Re: EAP TLS against multiple certificates?

On Mar 31, 2017, at 7:02 AM, David Hartburn <D.J.Hartburn@kent.ac.uk> wrote:

Is it possible to check EAP-TLS against multiple certificate chains, or bundle two chains together into the same pem file?

See the comments for "ca_file" in the default build. The question is answered there.

In terms of config, in mods-enabled/eap, I have tls-config loanlaptops { private_key_file = ${confdir}/certs/loan_laptop_server.pem certificate_file = ${confdir}/certs/loan_laptop_server.pem ca_file = ${confdir}/certs/unikentrootCAchain.pem

Removing all of the comments makes the configuration smaller, it can also make it harder to understand. Alan DeKok.