1 Feb
2017
1 Feb
'17
12:33 p.m.
On 01/02/2017 17:01, Brian Julin wrote:
I did play with that a bit... not the first-time-seen part but just randomly sending out a bad cert. It confused clients horribly. I'd think you'd want to serve the correct certificate first, so Apples pin it, then after a successful auth or two test them for compliance.
https://github.com/skids/freeradius-server/commits/clientverify would get you part way there if you decide to go adventuring.
Very nice. Thank you!