thanx for you reply, but as i said certificates are ok. Please see this log
[tls] --> User-Name = 0026826172C4@test_cpe.com [tls] --> BUF-Name = wi-tribe Pakistan Certification Authority [tls] --> subject = /C=PK/ST=Fedral Capital/L=Islamabad/O=wi-tribe Pakistan limited/OU=Network Operations/CN=wi-tribe Pakistan Certification Authority/[email protected] [tls] --> issuer = /C=PK/ST=Fedral Capital/L=Islamabad/O=wi-tribe Pakistan limited/OU=Network Operations/CN=wi-tribe Pakistan Certification Authority/[email protected] *[tls] --> verify return:1* *--> verify error:num=10:certificate has expired * *[tls] >>> TLS 1.0 Alert [length 0002], fatal certificate_expired * *TLS Alert write:fatal:certificate expired* * TLS_accept: error in SSLv3 read client certificate B* *rlm_eap: SSL error error:140890B2:SSL routines:SSL3_GET_CLIENT_CERTIFICATE:no certificate returned* * * *thanks* On Fri, Jul 19, 2013 at 2:58 PM, <[email protected]> wrote: > Hi, > > > I am trying to configure eap with some customized certificates, I have > > configured eap.config correctly. > > But I am getting the error of "certificate expired". Although i have > the > > latest certificates. > > certificate has expired. FreeRADIUS has no reason to lie. > > check the startup output of 'radiusd -X' - look for when it loads the > certs. > then use openssl to read those certs to see what the values are - server > cert, > CA cert....or client cert. whatever you're using eg > > openssl x509 -in server.pem -noout -text > > alan > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html > -- Best Regards Muhammad Nadeem Muhammad Ali Jinnah University
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
