Thanks! Thought there was a reason. I'll feed that back :-) Stefan ________________________________ From: Alan Buxey [A.L.M.Buxey@lboro.ac.uk] Sent: 08 October 2014 19:49 To: FreeRadius users mailing list; Stefan Paetow Subject: Re: encrypt_key = no in FreeRADIUS snake oil certs For a default system we should have best security possible (the eap.conf/eap module has the same default passphrase) If people really don't want passwords then they can strip/remove them (like people do with Apache) alan Janet(UK) is a trading name of Jisc Collections and Janet Limited, a not-for-profit company which is registered in England under No. 2881024 and whose Registered Office is at Lumen House, Library Avenue, Harwell Oxford, Didcot, Oxfordshire. OX11 0SG. VAT No. 614944238