Tom Schmitt wrote: > It is working, the clients are authenticated and happy, but in the logfile of > the Radiusserver I see each time the following messages: > >> Wed Mar 25 16:49:53 2009 : Error: TLS_accept:error in SSLv3 read client >> certificate A >> Wed Mar 25 16:49:53 2009 : Error: rlm_eap: SSL error >> error:00000000:lib(0):func(0):reason(0) >> Wed Mar 25 16:49:54 2009 : Error: rlm_eap: SSL error >> error:00000000:lib(0):func(0):reason(0) >> Wed Mar 25 16:49:54 2009 : Auth: Login OK: [host/client01.example.com] (from >> client WLANCONTROLLER nasid WLANCONTROLLER port 29 cli 00-23-34-35-36-36) > > As I understand the first lines, the Radiusserver can't read the certificate. > But if this is true, how the hell could the Login be OK? Without certificate > the Authentication should fail, shouldn't it? But if the certificates are > okay, what is the meaning of the errormessages? > > Sorry if this is trivial for some of you, but I really have no idea what to > do with this.
Ignore it. It is an openssl special "feature". The error messages don't occur in newer versions of FreeRADIUS. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

