Alan, I already have certificates created on my 2008 Server so I want to use those certificates on my Ubuntu Server without creating new ones. You mentioned my openssl configuration is wrong. Any suggestions on how I can fix the openssl configuration? Thanks Scott
Message: 1 Date: Sun, 12 Feb 2012 10:26:44 +0100 From: Alan DeKok <al...@deployingradius.com> Subject: Re: Cetificates to Use with Ubuntu Server To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Message-ID: <4f3785d4.3020...@deployingradius.com> Content-Type: text/plain; charset=ISO-8859-1 Gilmour, Scott wrote: > I have Ubuntu Server installed and I have a Windows 2008 Server > Certificate Authority > > When I type the openssl command I keep on getting this error: CA > certificate and CA private key do not match Your OpenSSL configuration is wrong. > Ps. I was able to get Samba to work after loading the lates server > Ubuntu 11.10. Thanks for everyones help. That's good to hear. > root@FreeRadius:/etc/freeradius/certs# openssl ca -policy > policy_anything -out certificate.pem -passin pass:enterasys -key > enterasys -extensions xpserver_ext -extfile xpextensions -infiles > server.csr Don't do that. There's a lot of magic in OpenSSL. Instead, see raddb/certs/README. The process for creating certificates is automated, documented, and it *works*. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html