AW: AW: understanding

Phil Mayers p.mayers at imperial.ac.uk
Fri Mar 30 14:17:49 CEST 2012


On 30/03/12 12:51, Heinrich, Sebastian wrote:
> I apologize for bothering you. I thought that somewhere might be a how-to to solve this.

Unfortunately there's nothing to "solve". This is just how PEAP/MSCHAP 
works; there is a server cert, and for it to be secure, you must 
validate it.

There are other EAP methods, that don't require pre-provisioned trust 
(e.g. EAP-SRP, EAP-EKE). But no-one supports them :o(


More information about the Freeradius-Users mailing list