Réseaux Wi-Fi + Radius EAP-TLS (utilisation de certificats)

$ cd freeradius-snapshot-20050426/scripts
$ ./CA.all
 
<snip>
 
 openssl ca -policy policy_anything -out newcert.pem -passin pass:whatever -key whatever -extensions xpserver_ext -extfile xpextensions -infiles newreq.pem
Using configuration from /usr/lib/ssl/openssl.cnf
DEBUG[load_index]: unique_subject = "yes"
Check that the request matches the signature
Signature ok
Certificate Details:
        Serial Number:
            a5:76:0f:ec:5c:51:24:fc
        Validity
            Not Before: Apr 26 11:36:49 2005 GMT
            Not After : Apr 26 11:36:49 2006 GMT
        Subject:
            countryName               = FI
            stateOrProvinceName       = Finland
            organizationName          = Internet Widgits Pty Ltd
            organizationalUnitName    = VHO
            commonName                = seb
            emailAddress              = ***
        X509v3 extensions:
            X509v3 Extended Key Usage:
                TLS Web Server Authentication
Certificate is to be certified until Apr 26 11:36:49 2006 GMT (365 days)
Sign the certificate? [y/n]:y
failed to update database
TXT_DB error number 2
+ openssl pkcs12 -export -in newcert.pem -inkey newreq.pem -out cert-srv.p12 -clcerts -passin pass:whatever -passout pass:whatever
No certificate matches private key
+ openssl pkcs12 -in cert-srv.p12 -out cert-srv.pem -passin pass:whatever -passout pass:whatever
24474:error:0D07207B:asn1 encoding routines:ASN1_get_object:header too long:asn1_lib.c:140:
+ openssl x509 -inform PEM -outform DER -in cert-srv.pem -out cert-srv.der
unable to load certificate
24475:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:637:Expecting: TRUSTED CERTIFICATE
+ echo -e '\n\t\t##################\n'
 
                ##################