<html><head><meta http-equiv="Content-Type" content="text/html charset=iso-8859-1"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">Thomas,<div><br></div><div>Most wildcard certificates that I have encountered do NOT include the domain, only subdomains. In other words "<a href="http://something.mydomain.com">something.mydomain.com</a>" would work but not simply "<a href="http://domain.com">domain.com</a>". I know you tried the actual CN, but perhaps some component is having an issue with the asterisk. If you wanted to make another test, you could try using a server name which is similar to <a href="http://something.mydomain.com">something.mydomain.com</a>.</div><div><br></div><div>Jim L.</div><div><br></div><div><br><div><div>On Mar 3, 2013, at 7:41 AM, Thomas Simmons <<a href="mailto:twsnnva@gmail.com">twsnnva@gmail.com</a>> wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div dir="ltr">On Sun, Mar 3, 2013 at 6:41 AM, Phil Mayers <span dir="ltr"><<a href="mailto:p.mayers@imperial.ac.uk" target="_blank">p.mayers@imperial.ac.uk</a>></span> wrote:<br><div class="gmail_extra"><div class="gmail_quote">
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">When you enable "validate...", what are you entering as the server name? I'm not sure wildcard certs work with eap under windows.<br>
<div class=""><div class="h5"><br></div></div></blockquote>Hello Phil,<div><br></div><div>Initially, I unchecked "Connect to these servers" and left this field empty - this is what I did with the self-signed cert that worked. I also tried *.<a href="http://mydomain.com/">mydomain.com</a> (the CN) and <a href="http://domain.com/">domain.com</a>. I can purchase a standard cert to verify this is the problem.</div>
<div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><div class=""><div class="h5">
Thomas Simmons <<a href="mailto:twsnnva@gmail.com">twsnnva@gmail.com</a>> wrote:<br>
<br>
>Hello All,<br>
><br>
>I'm trying to get my setup working with a GoDaddy-issued wildcard<br>
>certificate (I understand self-signed is recommended). I don't<br>
>understand<br>
>why this is not working and appreciate any input. What I have found so<br>
>far:<br>
><br>
>Everything works with self-signed certs. With the CA cert imported,<br>
>"Validate server certificate" is not required.<br>
>Everything works with GoDaddy certs on Android.<br>
>Everything works with GoDaddy certs and "Validate ..." unchecked.<br>
<br>
</div></div><span class=""><font color="#888888">--<br>
Sent from my mobile device, please excuse brevity and typos.<br>
</font></span></blockquote></div><br></div></div>
-<br>List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</a></blockquote></div><br></div></body></html>