<html><head><style type="text/css"><!-- DIV {margin:0px;} --></style></head><body><div style="font-family:times new roman, new york, times, serif;font-size:12pt">sounds interesting can you post your tls section config<br><div> </div>==================================================<div> </div><div><br><div style="font-family: times new roman,new york,times,serif; font-size: 12pt;"><br><br><div style="font-family: times new roman,new york,times,serif; font-size: 12pt;">----- Message d'origine ----<br>De : "Reimer Karlsen-Masur, DFN-CERT" <karlsen-masur@dfn-cert.de><br>À : FreeRadius users mailing list <freeradius-users@lists.freeradius.org><br>Envoyé le : Lundi, 18 Juin 2007, 11h09mn 31s<br>Objet : Re: Disabling EAP-TLS while keeping EAP-PEAP<br><br><div>Hi!<br><br>By commenting the CA_file parameter in the eap->tls section:<br><br># CA_file = ${raddbdir}/certs/trusted-ca-cert-list.pem<br><br>*and*<br><br>by setting CA_path parameter in the
eap->tls section to an *empty* directory<br><br>CA_path = ${raddbdir}/certs/trustedCAs<br><br>should do the trick.<br><br>No trusted CAs mean no trusted client certificates :-)<br><br>Martin Gadbois wrote:<br>> When enabling EAP-PEAP with FreeRADIUS, module EAP-TLS is required.<br>> <br>> How can I disable EAP-TLS while using EAP-PEAP?<br>> <br>> I agree that if the client does not have a client key, EAP-TLS will not<br>> work. But how to restrict EAP-TLS in any case?<br><br>-- <br>Beste Gruesse / Kind Regards<br><br>Reimer Karlsen-Masur<br><br>DFN-PKI FAQ: <a target="_blank" href="https://www.pki.dfn.de/faqpki">https://www.pki.dfn.de/faqpki</a><br>--<br>Dipl.-Inform. Reimer Karlsen-Masur (PKI Team), Phone +49 40 808077-615<br>DFN-CERT Services GmbH, <a target="_blank" href="https://www.dfn-cert.de">https://www.dfn-cert.de</a>, Phone +49 40 808077-555<br>Sitz / Register: Hamburg, AG Hamburg, HRB 88805, Ust-IdNr.: DE 232129737<br></div><div>- <br>List
info/subscribe/unsubscribe? See <a target="_blank" href="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</a></div></div><br></div></div></div><br>
<hr size="1">
Ne gardez plus qu'une seule adresse mail ! <a href="http://www.trueswitch.com/yahoo-fr/">Copiez vos mails</a> vers Yahoo! Mail </body></html>