "王志欣" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, June 23, 2003 12:00 AM Subject: Re: Re: Re: EAP/TLS Setup problem Hi Jean-Guillaume, Sorry for delay. I look through your script. Only difference between us is I only use OpenSSL-0.9.7b. Please create Root certificate first, and then server and client certificate. Let's test it again. Jeson [EMAIL PROTECTED] 2003-06-23 >Hi Jason, > >I forgot to say that I am on a freeBSD box. >I put in attachment the install programs, I used. >In addition I give you the logs (when doing ./CA.clt <client>, the ./CA.root >and >./CA.svr <server> were OK) : > >------------------------------------------------------------------------ >.... >.... >X509v3 extensions: > X509v3 Extended Key Usage: > TLS Web Client Authentication >Certificate is to be certified until Jun 19 07:46:03 2004 GMT (365 days) >Sign the certificate? [y/n]:y >failed to update database >TXT_DB error number 2 >No certificate matches private key >1228:error:0D07207B:asn1 encoding routines:ASN1_get_object:header too >long:asn1_lib.c:138:unable to load certificate >1229:error:0906D06C:PEM routines:PEM_read_bio:no start >line:pem_lib.c:632:Expecting: TRUSTED CERTIFICATE >------------------------------------------------------------------------ > >Thanks a lot for your help. > >Best Regards > >Jean-Guillaume > > > >----- Original Message ----- >From: "王志欣" <[EMAIL PROTECTED]> >To: <[EMAIL PROTECTED]> >Sent: Friday, June 20, 2003 3:22 AM >Subject: Re: Re: EAP/TLS Setup problem > > >Hi Jean-Guillaume, > >I also follow this guide. I succeed. Please post your log information. > > > Jeson >[EMAIL PROTECTED] > 2003-06-20 > >>Hi Umesh, >> >>I am trying to install a freeradius/EAP-TLS athentification for my wireless >>network (DWL 1000 AP +) by following the instructions at >>http://www.impossiblereflex.com/8021x/eap-tls-HOWTO.htm, but >>I don't manage to create correctly the certificate ... >>(I use openssl-0.9.7b) >>How do you manage to do it ? >> >>Thanks a lot for your help, >> >>Best regards, >> >>Jean-Guillaume >> >> >>----- Original Message ----- >>From: "Umesh" <[EMAIL PROTECTED]> >>To: <[EMAIL PROTECTED]> >>Sent: Tuesday, June 10, 2003 8:54 AM >>Subject: EAP/TLS Setup problem >> >> >>> Hi All, >>> >>> I am new to FreeRadius. I am trying to setup EAP/TLS authentication. I >>have >>> installed OpenSSL-0.9.7b and FreeRadius 0.8.1. I followed the >instructions >>at >>> http://www.impossiblereflex.com/8021x/eap-tls-HOWTO.htm, but when I run >>> >>> radiusd -x -A, an error occurs - Unknown value "EAP". >>> (I have set Auth-Type=EAP in /etc/raddb/users) >>> Any help would be appreciated. >>> >>> Regards, >>> Umesh >>> >>> - >>> List info/subscribe/unsubscribe? See >>http://www.freeradius.org/list/users.html >> >> >>- >>List info/subscribe/unsubscribe? See >http://www.freeradius.org/list/users.html > > > > > > > >- >List info/subscribe/unsubscribe? See >http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
