"Dave Huff" <[EMAIL PROTECTED]> wrote:
>   rlm_eap_tls: <<< TLS 1.0 Alert [length 0002], fatal 
> certificate_unknown
> TLS Alert read:fatal:certificate unknown

  SSL is telling FreeRADIUS that the certificate sent by the client is
bad.

  You're probably doing EAP-TLS where the server has one cert, and the
client has cert signed by someone else entirely.  For EAP-TLS to work,
the client certs have to be signed by the server cert.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to