Alan Buxey wrote: > I think if FreeRADIUS can do OID verification and certificate issuer > verification (short term) for RADSEC operations then thats pretty much 'it' > at this point in time The external shell script certificate validation stuff should work. Alan DeKok.