On Jul 8, 2025, at 10:34 PM, Kat via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
The directory (tmp/radiusd) does not exist in the freeradius docker image, as far as I can tell.
1. Do I need to make that directory for EAP-TLS to work?
Only if you are uncomment the rest of the "verify" section. The documentation makes it clear.
2. If question 1 is yes, then is tmp/radiusd created in the root directory?
It's created based on the filename you specify. It's a filename. It's not magic.
3. If question 2 is no, where should tmp/radiusd be created?
It's a filename. Wherever you want. The requirements for the directory are described in the comments. Which you posted to the list.
4. " You should also delete all of the files in the directory when the server starts."
Is when before or after or either? So should the files be deleted before starting the server or after the server is started or it doesn't matter?
Perhaps try after, so that the server can start, write files there during the OCSP "verify" stage, and then you delete them? Does that make sense? Maybe "before" is a better idea... Alan DeKok.