Re: EAP-TTLS: Access Reject comes randomly from AAA

2012-10-22 Thread Iliya Peregoudov
2012/06/04 15:52:41:686525 : FREERADIUS LOG   rlm_eap_tls:  TLS 1.0 
Alert [length 0002], fatal unknown_ca


This means WiMAX supplicant sends TLS Alert message. This is because 
supplicant do not trust CA that have issued AAA server certificate.


CA certificate of the CA that have issued AAA server certificate should 
be installed on WiMAX supplicant into list of trusted root CA 
certificates.


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: EAP-TTLS: Access Reject comes randomly from AAA

2012-10-20 Thread Alan DeKok
Rathod Subhashchandra wrote:
 This issue is coming consistently for multiple clients during Network Entry.

  So read the debug log.  It isn't hard.

 2012/06/04 15:52:41:686559 : FREERADIUS LOG TLS_accept:failed in
 SSLv3 read client certificate A 
 2012/06/04 15:52:41:686579 : FREERADIUS LOG rlm_eap: SSL error
 error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca

  Unknown CA.  Perhaps that means something.

 To resolve this issue, your timely help will be appreciated.

  This is a free mailing list.  Asking for timely help is not appropriate.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: EAP-TTLS: Access Reject comes randomly from AAA

2012-10-20 Thread val john
Hi...

just check the mail with subject: *generating ssl certs in debian squeeze*
, it may help

Thank You

On 20 October 2012 18:42, Alan DeKok al...@deployingradius.com wrote:

 Rathod Subhashchandra wrote:
  This issue is coming consistently for multiple clients during Network
 Entry.

   So read the debug log.  It isn't hard.

  2012/06/04 15:52:41:686559 : FREERADIUS LOG TLS_accept:failed in
  SSLv3 read client certificate A
  2012/06/04 15:52:41:686579 : FREERADIUS LOG rlm_eap: SSL error
  error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca

   Unknown CA.  Perhaps that means something.

  To resolve this issue, your timely help will be appreciated.

   This is a free mailing list.  Asking for timely help is not
 appropriate.

   Alan DeKok.
 -
 List info/subscribe/unsubscribe? See
 http://www.freeradius.org/list/users.html

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html