21 Jun
2010
21 Jun
'10
4:03 p.m.
On 21 Jun 2010, at 19:53, John Dennis wrote:
A (FreeRADIUS) virtual server does not have a different IP address nor would it have different subject names nor subject alt names.
I'm not getting the feeling you understand how PKI works, it might be worthwhile to read up on it.
When testing a new server certificate with a different chain to a new root CA, I set up a separate eap module with different certificates. The two EAP modules were selected using the realm in the username -- something@cam.ac.uk gave the normal certificates and something@test.cam.ac.uk gave the new ones but used the same backend SQL lookup to find account information. - Bob