Re: XP won't authenticate with EAP TLS - log shows unknown_ca fatal error

2005-08-10 Thread Landon Cox
On Aug 8, 2005, at 9:39 AM, Landon Cox wrote: I'm going to do some experiments later tonight and see if I can isolate the success factor. Back on this topic for a moment...some things I tried to see if I could break the configuration were: 1) remove the certs from the /etc/ssl/certs

Re: XP won't authenticate with EAP TLS - log shows unknown_ca fatal error

2005-08-08 Thread Landon Cox
On Aug 8, 2005, at 9:18 AM, Kris Benson wrote: Did you do anything differently with your 'random' file and your 'dh' file? Creating those properly (as opposed to the idiotic directions of date dh; date random) seemed to solve my dilemma when I was getting a similar issue to what you

Re: XP won't authenticate with EAP TLS - log shows unknown_ca fatal error

2005-08-07 Thread A . L . M . Buxey
Hi, I chose to start with this article as it was one of the most recent tutorials I could find on the topic of FreeRADIUS and EAP TLS. strange. the EAP-TLS HOWTO seems uite straight forward. everything else is a rewrite of this guide. if you like. You may be tempted to press Enter

Re: XP won't authenticate with EAP TLS - log shows unknown_ca fatal error

2005-08-06 Thread Landon Cox
Thanks for looking at this, Michael. I decided to restart the certificate generation process and did it again from scratch following the article. Same results. I did it a 3rd time and but this time copied the certs to /etc/ssl/ certs and insured all CNs were unique (not being completely

Re: XP won't authenticate with EAP TLS - log shows unknown_ca fatal error

2005-08-05 Thread Michael Wang
Hi Landon, I think this piece from the log is suspicious: rlm_eap_tls: Length Included eaptls_verify returned 11 rlm_eap_tls: TLS 1.0 Handshake [length 02ab], Certificate -- verify error:num=18:self signed certificate chain-depth=0, error=18 -- User-Name = 360VL -- BUF-Name = 360VL