-----Mensaje original-----
De: Stuart Harris [mailto:[EMAIL PROTECTED]
Enviado el: mi�rcoles, 29 de diciembre de 2004 18:32
Para: [email protected]
Asunto: RE: Errors in the initialization of EAP/PEAP with freeradius
(URGENT HELPPP!!) 


ok, as I showed bad ettique last time by re-posting the whole message + top
posting, I'll try to be good this time :P

You said you tried different versions of openSSL.. are you sure.. I have
numerous problems when I update openSSL .. by default when you link against
it, the linker first looks in /lib (which on many distros, have a libcrypto
and or libssl there...) then /usr/lib (usual place for openssl) and then
finally /usr/local/lib... it's very very easy to configure/build against
conflicting installs of openSSL.. a good example of this is Apache and or
PHP.. both are kind of weak (ironically) when it comes to using openSSL in a
specified location (can set -with-ssl= but it still prefers default if it
exists) ... so if you are trying with 'other versions of openssl' ensure
that...

/usr/lib/libcrypto* /usr/lib/libssl* /usr/include/openssl* /lib/libcrypto*
/lib/libssl* all point to 'the right version' ... if you've rebuilt
freeradius you can use ldd to check which ssl library freeradius has built
against, and then check to see if that library is in fact the correct one..
there is a tool in the contrib directory of openssh (note openssh not
openssl!) called findssl.sh ... which is very good for checking ssl sanity..
hope this helps a little :P


-------------------------------------------------------------------------------

Yes, I've made the same mistake, sorry to all.

Responding your questions, thanks for the details. I will do that check!
But every time I've tried a new version of openssl or freeradius, I've 
installed a fresh OS, to avoid that kind of problems, since it takes 15 to 
build a basic system...:)

The info will be helpful to me in future tests.

Juan Campanini
Chipsur Sistemas Inform�ticos S.L.
www.chipsur.es

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to