TLS: assigning certificates to username

Arran Cudbard-Bell a.cudbardb at
Thu May 5 16:22:13 CEST 2016

> On 5 May 2016, at 05:46, Stefan Paetow <Stefan.Paetow at> wrote:
>> I'm sure it is already documented, how to assign certificates to a
>> dedicated username. But I so far didn't find it.
> To my knowledge a TLS certificate will contain a username (a NAI) in
> TLS-Client-Cert-Common-Name.

It *may* contain a CN, and that *may* be an NAI.

No guarantees :)


Arran Cudbard-Bell <a.cudbardb at>
FreeRADIUS Development Team

FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 872 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <>

More information about the Freeradius-Users mailing list