Could someone help me out pleas...
we're trying to make our wpa-wlan work, but currently i'm stuck with the
certificates part of tls.
i'd tried running CA.all, but the script gives me error's. (freeradius
1.1.3)
-----------------
+ openssl pkcs12 -export -in demoCA/cacert.pem -inkey newreq.pem -out
root.p12 -cacerts -passin pass:whatever -passout pass:whatever
Error opening input file demoCA/cacert.pem
demoCA/cacert.pem: No such file or directory
+ openssl pkcs12 -in root.p12 -out root.pem -passin pass:whatever
-passout pass:whatever
Error opening input file root.p12
root.p12: No such file or directory
+ openssl x509 -inform PEM -outform DER -in root.pem -out root.der
Error opening Certificate root.pem
20898:error:02001002:system library:fopen:No such file or
directory:bss_file.c:278:fopen('root.pem','r')
20898:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:280:
unable to load certificate
--------------------
in the script dir there is no demoCA en no cacert.pam?! also, the CA.all
script has a rm -rf demoCA.
so if i comment the 'rm' out, copied the default demoCA and cacert.pam
from my working installation
(version 1.0.2 that was shipped with fedora, and has certificates for
localhost)
and gues what, another error:
-------------------------------
+ openssl pkcs12 -export -in demoCA/cacert.pem -inkey newreq.pem -out
root.p12 -cacerts -passin pass:whatever -passout pass:whatever
No certificate matches private key
+ openssl pkcs12 -in root.p12 -out root.pem -passin pass:whatever
-passout pass:whatever
21004:error:0D07207B:asn1 encoding routines:ASN1_get_object:header too
long:asn1_lib.c:140:
+ openssl x509 -inform PEM -outform DER -in root.pem -out root.der
unable to load certificate
21005:error:0906D06C:PEM routines:PEM_read_bio:no start
line:pem_lib.c:642:Expecting: TRUSTED CERTIFICATE
+ echo -e ''
---------------------------------
dunno where to go now!? is there some help on how to make the
certificate thing work for tls, and windowsxpsp2 clients ??
Thx
Collen
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
