<html><head><style type="text/css"><!-- DIV {margin:0px;} --></style></head><body><div style="font-family:times new roman, new york, times, serif;font-size:12pt"><br>I have appended the intermediate cert to the server cert but I got the same result. <br><div> </div><br><div style="font-family: times new roman,new york,times,serif; font-size: 12pt;"><br><br><div style="font-family: times new roman,new york,times,serif; font-size: 12pt;">----- Message d'origine ----<br>De : "Reimer Karlsen-Masur, DFN-CERT" <karlsen-masur@dfn-cert.de><br>À : FreeRadius users mailing list <freeradius-users@lists.freeradius.org><br>Envoyé le : Mercredi, 2 Mai 2007, 9h40mn 59s<br>Objet : Re: EAP-TTLS PEAP MCHAPv2<br><br><div>Hey.<br><br>Append all intermediate CA certificates onto the end of the file specified<br>with the "certificate_file" option in the eap.conf files eap->tls section.<br>This file usually hold your RADIUS server certificate and can additionally<br>hold
the chain certificates as well.<br><br>Eshun Benjamin wrote:<br>> <br>> I am using an enterprise certificate which has intermediate CA. The root<br>> CA is well known (verisign) and already on the MAC keychain access(3.3)<br>> by default. MAC recognises the certificate and its validity but<br>> complains of "The server certificate is not trusted because there<br>> are no explicit trust settings". If I click continue or always trust it<br>> works fine but I want to get rid of this prompt without clicking<br>> continue or always trust to give it smooth and uninteractive log on.<br><br><br>-- <br>Kind Regards<br><br>Reimer Karlsen-Masur<br><br>DFN-PKI FAQ: <a target="_blank" href="https://www.pki.dfn.de/faqpki">https://www.pki.dfn.de/faqpki</a><br>--<br>Dipl.-Inform. Reimer Karlsen-Masur (PKI Team), Phone +49 40 808077-615<br>DFN-CERT Services GmbH, <a target="_blank"
href="https://www.dfn-cert.de">https://www.dfn-cert.de</a>, Phone +49 40 808077-555<br>Sitz / Register: Hamburg, AG Hamburg, HRB 88805, Ust-IdNr.: DE 232129737<br></div><div>- <br>List info/subscribe/unsubscribe? See <a target="_blank" href="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</a></div></div><br></div></div><br>
<hr size="1">
Découvrez une nouvelle façon d'obtenir des réponses à toutes vos questions !
Profitez des connaissances, des opinions et des expériences des internautes sur <a href="http://fr.rd.yahoo.com/evt=42054/*http://fr.answers.yahoo.com">Yahoo! Questions/Réponses</a>.</body></html>