Make sure that either:
- The Client unselect "validate server certificate"
or
- The server have a valid signed SSL certificate (not self-signed)
Francois
On 2013-04-17 11:12 AM, Max McGrath wrote:
Seeing the following in the radius logs:
Wed Apr 17 10:10:30 2013 : Error: TLS Alert read:fatal:unknown CA
Wed Apr 17 10:10:30 2013 : Error: TLS_accept: failed in SSLv3 read
client certificate A
Wed Apr 17 10:10:30 2013 : Error: rlm_eap: SSL error
error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca
Wed Apr 17 10:10:30 2013 : Error: SSL: SSL_read failed inside of TLS
(-1), TLS session fails.
Wed Apr 17 10:10:30 2013 : Auth: Login incorrect (TLS Alert
read:fatal:unknown CA): [ggumino] (from client 10.2.1.32 port 1 cli
78-92-9C-AB-63-9A)
Some users work fine...others don't. Ideas?
--
Max McGrath
Network Administrator
Carthage College
262-552-5512
[email protected] <mailto:[email protected]>
------------------------------------------------------------------------------
Precog is a next-generation analytics platform capable of advanced
analytics on semi-structured data. The platform includes APIs for building
apps and a phenomenal toolset for data science. Developers can use
our toolset for easy data analysis & visualization. Get a free account!
http://www2.precog.com/precogplatform/slashdotnewsletter
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
--
Francois Gaudreault
Architecte de Solution Cloud | Cloud Solutions Architect
[email protected]
514-629-6775
- - -
CloudOps
420 rue Guy
Montréal QC H3J 1S6
www.cloudops.com
@CloudOps_
------------------------------------------------------------------------------
Precog is a next-generation analytics platform capable of advanced
analytics on semi-structured data. The platform includes APIs for building
apps and a phenomenal toolset for data science. Developers can use
our toolset for easy data analysis & visualization. Get a free account!
http://www2.precog.com/precogplatform/slashdotnewsletter
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
