<div>If I change the parameter "certificate_file" in tls section,</div>
<div>and using the same file with "CA_file" parameter,</div>
<div>radius can not file the certificate_file path and can not work.</div>
<div>It shows:</div>
<div> tls: private_key_file = "/usr/local/etc/raddb/certs/cacert.pem"<br> tls: certificate_file = "(null)" <=== here is strange<br> tls: CA_file = "/usr/local/etc/raddb/certs/demoCA/cacert.pem"
<br> tls: private_key_password = "whatever"<br> tls: dh_file = "/usr/local/etc/raddb/certs/dh"<br> tls: random_file = "/usr/local/etc/raddb/certs/random"<br> tls: fragment_size = 1024<br> tls: include_length = yes
<br> tls: check_crl = no<br> tls: check_cert_cn = "(null)"<br> tls: cipher_list = "(null)"<br> tls: check_cert_issuer = "(null)"<br>rlm_eap_tls: Loading the certificate file as a chain<br>rlm_eap: SSL error error:0200100E:system library:fopen:Bad address
<br>rlm_eap_tls: Error reading certificate file<br>rlm_eap: Failed to initialize type tls<br>radiusd.conf[10]: eap: Module instantiation failed.<br>radiusd.conf[1960] Unknown module "eap".<br>radiusd.conf[1907] Failed to parse authenticate section.
</div>
<div> </div>
<div>The original file that "certificate_file" and "private_key_file" used is cert-srv.pem</div>
<div>and in that file,</div>
<div>there is specail format like this:</div>
<div> </div>
<div>Bag Attributes<br> localKeyID: 0C BA ED 0A 7B E9 67 CD E7 0A 08 39 DB 9D 99 34 0A C6 2B A4<br>subject=/C=CA/ST=Province/L=Some City/O=Organization/OU=localhost/CN=Root <a onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:certificate/emailAddress=root@example.com" target="_blank">
certificate/emailAddress=root@example.com</a><br>issuer=/C=CA/ST=Province/L=Some City/O=Organization/OU=localhost/CN=Client <a onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:certificate/emailAddress=client@example.com" target="_blank">
certificate/emailAddress=client@example.com </a><br>-----BEGIN CERTIFICATE-----<br>......</div>
<div>-----END CERTIFICATE-----<br>Bag Attributes<br> localKeyID: 0C BA ED 0A 7B E9 67 CD E7 0A 08 39 DB 9D 99 34 0A C6 2B A4<br>Key Attributes: <No Attributes><br>-----BEGIN RSA PRIVATE KEY-----<br>Proc-Type: 4,ENCRYPTED
<br>DEK-Info: DES-EDE3-CBC,45A3F7FFC07A6C8D<br> </div>
<div>......</div>
<div>-----END RSA PRIVATE KEY-----</div>
<div> </div>
<div>I wonder what the "Bag Attributes" and "localKeyID" are and where they come from.</div>
<div>The pem file I created by myself only have </div>
<div>"-----BEGIN CERTIFICATE----- </div>
<div> ..............................</div>
<div> -----END CERTIFICATE-----" </div>
<div>and </div>
<div>"------BEGIN RSA PRIVATE KEY-----</div>
<div> .......................................</div>
<div> -----END RSA PRIVATE KEY-----"</div>
<div> </div>
<div>Moreover,</div>
<div>if I change both "certificate_file" and "private_key_file" path to the file I created,</div>
<div>it still can not work because of the certificate_file's path shows null.</div>
<div> </div>
<div>Well,</div>
<div>how should I do if I want to change the certificate_file to myself file?</div>
<div> </div>