Re: EAP-TLS & deny access?

uhel@gmx.net wrote:

how can i deny access to a user (a certificate)?

Set Auth-Type := Reject

Is a CRL (with the CA_path and c_rehash stuff) the only possibility to deny access or is it possible to have a *whitelist* (like the CA_path and c_rehash stuff but as a whitelist) with certs that are allowed?

If you don't want the user to be authenticated, why are you issuing certificates for them? Alan DeKok.