Re: alert bad certificate with Windows XP

2011-12-15 Thread Alan Buxey
Hi, I want to know which reference I can use to make a certicate request for a third party ca.� This certificate is for peap with mschap v2.� In terms of adding the extensions for peap. http://support.microsoft.com/kb/814394/en-us you know, this is written in plain clear text in

Re: alert bad certificate with Windows XP

2011-12-14 Thread Alan DeKok
Angelica Delgado wrote: I am using a certificate from incommon for eap/peap setup. It works with Windows 7 when validate certificate is enabled but not with Windows XP. Windows XP works only without the certificate validation. Following is the error that I am getting with Windows XP

Re: alert bad certificate with Windows XP

2011-12-14 Thread Angelica Delgado
Does peap needs xpextensions even though we are not using client certficates? I got the certificate from Incommon cert service. Thanks. On Wed, Dec 14, 2011 at 3:34 AM, Alan DeKok al...@deployingradius.comwrote: Angelica Delgado wrote: I am using a certificate from incommon for eap/peap

Re: alert bad certificate with Windows XP

2011-12-14 Thread Alan DeKok
Angelica Delgado wrote: Does peap needs xpextensions YES. ALWAYS YES. even though we are not using client certficates? I got the certificate from Incommon cert service. So you didn't follow the instructions on how to create certificates, and you didn't read the many documents which

Re: alert bad certificate with Windows XP

2011-12-14 Thread Angelica Delgado
Thanks for the help, I will redo the certificates. On Wed, Dec 14, 2011 at 10:39 AM, Alan DeKok al...@deployingradius.comwrote: Angelica Delgado wrote: Does peap needs xpextensions YES. ALWAYS YES. even though we are not using client certficates? I got the certificate from Incommon

Re: alert bad certificate with Windows XP

2011-12-14 Thread Angelica Delgado
Does the SSID needs to match the common name of the certificate or it can be an alternative subject? Thanks. Angela On Wed, Dec 14, 2011 at 11:42 AM, Angelica Delgado angelicadel...@gmail.com wrote: Thanks for the help, I will redo the certificates. On Wed, Dec 14, 2011 at 10:39 AM, Alan

Re: alert bad certificate with Windows XP

2011-12-14 Thread Alan Buxey
Hi, Does the SSID needs to match the common name of the certificate or it can be an alternative subject? SSID has nothing to do with it - its the CN from the RADIUS server that needs to match in your 802.1X settings on the client alan - List info/subscribe/unsubscribe? See

Re: alert bad certificate with Windows XP

2011-12-14 Thread Angelica Delgado
Can you please provide a URL that I can use for reference? Thanks On Wed, Dec 14, 2011 at 4:24 PM, Alan Buxey a.l.m.bu...@lboro.ac.uk wrote: Hi, Does the SSID needs to match the common name of the certificate or it can be an alternative subject? SSID has nothing to do with it -

Re: alert bad certificate with Windows XP

2011-12-14 Thread Alan Buxey
Hi, Can you please provide a URL that I can use for reference? what is it that you need or want? the RFC for 802.1X authentications via the EAP methods? Is there a particular issue you are trying to resolve here? alan - List info/subscribe/unsubscribe? See

Re: alert bad certificate with Windows XP

2011-12-14 Thread Angelica Delgado
I want to know which reference I can use to make a certicate request for a third party ca. This certificate is for peap with mschap v2. In terms of adding the extensions for peap. Thanks. On Dec 14, 2011 5:48 PM, Alan Buxey a.l.m.bu...@lboro.ac.uk wrote: Hi, Can you please provide a URL

Re: alert bad certificate with Windows XP

2011-12-14 Thread Alan DeKok
Angelica Delgado wrote: I want to know which reference I can use to make a certicate request for a third party ca. This certificate is for peap with mschap v2. In terms of adding the extensions for peap. Microsoft has web pages on this. READ eap.conf. It explains this in excruciating

alert bad certificate with Windows XP

2011-12-13 Thread Angelica Delgado
Hello, I am using a certificate from incommon for eap/peap setup. It works with Windows 7 when validate certificate is enabled but not with Windows XP. Windows XP works only without the certificate validation. Following is the error that I am getting with Windows XP system: [eap] processing