Error Reading Certificate file

2011-12-30 Thread McSparin, Joe
Get this error when running radiusd -X I checked my passwords in
eap.cnf, ca.cnf, server.cnf and client.cnf

rlm_eap: SSL error error:0200100D:system library:fopen:Permission denied
rlm_eap_tls: Error reading certificate file
/usr/local/etc/raddb/certs/server.pem
rlm_eap: Failed to initialize type tls
/usr/local/etc/raddb/eap.conf[17]: Instantiation failed for module eap
/usr/local/etc/raddb/sites-enabled/default[314]: Failed to load module
eap.
/usr/local/etc/raddb/sites-enabled/default[252]: Errors parsing
authenticate section.

Joseph R. McSparin
Network Administrator
Hill Country Memorial Hospital
830 990 6638 phone
830 990 6623 fax
jmcspa...@hillcountrymemorial.org


-- 
This email message and any attachments are for the sole use of the intended 
recipient(s) and contain confidential and/or privileged information. Any 
unauthorized review, use, disclosure or distribution is prohibited. If you are 
not the intended recipient, please contact the sender by reply email and 
destroy all copies of the original message and any attachments.


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Error Reading Certificate file

2011-12-30 Thread Alan DeKok
McSparin, Joe wrote:
 Get this error when running radiusd -X I checked my passwords in
 eap.cnf, ca.cnf, server.cnf and client.cnf
 
 rlm_eap: SSL error error:0200100D:system library:fopen:Permission denied
 rlm_eap_tls: Error reading certificate file
 /usr/local/etc/raddb/certs/server.pem'

  Well... check the permissions.  You're likely running the server as
radiusd, and the files are readable only by root

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: Error Reading Certificate file

2011-12-30 Thread McSparin, Joe
That got it thanks.  I had changed the permission on the files but not
the certs directory. 


Joseph R. McSparin
Network Administrator
Hill Country Memorial Hospital
830 990 6638 phone
830 990 6623 fax
jmcspa...@hillcountrymemorial.org

-Original Message-
From:
freeradius-users-bounces+jmcsparin=hillcountrymemorial.org@lists.freerad
ius.org
[mailto:freeradius-users-bounces+jmcsparin=hillcountrymemorial.org@lists
.freeradius.org] On Behalf Of Alan DeKok
Sent: Friday, December 30, 2011 10:22 AM
To: FreeRadius users mailing list
Subject: Re: Error Reading Certificate file

McSparin, Joe wrote:
 Get this error when running radiusd -X I checked my passwords in
 eap.cnf, ca.cnf, server.cnf and client.cnf
 
 rlm_eap: SSL error error:0200100D:system library:fopen:Permission
denied
 rlm_eap_tls: Error reading certificate file
 /usr/local/etc/raddb/certs/server.pem'

  Well... check the permissions.  You're likely running the server as
radiusd, and the files are readable only by root

  Alan DeKok.
-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html

-- 
This email message and any attachments are for the sole use of the intended 
recipient(s) and contain confidential and/or privileged information. Any 
unauthorized review, use, disclosure or distribution is prohibited. If you are 
not the intended recipient, please contact the sender by reply email and 
destroy all copies of the original message and any attachments.



-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html