Re: EAP-TLS obtaining certificates email

Piotr Janusz wrote:

I have used an outside certificate authority and have few clients that have the certicifates' subject similar to: E = user-name@domain.tld CN = Some-constant-text

CN is constant on all certificates. Freeradius gets the User-name attribute set to CN.

Any way to substitute the User-name attribute with the email?

Or have it al least logged with other attributes in detailed log?

Not really. The server requires code patches to look inside of the certificates. Alan DeKok.