Nelson Murilo <[EMAIL PROTECTED]> wrote: > rlm_eap_tls: <<< TLS 10 Alert [ length 0002], fata unknown_ca
The user certificate isn't signed by a CA known to the server. > My certificate chain have: CA->RA->user_certificate, so ... > (I thinking I don't need use RA certificate) The debug logs would appear to disagree with you. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

