>>edit ca.cnf, server.cnf and client.cnf to ensure that >>everything matches and expects the same organisation etc... >>then you can re-run the bootstrap and it'll be fine > > I thought you only needed to edit the ca.cnf if you needed to make self > signed root certs > for EAP-PEAP clients. I did not see any note that said you needed to make > the same edits to the > server.cnf and client.cnf's ??
Issuer details for ca and server certificates need to match. Same applies for clients if you are making those as well. Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
