Need help with openssl client certificate

cksiang

Hi,

我架设了一台 freeradius 服务器在 RedHat 9 平台。
使用的软件是 freeradius-0.9.3, mysql-3.23.54a-11, apache_1.3.27, php-4.2.3, openssl-0.9.7e and mod_ssl-2.8.11-1.3.27. Dialup admin (dummy 测试) 和 RadPing 测试也成功

我有 D-link DWL900AP+ 和 3Com PCI adapter (3CRWE777A). 我想架设 eap-tls 但不知如何制造 client certificate.

小弟用了以下的安装

PHP, Apache and mod_ssl Installation
-------------------------------------------------------
[root@localhost root]# /usr/src
[root@localhost src]# tar zxvf apache_1.3.27.tar.gz
[root@localhost src]# cd apache_1.3.27
[root@localhost apache_1.3.27]# ./configure --prefix=/usr/local/apache
[root@localhost apache_1.3.27]# cd /usr/src
[root@localhost src]# tar zxvf php-4.2.3.tar.gz
[root@localhost src]# cd php-4.2.3
[root@localhost php-4.2.3]# ./configure --with-mysql=/usr --with-xml --with-apache=../apache_1.3.27
[root@localhost php-4.2.3]# make
[root@localhost php-4.2.3]# make install
[root@localhost php-4.2.3]# cp php.ini-dist /usr/local/lib/php.ini
[root@localhost php-4.2.3]# cd /usr/src
[root@localhost src]# tar zxvf openssl-0.9.7e.tar.gz
[root@localhost src]# cd openssl-0.9.7e
[root@localhost openssl-0.9.7e]# ./config --prefix=/usr/local/ssl
[root@localhost openssl-0.9.7e]# make
[root@localhost openssl-0.9.7e]# make test
[root@localhost openssl-0.9.7e]# make install
[root@localhost openssl-0.9.7e]# cd /usr/src
[root@localhost src]# tar zxvf mod_ssl-2.8.11-1.3.27.tar.gz
[root@localhost src]# cd mod_ssl-2.8.11-1.3.27
[root@localhost mod_ssl-2.8.11-1.3.27]# ./configure --with-apache=../apache_1.3.27
[root@localhost mod_ssl-2.8.11-1.3.27]# cd ../apache_1.3.27
[root@localhost apache_1.3.27]# SSL_BASE=../openssl-0.9.7e ./configure --enable-module=ssl --activate-module=src/modules/php4/libphp4.a --enable-module=php4 --prefix=/usr/local/apache --enable-shared=ssl
[root@localhost apache_1.3.27]# make
[root@localhost apache_1.3.27]# make certificate TYPE=custom
[root@localhost apache_1.3.27]# make install

from
祥