Bob, Thank you so much for your help! I am going to try that on my system. Regards, Gina Zhang -----Original Message----- From: Robert Franklin [mailto:rcf34@cam.ac.uk] Sent: Monday, June 21, 2010 3:03 PM To: FreeRadius users mailing list Cc: Zhang, Ge (Gina) Subject: Re: Can freeradius support multiple client CA certificates? On 21 Jun 2010, at 19:53, John Dennis wrote:
A (FreeRADIUS) virtual server does not have a different IP address nor would it have different subject names nor subject alt names.
I'm not getting the feeling you understand how PKI works, it might be worthwhile to read up on it.
When testing a new server certificate with a different chain to a new root CA, I set up a separate eap module with different certificates. The two EAP modules were selected using the realm in the username -- something@cam.ac.uk gave the normal certificates and something@test.cam.ac.uk gave the new ones but used the same backend SQL lookup to find account information. - Bob