Hi I’m using Cisco AP 1100 and Centrino Wifi
Card on my laptop. I installed freeradius 0.9.3 and openssl 0.9.7d
on my debian computer, but i still have same error, here is log : modcall: entering group authenticate for request 2 rlm_eap: EAP packet type notification id 3 length 17 rlm_eap: EAP Start not found rlm_eap: Request found, released from the list rlm_eap: EAP_TYPE - tls rlm_eap: processing type tls rlm_eap_tls: Authenticate rlm_eap_tls: Length Included rlm_eap_tls: <<< TLS 1.0 Alert [length 0002], fatal
unknown_ca TLS Alert read:fatal:unknown CA TLS_accept:failed in SSLv3 read client certificate A rlm_eap_tls: SSL_read Error 24180:error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1
alert unknown ca:s3_pkt.c:1052:SSL alert number 48 24180:error:140940E5:SSL routines:SSL3_READ_BYTES:ssl
handshake failure:s3_pkt.c:837: Error code is ..... 5 Error in SSL ..... 5 rlm_eap_tls: BIO_read Error Error code is ..... 5 Error in SSL ..... 5 rlm_eap: Freeing handler modcall[authenticate]: module "eap" returns
ok for request 2 modcall: group authenticate returns ok for request 2 Delaying request 2 for 1 seconds Finished request 2 Going to the next request Waking up in 6 seconds... --- Walking the entire request list --- Cleaning up request 0 ID 23 with timestamp 406a9807 Cleaning up request 1 ID 24 with timestamp 406a9807 I make certificats with these scripts on
this site : http://www.impossiblereflex.com/8021x/eap-tls-HOWTO.htm
(CA.root, CA.svr, CA.clt) Many thanks for your help (Sorry for my bad english) Benoit |