Re: Issues with EAP-TLS and OpenSSL

2011-11-15 Thread Alan DeKok
Houston-III, Lester L wrote:
> The rlm_eap_tls was built and I think it was installed, but I'm still getting 
> the following errors when running the server.  The last line is probably 
> shown because the tls section of eap.conf is ignored, but I'm not sure why 
> I'm getting the other lines when I run configure and it states that OpenSSL 
> is supported.
> 
> Ignoring EAP-Type/tls because we do not have OpenSSL support.
> Ignoring EAP-Type/ttls because we do not have OpenSSL support.
> rlm_eap: No EAP type configured, module cannot do anything.

  The EAP module needs to be built with OpenSSL support.  If you've
re-built only rlm_eap_tls, then that isn't good enough.

  The simplest way to fix this is to *delete* your existing
installation.  Then re-build and re-install.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: Issues with EAP-TLS and OpenSSL

2011-11-15 Thread Houston-III, Lester L
The rlm_eap_tls was built and I think it was installed, but I'm still getting 
the following errors when running the server.  The last line is probably shown 
because the tls section of eap.conf is ignored, but I'm not sure why I'm 
getting the other lines when I run configure and it states that OpenSSL is 
supported.

Ignoring EAP-Type/tls because we do not have OpenSSL support.
Ignoring EAP-Type/ttls because we do not have OpenSSL support.
rlm_eap: No EAP type configured, module cannot do anything.

-Original Message-
From: 
freeradius-users-bounces+lester.l.houston-iii=boeing@lists.freeradius.org 
[mailto:freeradius-users-bounces+lester.l.houston-iii=boeing@lists.freeradius.org]
 On Behalf Of Alan DeKok
Sent: Tuesday, November 15, 2011 11:44 AM
To: FreeRadius users mailing list
Subject: Re: Issues with EAP-TLS and OpenSSL

Houston-III, Lester L wrote:
> I finally got FR to recognize the openssl install.  Not sure what I did to 
> fix it, but I installed some additional packages that required openssl such 
> as Kerberos and that seemed to fix things.

  For the record, installing Kerberos won't fix OpenSSL issues.

  Something else happened.  The configure log will show it.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Issues with EAP-TLS and OpenSSL

2011-11-15 Thread Alan DeKok
Houston-III, Lester L wrote:
> I finally got FR to recognize the openssl install.  Not sure what I did to 
> fix it, but I installed some additional packages that required openssl such 
> as Kerberos and that seemed to fix things.

  For the record, installing Kerberos won't fix OpenSSL issues.

  Something else happened.  The configure log will show it.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: Issues with EAP-TLS and OpenSSL

2011-11-15 Thread Houston-III, Lester L
I finally got FR to recognize the openssl install.  Not sure what I did to fix 
it, but I installed some additional packages that required openssl such as 
Kerberos and that seemed to fix things.

-Original Message-
From: 
freeradius-users-bounces+lester.l.houston-iii=boeing@lists.freeradius.org 
[mailto:freeradius-users-bounces+lester.l.houston-iii=boeing@lists.freeradius.org]
 On Behalf Of Alan DeKok
Sent: Tuesday, November 15, 2011 3:25 AM
To: FreeRadius users mailing list
Subject: Re: Issues with EAP-TLS and OpenSSL

Houston-III, Lester L wrote:
> I’m trying to configure my FreeRADIUS server to support EAP-TLS but it
> keeps reporting that there is no OpenSSL support.

  You need to install the openssl-dev package.  It includes the OpenSSL
header files.

  This is probably on the Wiki, under "building it yourself".

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: Issues with EAP-TLS and OpenSSL

2011-11-15 Thread Houston-III, Lester L
I have installed the openssl-dev package, but FR stills thinks openssl is not 
installed.

>  You need to install the openssl-dev package.  It includes the OpenSSL
>header files.
>
>  This is probably on the Wiki, under "building it yourself".
>
>  Alan DeKok.
>-
>List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Issues with EAP-TLS and OpenSSL

2011-11-15 Thread Alan DeKok
Houston-III, Lester L wrote:
> I’m trying to configure my FreeRADIUS server to support EAP-TLS but it
> keeps reporting that there is no OpenSSL support.

  You need to install the openssl-dev package.  It includes the OpenSSL
header files.

  This is probably on the Wiki, under "building it yourself".

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Issues with EAP-TLS and OpenSSL

2011-11-14 Thread Houston-III, Lester L
I'm trying to configure my FreeRADIUS server to support EAP-TLS but it keeps 
reporting that there is no OpenSSL support.  I'm currently using FreeRADIUS 
version 2.1.12 on Centos 6.  I built the server from source because I needed to 
include the JRADIUS plugin.  I have been able to get things working with the 
JRADIUS and PAP, but now I'm trying to use EAP-TLS.  I have already installed 
OpenSSL core, static and development packages using yum.   Issuing the 
configure commands always results in a statement that OpenSSL is not supported, 
 (Checking for OpenSSL support .. no)  What I'm I missing?  Does another 
package needs to be installed?

Lester Houston 111
Boeing Research & Technology
Electronics Prototyping and Integration Center (EPIC)
lester.l.houston-...@boeing.com
314-234-0621
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html