tls sertificate creation for aaa server

[aigars_2]

Hello.
I tried to use demo certificates and all was Ok but now I need to create my own CA and for that I used script from /opt/aaa/example/certs (mkcert.sh) but new certs (when copied over originals in /opt/aaa/security) dont work :( In aaa logs i see this:
09 Mar 2005 15:01:46 Authentication: 204/4 'demouser@eap.realm' from 192.168.100.1 - FAILED Authentication failure -- total 0, holding 0
09 Mar 2005 15:01:46 TLS Client in Violation of Protocol.
09 Mar 2005 15:01:42 Received-Authentication: 200/0 'demouser@eap.realm' from 192.168.100.1 - Start EAP

If I change certs on server and pc to original and restart aaa it works OK.