Re: certificates in FR 2.0.1 on windows doesnt works

2008-01-25 Thread tnt
And that is good. Windows doesn't need to know who issued that certificate, only radius server does. Ivan Kalik Kalik Informatika ISP Dana 25/1/2008, "orion" <[EMAIL PROTECTED]> piše: >its not a problem that windows says about the client certificate : >"the issuer of this certificate cannot be

Re: certificates in FR 2.0.1 on windows doesnt works

2008-01-25 Thread orion
On 25/01/2008, Alan DeKok <[EMAIL PROTECTED]> wrote: > In this case, you didn't add the server certificate (or the CA > certificate) into the root CA store. All of the documentation and > howto's say you need to do this, so > > Alan DeKok. the ca certificate is the first i import in roo

Re: certificates in FR 2.0.1 on windows doesnt works

2008-01-25 Thread Alan DeKok
orion wrote: > its not a problem that windows says about the client certificate : > "the issuer of this certificate cannot be found " ? Thank you for FINALLY posting the REAL error message. It helps to post the REAL error message, because you can then get a REAL solution. In this case, you d

Re: certificates in FR 2.0.1 on windows doesnt works

2008-01-25 Thread Alan DeKok
orion wrote: > but when i import the client.p12 certificate the linkage is > > CA certificate > |- server certificate > |- client certificate > > in that moment the server part tells ( it not allow to issue certificate > for others). There's no reason why the intermediate certi

Re: certificates in FR 2.0.1 on windows doesnt works

2008-01-25 Thread orion
its not a problem that windows says about the client certificate : "the issuer of this certificate cannot be found " ? can the certificate be used in this case ? On 25/01/2008, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > > >2)or only ca certificate + client certificate ? > > > >the second case

Re: certificates in FR 2.0.1 on windows doesnt works

2008-01-25 Thread tnt
>2)or only ca certificate + client certificate ? > >the second case the linkage between the ca and client doesnt exist ( as you >said "is the server the issuer of the client`s certificate" ). > Link is not needed. Server checks the client certificate to see if it's issued by the server (certificat

Re: certificates in FR 2.0.1 on windows doesnt works

2008-01-25 Thread orion
im using standart windows mmc. after import of the CA and Server certificates the server certificate links to the ca certificate ok CA certificate |- server certificate but when i import the client.p12 certificate the linkage is CA certificate |- server certificate |- client

Re: certificates in FR 2.0.1 on windows doesnt works

2008-01-25 Thread Alan DeKok
orion wrote: > the import of client.p12 is ok but it doesnt have a valid link > it is ca->server->client What does that mean? > and the details of the server certificate tells that "is not authorized > to issue certificates" . Where does it say that? Which certificate tool are you using to

certificates in FR 2.0.1 on windows doesnt works

2008-01-24 Thread orion
hi to all. created the certificates with the default config files in FR 2.0.1 with ./bootstrap created the client certificate with make client the import of the ca.pem and server.crt in winxp is OK. they link with each-other ok ( ca->server ) the import of client.p12 is ok but it doesnt have a