[RADIATOR] Expired Certificate Replaced - Still Errors

[Ullfig, Roberto Alfredo]

Sorry this was a false alarm of sorts. The certificate failures are being generated by a monitor account not real users. Those errors went away with the new cert installation. So it's something the monitor does. Thanks!

---
Roberto Ullfig - rullfig at uic.edu
Systems Administrator
Enterprise Architecture and Development | ACCC
University of Illinois - Chicago
________________________________
From: radiator <radiator-bounces at lists.open.com.au> on behalf of Dubravko Penezic <dpenezic at srce.hr>
Sent: Monday, June 1, 2020 1:24 PM
To: radiator at lists.open.com.au <radiator at lists.open.com.au>
Subject: Re: [RADIATOR] Expired Certificate Replaced - Still Errors

Hi Roberto,


from my experiance , check few things :

* be sure you restart all instance of Radiatior

* be sure you read from right place

* check date on your server


Regards,

Dubravko Penezic


On 6/1/20 7:47 PM, Ullfig, Roberto Alfredo wrote:
> Some (probably most) of the logins are working though. Is it possible
> it's a client side certificate issue?
>
> ---
> Roberto Ullfig - rullfig at uic.edu
> Systems Administrator
> Enterprise Architecture and Development | ACCC
> University of Illinois - Chicago
> ------------------------------------------------------------------------
> *From:* radiator <radiator-bounces at lists.open.com.au> on behalf of
> Ullfig, Roberto Alfredo <rullfig at uic.edu>
> *Sent:* Monday, June 1, 2020 12:44 PM
> *To:* radiator at lists.open.com.au <radiator at lists.open.com.au>
> *Subject:* [RADIATOR] Expired Certificate Replaced - Still Errors
> We had a 20 year old CA certificate expire. These errors started
> showing up for the first time when it did:
>
> Mon Jun  1 12:37:25 2020: ERR: EAP PEAP TLS Handshake unsuccessful:
>  9949: 1 - error:14094415:SSL routines:SSL3_READ_BYTES:sslv3 alert
> certificate expired
>
> We updated the cert and restarted radiator but are still seeing
> errors. What could be wrong? We define the CA file with EAPTLS_CAFile.
> Thanks!
>
> ---
> Roberto Ullfig - rullfig at uic.edu
> Systems Administrator
> Enterprise Architecture and Development | ACCC
> University of Illinois - Chicago
>
> _______________________________________________
> radiator mailing list
> radiator at lists.open.com.au
> https://lists.open.com.au/mailman/listinfo/radiator
_______________________________________________
radiator mailing list
radiator at lists.open.com.au
https://lists.open.com.au/mailman/listinfo/radiator
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.open.com.au/pipermail/radiator/attachments/20200601/191fb64c/attachment-0001.html>