[RADIATOR] Expired Certificate Replaced - Still Errors

[Dubravko Penezic]

Hi Roberto,


from my experiance , check few things :

* be sure you restart all instance of Radiatior

* be sure you read from right place

* check date on your server


Regards,

Dubravko Penezic


On 6/1/20 7:47 PM, Ullfig, Roberto Alfredo wrote:
> Some (probably most) of the logins are working though. Is it possible 
> it's a client side certificate issue?
>
> ---
> Roberto Ullfig - rullfig at uic.edu
> Systems Administrator
> Enterprise Architecture and Development | ACCC
> University of Illinois - Chicago
> ------------------------------------------------------------------------
> *From:* radiator <radiator-bounces at lists.open.com.au> on behalf of 
> Ullfig, Roberto Alfredo <rullfig at uic.edu>
> *Sent:* Monday, June 1, 2020 12:44 PM
> *To:* radiator at lists.open.com.au <radiator at lists.open.com.au>
> *Subject:* [RADIATOR] Expired Certificate Replaced - Still Errors
> We had a 20 year old CA certificate expire. These errors started 
> showing up for the first time when it did:
>
> Mon Jun  1 12:37:25 2020: ERR: EAP PEAP TLS Handshake unsuccessful: 
>  9949: 1 - error:14094415:SSL routines:SSL3_READ_BYTES:sslv3 alert 
> certificate expired
>
> We updated the cert and restarted radiator but are still seeing 
> errors. What could be wrong? We define the CA file with EAPTLS_CAFile. 
> Thanks!
>
> ---
> Roberto Ullfig - rullfig at uic.edu
> Systems Administrator
> Enterprise Architecture and Development | ACCC
> University of Illinois - Chicago
>
> _______________________________________________
> radiator mailing list
> radiator at lists.open.com.au
> https://lists.open.com.au/mailman/listinfo/radiator