Greetings,

I'm having some problems with EAP-TLS in FreeRadius 2.1.10. I have a client
where authentication attempts always fail with the relatively generic
error below. I've tried to figure out what it means with no luck. A search
of the source shows that the error code (ultimately 1042) is defined but
only used in one place, in ssl_err.c assigns the text version of the
error code. Beyond that I can't find any reference to this specific error
code. The function in question, ssl3_read_bytes(), has lots of places
it returns more specific error codes but I can't find any piece of code
where it returns this specific one. As a result I'm kind of stumped as to
what exactly is going wrong. Can anybody point me to where in the code
this error gets generated? Thanks in advance.

Fri May 27 10:17:51 2011 : Info: [tls] <<< TLS 1.0 Alert [length 0002], fatal 
bad_certificate  
Fri May 27 10:17:51 2011 : Error: TLS Alert read:fatal:bad certificate
Fri May 27 10:17:51 2011 : Error:     TLS_accept: failed in SSLv3 read client 
certificate A
Fri May 27 10:17:51 2011 : Error: rlm_eap: SSL error error:14094412:SSL 
routines:SSL3_READ_BYTES:sslv3 alert bad certificate
Fri May 27 10:17:51 2011 : Error: SSL: SSL_read failed inside of TLS (-1), TLS 
session fails.
Fri May 27 10:17:51 2011 : Debug: TLS receive handshake failed during operation

-----------------------------------------------------------------
| David Mitchell (mitch...@ucar.edu)       Network Engineer IV  |
| Tel: (303) 497-1845                      National Center for  |
| FAX: (303) 497-1818                      Atmospheric Research |
-----------------------------------------------------------------



______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to