<html><head><style type="text/css"><!-- DIV {margin:0px;} --></style></head><body><div style="font-family:times new roman, new york, times, serif;font-size:12pt">> I have read and used the make_cert_command = "${certdir}/bootstrap"; its<br>> excellent tool but it only creates clientAuth and serverAuth and does<br>> not add PEAP <br><br> Huh? What do you mean by that?<br><br>You have clarified,<br>There's no need to post the OID's in every message. We've seen them<br>before.<br><div> <br>> ... it usually pops up message<br>> "the server certificate is not trusted because there no explicit trust<br>> settings" - this seem to require the setting of eap oid.<br><br> No. If you get that message, then the OID is in the certificate, and<br>PEAP is working. The message simply says that the certificate isn't<br>signed by a root CA your system knows about.<br><br>I get this message even with
certificate signed by root CA. And also by intermediate CA. Thanks Alan, I have to ask Apple.<br><br></div>==================================================<div> </div><div>Benjamin K. Eshun<div style="font-family: times new roman,new york,times,serif; font-size: 12pt;"><br><br><div style="font-family: times new roman,new york,times,serif; font-size: 12pt;">----- Message d'origine ----<br>De : Alan DeKok <aland@deployingradius.com><br>À : FreeRadius users mailing list <freeradius-users@lists.freeradius.org><br>Envoyé le : Mardi, 10 Juillet 2007, 14h55mn 34s<br>Objet : Re: Re : PEAP certificates, signing requirements and examples<br><br><div>Eshun Benjamin wrote:<br>> I have read and used the make_cert_command = "${certdir}/bootstrap"; its<br>> excellent tool but it only creates clientAuth and serverAuth and does<br>> not add PEAP <br><br> Huh? What do you mean by that?<br><br>> ... it usually pops up message<br>>
"the server certificate is not trusted because there no explicit trust<br>> settings" - this seem to require the setting of eap oid.<br><br> No. If you get that message, then the OID is in the certificate, and<br>PEAP is working. The message simply says that the certificate isn't<br>signed by a root CA your system knows about.<br><br>> The question is<br>> what is the difference between web server and radius server certificates<br>> with respect to ssl and wireless in the context of EAP, PEAP.<br><br> Ask Microsoft.<br><br>> [ PEAP ]<br>...<br><br> There's no need to post the OID's in every message. We've seen them<br>before.<br><br> Alan DeKok.<br>- <br>List info/subscribe/unsubscribe? See <a target="_blank" href="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</a><br></div></div><br></div></div></div><br>
<hr size="1">
Ne gardez plus qu'une seule adresse mail ! <a href="http://www.trueswitch.com/yahoo-fr/">Copiez vos mails</a> vers Yahoo! Mail </body></html>