Re: EAP-TLS working but asking for cert

On Sep 25, 2017, at 4:31 PM, Chevalier Violet <chevalier.violet@gmail.com> wrote:

I mean, I can manually ask Linux to use the CA that I set, so I guess that's all right.

For the iPhone, are there any instructions for how to make the proper certs via make client, etc. in the /etc/freeradius/certs directory? I thought the .p12 certs were made for mobile devices like the iPhone. If you're telling me to run some kind of mobileconfig command, I'm not sure what it is.

The point is you have to create a "mobileconfig" file for OSX. That file contains information about the certificate, SSID, EAP method to use, etc. Right now, there aren't really many tools to create such files. See http://802.1x-config.org/ for one example. Alan DeKok.