Hello All, I have installed Ejbca and have it up and running for creating end entity certificates. However i am now unsure on how to configure eap-tls for freeradius with respect to the crl/certs produced by ejbca. Can anyone give me any pointers or a place where i can find some instructions? Regards, Jit On Wed, 17 Aug 2016 at 2:24 PM, Jitendra <jkilambi@gmail.com> wrote:
Hello All,
I have installed Ejbca and have it up and running for creating end entity certificates. However i am now unsure on how to configure eap-tls for freeradius with respect to the crl/certs produced by ejbca. Can anyone give me any pointers or a place where i can find some instructions?
Regards, Jit -- Kind Regards, Jitendra
-- Kind Regards, Jitendra
On 17 Aug 2016, at 06:31, Jitendra <jkilambi@gmail.com> wrote:
Hello All,
I have installed Ejbca and have it up and running for creating end entity certificates. However i am now unsure on how to configure eap-tls for freeradius with respect to the crl/certs produced by ejbca. Can anyone give me any pointers or a place where i can find some instructions?
Read the config file (mods-available/eap)? It has notes on the relevant configuration items…. If there’s something you don’t understand, ask questions. -Arran
Hello Arran, Sorry. I should've mentioned i have had free-radius configured and working with it creating the CA/crl and client certs. With EJBCA, the certs seem to be all created in the sql db vs actual cert file locations. Im confused as to how to integrate freeradius to use ejbca certs and crl. Thank you. Kind Regards, Jit On Wed, 17 Aug 2016 at 4:48 PM, Arran Cudbard-Bell < a.cudbardb@freeradius.org> wrote:
On 17 Aug 2016, at 06:31, Jitendra <jkilambi@gmail.com> wrote:
Hello All,
I have installed Ejbca and have it up and running for creating end entity certificates. However i am now unsure on how to configure eap-tls for freeradius with respect to the crl/certs produced by ejbca. Can anyone give me any pointers or a place where i can find some instructions?
Read the config file (mods-available/eap)? It has notes on the relevant configuration items…. If there’s something you don’t understand, ask questions.
-Arran
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Kind Regards, Jitendra
On Aug 18, 2016, at 1:39 AM, Jitendra <jkilambi@gmail.com> wrote:
Sorry. I should've mentioned i have had free-radius configured and working with it creating the CA/crl and client certs. With EJBCA, the certs seem to be all created in the sql db vs actual cert file locations. Im confused as to how to integrate freeradius to use ejbca certs and crl.
You pull the certificates out of SQL, and put them into a file. Alan DeKok.
On 18 Aug 2016, at 09:37, Alan DeKok <aland@deployingradius.com> wrote:
On Aug 18, 2016, at 1:39 AM, Jitendra <jkilambi@gmail.com> wrote:
Sorry. I should've mentioned i have had free-radius configured and working with it creating the CA/crl and client certs. With EJBCA, the certs seem to be all created in the sql db vs actual cert file locations. Im confused as to how to integrate freeradius to use ejbca certs and crl.
You pull the certificates out of SQL, and put them into a file.
Or query SQL in the virtual server you configure for EAP-TLS validation. -Arran Arran Cudbard-Bell <a.cudbardb@networkradius.com> Head of field engineering EMEA and APAC DDI: +1 (613) 518 1958 - Sales: +1 (613) 454 5037 FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
Arran Cudbard-Bell wrote:
On 18 Aug 2016, at 09:37, Alan DeKok <aland@deployingradius.com> wrote:
On Aug 18, 2016, at 1:39 AM, Jitendra <jkilambi@gmail.com> wrote:
Sorry. I should've mentioned i have had free-radius configured and working with it creating the CA/crl and client certs. With EJBCA, the certs seem to be all created in the sql db vs actual cert file locations. Im confused as to how to integrate freeradius to use ejbca certs and crl.
You pull the certificates out of SQL, and put them into a file.
Or query SQL in the virtual server you configure for EAP-TLS validation.
Well, SQL schema could change in a newer EJBCA release. EJBCA provides some mechs for using custom "publishers" to push all sorts of cert and CRLs "somewhere". Hence this is rather an EJBCA question on how to use publishers. Ciao, Michael.
participants (4)
-
Alan DeKok -
Arran Cudbard-Bell -
Jitendra -
Michael Ströder