Re: FreeRadius Ceritificate Migration

2013-05-15 Thread Mitch Yackobeck
Good afternoon John, Thank you for all of your assistance with this issue.    As it turns out strace was the way to figure out what was happening. When I ran strace with radiusd -X, I found the following line when it got to the point where it actually went searching for the CA cert. write(1

Re: FreeRadius Ceritificate Migration

2013-05-14 Thread John Dennis
Thank you for including the full debug. Here is the section from the rlm_eap_tls initialization. Module: Instantiating eap-tls tls { rsa_key_exchange = no dh_key_exchange = yes rsa_key_length = 512 dh_key_length = 512 verify_depth = 0 CA_path = "/usr/local/etc/raddb/certs/roots" pem_file_t

Re: FreeRadius Ceritificate Migration

2013-05-14 Thread John Dennis
On 05/14/2013 12:01 PM, Mitch Yackobeck wrote: Good morning John, I appologize for making myself look like a moron. The original message had actually been sent to someone who was helping me to potentially work thru some issues that we were seeing and trying to work out. I attempted to modify

Re: FreeRadius Ceritificate Migration

2013-05-13 Thread Arran Cudbard-Bell
> > Since you live and work in Ontario I can only assume you're a native English > speaker. Some points in Ontario are dangerously close to Quebec, aye*. > Reread your first paragraph, it's incomprehensible gibberish. Wow. > Would you like to try this again but with something comprehensible a

Re: FreeRadius Ceritificate Migration

2013-05-13 Thread John Dennis
On 05/13/2013 01:46 PM, Mitch Yackobeck wrote: Good afternoon All, I've taken some time over the last couple little while to work with my test environment in getting it upto date and trying out some issues with regards authenticating against multiple certificates on a single SSID for the purpose

FreeRadius Ceritificate Migration

2013-05-13 Thread Mitch Yackobeck
Good afternoon All, I've taken some time over the last couple little while to work with my test environment in getting it upto date and trying out some issues with regards authenticating against multiple certificates on a single SSID for the purpose of migration to a new root certificate whil