7 Apr
2010
7 Apr
'10
7:48 a.m.
Victor Tangendjaja wrote:
In WiMAX certificate CN apparently contains MAC address and model name of the device for example "FF1234567890 USB1234". WiMAX standard says and I quote "The MAC" (from the CN) "SHALL be compared with the MAC address in the Calling-Station-Id of the RADIUS Access Request message. If they do not match the authentication SHALL be rejected."
It's hard to do this right now with FreeRADIUS.
I tried to use "check_cert_cn" inside eap.conf this way
That won't work.
is this the correct way or there's a better way?
You'll need to modify the source code to get this to work. Alan DeKok.