<html><head><style type="text/css"><!-- DIV {margin:0px;} --></style></head><body><div style="font-family:times new roman, new york, times, serif;font-size:12pt">Hi All,<br>I came across this infomation and tought it would be nice to drop it here. Eventhough it is ssl issue it has to do with PEAP. Just to discuss; any comments.<br><br>PEAP certificates, signing requirements and examples <br> <br>There are only minor differences between standard SSL certificates used by secure web sites and those <br>used with PEAP on 802.1x wireless networks. <br> <br>With PEAP the SID of the network, rather than your organizations domain must match the common name <br>(cn) of the certificate. Additionally an EKU (Enhanced Key Usage) for Server Authentication (OID <br>1.3.6.1.5.5.7.3.1) must be specified when creating your public certificate or signing request. <br><br>[ PEAP ]<br>extendedKeyUsage = 1.3.6.1.5.5.7.3.2<br>extendedKeyUsage = 1.3.6.1.5.5.7.3.1<br><br>[
clientAuth ]<br>extendedKeyUsage = 1.3.6.1.5.5.7.3.2<br><br>[ serverAuth ]<br>extendedKeyUsage = 1.3.6.1.5.5.7.3.1<br><br> <br>In these examples we will use the OpenSSL utility to create a Certificate Signing Request (CSR) used with <br>a third party certificate authority such as Verisign or Thawte. We will also generate a ˇself-signed˘ <br>certificate that does not require a certificate authority but does require users to first accept your certificate <br>as valid on a one time basis depending on the supplicant and its configuration. <br> <br> <br>Example creating a certificate signing request for a certificate authority <br>openssl req -new -nodes -keyout private.pem -out public.csr -extensions PEAP -config openssl.cnf <br><br><br>The output file public.csr is processed by your certificate authority (CA), which will return a signed <br>certificate file to you. Combine private.pem with the certificate returned from the CA into a single
file. This <br>file becomes the ˇPEAP Certificate˘ file. You will likely also need the CA˘s certificate chain file if one is <br>required. This file becomes the ˇPEAP CA Certificate˘. <br><br><br>Example creating a ˇself-signed˘ certificate <br><br>openssl req -new -x509 -key private.pem -out public.pem -extensions PEAP -config openssl.cnf -days 5000 <br><br><br><div> </div>==================================================<div> </div><div>Benjamin K. Eshun<div><br></div></div></div><br>
<hr size="1">
Ne gardez plus qu'une seule adresse mail ! <a href="http://www.trueswitch.com/yahoo-fr/">Copiez vos mails</a> vers Yahoo! Mail </body></html>