25 Sep
2017
25 Sep
'17
6:14 p.m.
Hi Alans, Alan D: yes I know iOS supports EAP-TLS, I'm just saying that https://802.1x-config.org seems to not support it, or at least according to this screen (attached, but not sure that will come through) that I got to when I tried to export a mobileconfig for iOS. So unless I'm mistaken, I can't make a .mobileconfig file using that suggested site, at least not for EAP-TLS for iOS. But please do correct me if I'm wrong! Alad B: Are you referring to the Apple Configurator 2? Unfortunately, it can only be downloaded with a mac. I guess that could be arranged but boy if either of you have a better idea, that would be great! I added the ca.pem cert to my Linux connection--I hope that means that rogue APs can't connect with me anymore! Thanks--if y'all have insights, that would be great. On Mon, Sep 25, 2017 at 5:58 PM, Alan Buxey <alan.buxey@gmail.com> wrote: > Apple provide a tool to make mobileconfig profiles > > alan > > On 25 Sep 2017 10:21 pm, "Chevalier Violet" <chevalier.violet@gmail.com> > wrote: > > > Thanks all--I have tried the 802.1x-config site. From what I'm seeing, > with > > just a basic EAP-TLS config, it says it's not compatible with iOS. > Correct > > me if I'm wrong? > > > > And thanks--to know that there's not many ways to make a mobileconfig is > > good to know! > > > > On Mon, Sep 25, 2017 at 4:40 PM, Alan DeKok <aland@deployingradius.com> > > wrote: > > > > > On Sep 25, 2017, at 4:31 PM, Chevalier Violet < > > chevalier.violet@gmail.com> > > > wrote: > > > > > > > > I mean, I can manually ask Linux to use the CA that I set, so I guess > > > > that's all right. > > > > > > > > For the iPhone, are there any instructions for how to make the proper > > > certs > > > > via make client, etc. in the /etc/freeradius/certs directory? I > thought > > > the > > > > .p12 certs were made for mobile devices like the iPhone. If you're > > > telling > > > > me to run some kind of mobileconfig command, I'm not sure what it is. > > > > > > The point is you have to create a "mobileconfig" file for OSX. That > > > file contains information about the certificate, SSID, EAP method to > use, > > > etc. > > > > > > Right now, there aren't really many tools to create such files. See > > > http://802.1x-config.org/ for one example. > > > > > > Alan DeKok. > > > > > > > > > - > > > List info/subscribe/unsubscribe? See http://www.freeradius.org/ > > > list/users.html > > > > > > > > > > > -- > > "Do not speak, unless it improves on silence." -- Buddha > > - > > List info/subscribe/unsubscribe? See http://www.freeradius.org/ > > list/users.html > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/ > list/users.html > -- "Do not speak, unless it improves on silence." -- Buddha
