<div>Oh,</div>
<div>I had installed OpenSSL on another computer but no this one.</div>
<div>Thanks for your advice.</div>
<div>&nbsp;</div>
<div>Well,</div>
<div>Can I ask who to create ca.pem??</div>
<div>I&#39;m very unfamiliar with this.</div>
<div>&nbsp;</div>
<div>After I install OpenSSL,</div>
<div>I copy the my-ca.pem to /etc/certs/ca.pem&nbsp;&nbsp;and implement wpa_supplicant again,</div>
<div>but screen shows:<br><br>
<div>CTRL-EVENT-DISCONNECTED - Disconnect event - remove keys</div>
<div>Associated with 00:19:5b:ec:9a:70</div>
<div>CTRL-EVENT-EAP-STARTED EAP authentication started</div>
<div>CTRL-EVENT-EAP-METHOD EAP vendor 0 method 21 (TTLS) selected</div>
<div>TLS¡G Certificate verification failed, error 19 (self signed certificate in certificate chain) depth 1 for &#39;/C=CA/ST=Province/L=Some City/0=Organization/OU=localhost/CN=Client <a href="mailto:certificate/emailAddress=client@example.com&#39;">
certificate/emailAddress=client@example.com&#39;</a></div>
<div>SSL¡G SSL3 alert¡G write (local SSL3 detected an error)¡Gfatal¡Gunknown CA</div>
<div>OpenSSL¡G tls_connection_handshake - SSL_connect error¡G14090086¡GSSL routines¡GSSL3_GET_SERVER_CERTIFICATE¡Gcertificate verify failed</div>
<div>CTRL-EVENT-EAP-FAILURE EAP authentication failed</div></div>
<div>&nbsp;</div>
<div>&nbsp;</div>
<div><span class="gmail_quote">2007/11/7, Jouni Malinen &lt;<a href="mailto:j@w1.fi">j@w1.fi</a>&gt;:</span>
<blockquote class="gmail_quote" style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid">On Wed, Nov 07, 2007 at 11:01:21AM +0800, ?????? wrote:<br><br>&gt; Following is my wpa_supplicant conf:<br>
<br>&gt;&nbsp;&nbsp;&nbsp;&nbsp; ca_cert=&quot;/etc/cert/ca.pem&quot;<br><br>&gt; OpenSSL?G tls_connection_ca_cert - Failed to load root certificates<br>&gt; error?G02001002?Gsystem library?Gfopen?GNo such file or directory<br><br>Do you have /etc/cert/ca.pem file on that system?
<br><br>--<br>Jouni Malinen&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;PGP id EFC895FA<br>_______________________________________________<br>HostAP mailing list<br><a href="mailto:HostAP@shmoo.com">HostAP@shmoo.com</a><br>
<a href="http://lists.shmoo.com/mailman/listinfo/hostap">http://lists.shmoo.com/mailman/listinfo/hostap</a><br></blockquote></div><br>