Michael,
Could you let me know how do u succeed with Setup:
FreeRADIUS Version 1.0.0-pre2 setup with only OpenSSL 0.9.7d I am getting
segmentation fault.
I have done workaround for this as I have installed OpenSSLs as per How-TO
guide and installed free-radius pre2. And works fine for me. With that I
have success with EAP/TLS and PEAP too.
Thank you,
Sathish,
www.goremote.com
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Michael
Schwartzkopff
Sent: Friday, June 18, 2004 5:26 PM
To: [EMAIL PROTECTED]
Subject: Problems with certificates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hi,
I want to use PEAP and created the certificates with CA.all in the scripts
dir. I copied the cert-srv.pem and root.pem to my config dir and configured
eap.conf according. But radiusd -XA stops with the following error:
tls: private_key_file = "/usr/local/etc/raddb/certs/cert-srv.pem"
tls: certificate_file = "/usr/local/etc/raddb/certs/cert-srv.pem"
tls: CA_file = "/usr/local/etc/raddb/certs/root.pem"
tls: private_key_password = "radius"
tls: dh_file = "/usr/local/etc/raddb/certs/dh"
tls: random_file = "/usr/local/etc/raddb/certs/random"
tls: fragment_size = 1024
tls: include_length = yes
tls: check_crl = no
tls: check_cert_cn = "(null)"
30092:error:0906D06C:PEM routines:PEM_read_bio:no start
line:pem_lib.c:663:Expecting: CERTIFICATE
30092:error:06065064:digital envelope routines:EVP_DecryptFinal:bad
decrypt:evp_enc.c:277:
30092:error:0906A065:PEM routines:PEM_do_header:bad decrypt:pem_lib.c:452:
30092:error:140B0009:SSL routines:SSL_CTX_use_PrivateKey_file:missing asn1
eos:ssl_rsa.c:707:
rlm_eap_tls: Error reading private key file
rlm_eap: Failed to initialize type tls
radiusd.conf[9]: eap: Module instantiation failed.
Setup: OpenSSL 0.9.7d
FreeRADIUS Version 1.0.0-pre2
Any idea what might be wrong?
- --
Dr. Michael Schwartzkopff
MultiNET Services GmbH
Bretonischer Ring 7
85630 Grasbrunn
Tel: (+49 89) 456 911 - 0
Fax: (+49 89) 456 911 - 21
mob: (+49 174) 343 28 75
PGP Fingerprint: F919 3919 FF12 ED5A 2801 DEA6 AA77 57A4 EDD8 979B
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
iD8DBQFA0thKqndXpO3Yl5sRAnNLAJ9lEpggk1VUHdH7Vg5i+cn7qar1oACgqzG/
xeov8WFRmLNbbzRdbwokG/8=
=/fAo
-----END PGP SIGNATURE-----
-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
