<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7638.1">
<TITLE>Certificate push for eap-tls clients</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/rtf format -->
<P DIR=LTR><SPAN LANG="en-gb"><FONT FACE="Calibri">Hi All,</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-gb"><FONT FACE="Calibri"> I’ve had a look around and couldn’t find much information about how to do this</FONT></SPAN><SPAN LANG="en-gb"><FONT FACE="Calibri">, so thought I’d maybe try my luck here!</FONT></SPAN><SPAN LANG="en-gb"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-gb"><FONT FACE="Calibri">In a demonstration of clearpass (Aruba radius product) one nice thing it did was send certificate</FONT></SPAN><SPAN LANG="en-gb"><FONT FACE="Calibri">s direct to clients (or made a webpage available with a cert</FONT></SPAN><SPAN LANG="en-gb"><FONT FACE="Calibri"> download link). Does anyone know whether this is possible in some wa</FONT></SPAN><SPAN LANG="en-gb"><FONT FACE="Calibri">y with a freeradius based radius system</FONT></SPAN><SPAN LANG="en-gb"><FONT FACE="Calibri">?</FONT></SPAN><SPAN LANG="en-gb"><FONT FACE="Calibri"></FONT></SPAN><SPAN LANG="en-gb"> </SPAN></P>
<P DIR=LTR><SPAN LANG="en-gb"><FONT FACE="Calibri">Unfortunately we don’t run an openssl</FONT></SPAN><SPAN LANG="en-gb"> <FONT FACE="Calibri">/ tinyca etc</FONT></SPAN><SPAN LANG="en-gb"> <FONT FACE="Calibri">based CA</FONT></SPAN><SPAN LANG="en-gb"><FONT FACE="Calibri">, it’s AD based and I have no control over that, and we also need to stick with TLS rather</FONT></SPAN><SPAN LANG="en-gb"> <FONT FACE="Calibri">than another method of PEAP like mschapv2.</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-gb"><FONT FACE="Calibri">I’m not aware of an exposed api, apart from the obvious web based, interactive one that exists with an MS CA</FONT></SPAN><SPAN LANG="en-gb"><FONT FACE="Calibri">. Anything else presumably couldn’t be controlled via</FONT></SPAN><SPAN LANG="en-gb"> <FONT FACE="Calibri">linux anyway..</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-gb"><FONT FACE="Calibri">Any ideas?</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-gb"><FONT FACE="Calibri">Thanks</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-gb"><FONT FACE="Calibri">Andy</FONT></SPAN><SPAN LANG="en-gb"></SPAN></P>
</BODY>
</HTML>