Re: [SOLVED] 802.1x auth EAP-TLS problem

2011-06-29 Thread Alan DeKok
Christ Schlacta wrote: I always thought it was odd that the default makefile tried to sign the client certificate with the server certificate without the server certificate being signed with CA properties of any sort. Yes, well... I thought it was some advanced chained root thing, but I

Re: [SOLVED] 802.1x auth EAP-TLS problem

2011-06-29 Thread Marco Londero
On Wed, 29 Jun 2011 15:03:33 +0200, Alan DeKok al...@deployingradius.com wrote: I thought it was some advanced chained root thing, but I never got it to work even once, so I wrote my own, but it sucks. I think it may be a bug, and you just reminded me of that. someone who knows what they're

802.1x auth EAP-TLS problem

2011-06-28 Thread Marco Londero
Hi folks, I have a problem in my freeradius setup and I'm looking for some hints about that. Scenario: 1) GNU/Linux client w/ WPA supplicant configured to request access through EAP-TLS using a certificate (in order to achieve 802.1x ethernet authentication) 2) 802.1x enabled switch where

Re: 802.1x auth EAP-TLS problem

2011-06-28 Thread Alan DeKok
Marco Londero wrote: Freeradius debug log of the issue is here: The certificate produced by the client is unknown to the server. Any tips? Thank you! Use the correct certificates. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: 802.1x auth EAP-TLS problem

2011-06-28 Thread Phil Mayers
On 06/28/2011 08:41 AM, Marco Londero wrote: Hi folks, I have a problem in my freeradius setup and I'm looking for some hints about that. Scenario: 1) GNU/Linux client w/ WPA supplicant configured to request access through EAP-TLS using a certificate (in order to achieve 802.1x ethernet

Re: [SOLVED] 802.1x auth EAP-TLS problem

2011-06-28 Thread Marco Londero
On Tue, 28 Jun 2011 10:28:45 +0200, Alan DeKok al...@deployingradius.com wrote: Use the correct certificates. I re-generated client certificate and signed it w/ CA one instead of server (default Makefile conf) and worked. Sorry for the noise. -- mandi, Marco - List

Re: [SOLVED] 802.1x auth EAP-TLS problem

2011-06-28 Thread Christ Schlacta
On 6/28/2011 01:52, Marco Londero wrote: On Tue, 28 Jun 2011 10:28:45 +0200, Alan DeKokal...@deployingradius.com wrote: Use the correct certificates. I re-generated client certificate and signed it w/ CA one instead of server (default Makefile conf) and worked. Sorry for the noise. I