Re: EAP advanced auth. methods problem

2009-11-29 Thread tnt
Permissions are now 600 for client.[pem|key] and [ca|server].pem (still using ca and also server certificate on client), but the result is similar. Does it still say unknown ca or something else? If it's something else you need to poost a new debug. If it's still the same you need to go to

Re: EAP advanced auth. methods problem

2009-11-29 Thread Tomas Pelka
t...@kalik.net wrote: Permissions are now 600 for client.[pem|key] and [ca|server].pem (still using ca and also server certificate on client), but the result is similar. Does it still say unknown ca or something else? If it's something else you need to poost a new debug. If it's still the

Re: EAP advanced auth. methods problem

2009-11-28 Thread Tomas Pelka
t...@kalik.net wrote: t...@kalik.net wrote: Also tried modify wpa_supplicant conf: - ca_cert=ca.pem + ca_cert=server.pem But with the same result. Because the path is wrong, ie. certificate is not there. Put the correct path to where you have imported the certificate. Ivan Kalik -

Re: EAP advanced auth. methods problem

2009-11-23 Thread Tomas Pelka
t...@kalik.net wrote: Also tried modify wpa_supplicant conf: - ca_cert=ca.pem + ca_cert=server.pem But with the same result. Because the path is wrong, ie. certificate is not there. Put the correct path to where you have imported the certificate. Ivan Kalik - List

Re: EAP advanced auth. methods problem

2009-11-23 Thread Paul Ryszka
On Mon, 2009-11-23 at 20:37 +0100, Tomas Pelka wrote: t...@kalik.net wrote: Also tried modify wpa_supplicant conf: - ca_cert=ca.pem + ca_cert=server.pem But with the same result. Because the path is wrong, ie. certificate is not there. Put the correct path to where you have

Re: EAP advanced auth. methods problem

2009-11-23 Thread Tomas Pelka
Paul Ryszka wrote: On Mon, 2009-11-23 at 20:37 +0100, Tomas Pelka wrote: t...@kalik.net wrote: Also tried modify wpa_supplicant conf: - ca_cert=ca.pem + ca_cert=server.pem But with the same result. Because the path is wrong, ie. certificate is not there. Put the correct path to where you

Re: EAP advanced auth. methods problem

2009-11-23 Thread tnt
t...@kalik.net wrote: Also tried modify wpa_supplicant conf: - ca_cert=ca.pem + ca_cert=server.pem But with the same result. Because the path is wrong, ie. certificate is not there. Put the correct path to where you have imported the certificate. Ivan Kalik - List

Re: EAP advanced auth. methods problem

2009-11-23 Thread tnt
Paul Ryszka wrote: On Mon, 2009-11-23 at 20:37 +0100, Tomas Pelka wrote: t...@kalik.net wrote: Also tried modify wpa_supplicant conf: - ca_cert=ca.pem + ca_cert=server.pem But with the same result. Because the path is wrong, ie. certificate is not there. Put the correct path to where

Re: EAP advanced auth. methods problem

2009-11-23 Thread Alan Buxey
Hi, Problem is on the server site, isn't it? CA and server certs are now in same dir as whole RADIUS configuration, is necessary put certs into trusted directory like /etc/ssl/certs? you can stick them whereever the server user can read them - but you must specify the path of the file

Re: EAP advanced auth. methods problem

2009-11-22 Thread Tomas Pelka
t...@kalik.net wrote: So the problem is in certificate: [tls] TLS 1.0 Handshake [length 038d], Certificate -- verify error:num=20:unable to get local issuer certificate [tls] TLS 1.0 Alert [length 0002], fatal unknown_ca That means that you haven't imported self-signed ca certificate

Re: EAP advanced auth. methods problem

2009-11-22 Thread tnt
Also tried modify wpa_supplicant conf: - ca_cert=ca.pem + ca_cert=server.pem But with the same result. Because the path is wrong, ie. certificate is not there. Put the correct path to where you have imported the certificate. Ivan Kalik - List info/subscribe/unsubscribe? See

Re: EAP advanced auth. methods problem

2009-11-21 Thread Tomas Pelka
t...@kalik.net wrote: Alan DeKok wrote: Tomas Pelka wrote: have a problem with advanced EAP authentication methods including PEAP, EAP-TLS, EAP-TTLS-MD5/MSCHAPV2. I wouldn't call them advanced... Certs was created with the makefile included in freeradius sources. All my experiments

Re: EAP advanced auth. methods problem

2009-11-21 Thread Tomas Pelka
Tomas Pelka wrote: t...@kalik.net wrote: Alan DeKok wrote: Tomas Pelka wrote: have a problem with advanced EAP authentication methods including PEAP, EAP-TLS, EAP-TTLS-MD5/MSCHAPV2. I wouldn't call them advanced... Certs was created with the makefile included in freeradius sources. All

Re: EAP advanced auth. methods problem

2009-11-21 Thread tnt
So the problem is in certificate: [tls] TLS 1.0 Handshake [length 038d], Certificate -- verify error:num=20:unable to get local issuer certificate [tls] TLS 1.0 Alert [length 0002], fatal unknown_ca That means that you haven't imported self-signed ca certificate onto the client. #

Re: EAP advanced auth. methods problem

2009-11-20 Thread Alan DeKok
Tomas Pelka wrote: have a problem with advanced EAP authentication methods including PEAP, EAP-TLS, EAP-TTLS-MD5/MSCHAPV2. I wouldn't call them advanced... Certs was created with the makefile included in freeradius sources. All my experiments ending with: decapsulated EAP packet (code=4

Re: EAP advanced auth. methods problem

2009-11-20 Thread Tomas Pelka
Alan DeKok wrote: Tomas Pelka wrote: have a problem with advanced EAP authentication methods including PEAP, EAP-TLS, EAP-TTLS-MD5/MSCHAPV2. I wouldn't call them advanced... Certs was created with the makefile included in freeradius sources. All my experiments ending with:

Re: EAP advanced auth. methods problem

2009-11-20 Thread tnt
Alan DeKok wrote: Tomas Pelka wrote: have a problem with advanced EAP authentication methods including PEAP, EAP-TLS, EAP-TTLS-MD5/MSCHAPV2. I wouldn't call them advanced... Certs was created with the makefile included in freeradius sources. All my experiments ending with: decapsulated