configurating freeRADIUS

2005-03-16 Thread vicky
Hi,

I have recently downloaded and installed the latest version
(freeradius-1.0.2) at freeRADIUS.org
I have configurated server as I want it to be but i fail to check the
configuration (for example with check-radiusd-config). I get an error
that says: 

15654:error:0906D06C:PEM routines:PEM_read_bio:no start
line:pem_lib.c:632:Expecting: CERTIFICATE
15654:error:0200100E:system library:fopen:Bad
address:bss_file.c:259:fopen('','r')
15654:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:261:
15654:error:140AD002:SSL routines:SSL_CTX_use_certificate_file:system
lib:ssl_rsa.c:513:
rlm_eap_tls: Error reading certificate file
rlm_eap: Failed to initialize type tls
radiusd.conf[9]: eap: Module instantiation failed.

The system is running on a LINUX machine, fedora 3.0

I appreciate any tips and ideas about how the error can be solved.

Thanks in advance!

Vicky


This message was sent using IMP, the Internet Messaging Program.


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: configurating freeRADIUS

2005-03-16 Thread Stefan Winter
Hello,

 15654:error:0200100E:system library:fopen:Bad
 address:bss_file.c:259:fopen('','r')

The system calls is supposed to open a file, but no filename was given. That 
is not going to work.

Stefan Winter

-- 
Stefan WINTER

Fondation RESTENA - Rseau Tlinformatique de l'Education Nationale et de 
la Recherche
Ingnieur rseau et systme

6, rue Richard Coudenhove-Kalergi
L-1359 Luxembourg
email: [EMAIL PROTECTED]   tl.:   +352 424409-33
http://www.restena.lu   fax:   +352 422473

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: configurating freeRADIUS

2005-03-16 Thread Stefan Winter
Hello,

 That is not my code. Didn't touch that file. Do you have any ideas about
 how to go around it?

Not mine either :-) I'd suffest to first look into eap.conf in the tls {} 
stanza. It should contain file links to certificate files like

certificate_file = ${raddbdir}/certs/cert-srv.pem
CA_file = ${raddbdir}/certs/demoCA/cacert.pem

Make sure these entries exist and that they point to an existing file.

Greetings,

Stefan


-- 
Stefan WINTER

Fondation RESTENA - Rseau Tlinformatique de l'Education Nationale et de 
la Recherche
Ingnieur rseau et systme

6, rue Richard Coudenhove-Kalergi
L-1359 Luxembourg
email: [EMAIL PROTECTED]   tl.:   +352 424409-33
http://www.restena.lu   fax:   +352 422473

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html