On 02-07-2016 15:59, Alan DeKok wrote:
On Jul 2, 2016, at 9:27 AM, Henrik Kressner <kressner@synkro.dk> wrote: By the windows machine, what do you mean ? You said:
Trying to connnect from a win 7, as described, via a hostapd based AP/NAS, I mean *that* windows machine.
What other windows machine would there be?
Its unclear in the howto if the windows machine act as a AP/NAS og as af station on the WLAN. From the earlier quote, you're clear that the Windows machine is trying to connect, and that you have a separate AP.
Now, you claim that you're not sure wether or not the Windows machine is acting as an AP.
It's not complicated. You're making it complicated.
Why?
I have copyed ca.der to the AP/NAS (running on a RPI) and i have configured with this line in hostapd.conf file: <sigh>
You said you had a Windows machine. I said to copy the CA to the Windows machine. You copied the CA to the access point running hostap.
Why are you making this difficult?
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Thanks for you comment, but now you are making assumtion. I did asume that the station was the one that needed a certificat, but it did not say so in the howto, so I had to ask. And by the way, the howto say it is NOT needed to make a client certificate, so I should not asume there is a client, even though make is trying to make af client certificate, and ends up with an error, if you dont configure it. And again, a client in radius enviroment MUST BE a NAS, so howto is not consistent. Mayby thats why so many peable ask so many silly quistions. I could be complaining about the bad documentation, theres no need for that, it's bad, the hole net knows it, so let us try to do something about it. I would happely help making documentation for freeradius, I am wery good at that, but before I can do that, i need to find out how it work. Anyway. To me it looks like there is a need for certificate at the station, this means that self signed certificat is not usable in a production enviroment. Therefore I will conclude you ned a comersially certificate, if using freeradius in af production enviroment. It would be nice if that was there somewhere in the documentation, so you know that before you start. Then a quistion: Will freeradius work with letsencrypt certificate, has anybody tryed? Please correct me if my conclution is wrong. -- ------------------------------------------- Med venlig hilsen / Yours Sincerly Henrik Kressner