Question about EAP and creating/installing certificates from a MS 2008 CA server from Active Directory
Hi everyone - I'm looking for any tips from someone who has configured Freeradius 3.01 to use certificates created by a Microsoft 2008R2 CA server. The documents I've found on certificates all seem to refer to a local CA server on the *nix box where Freeradius is, and also refer (way too much in 2015) to Windows XP. I'm trying to follow the guidelines here from way back in 2006, and getting some of the same issues someone else posted about, where the certificate template isn't specified and causes the CA server to barf at importing the request. http://lists.freeradius.org/pipermail/freeradius-users/2006-October/013613.h... Is there anyone who has documented their steps on setting up certificates from Centos/Freeradius to a Windows 2008 CA ? thanks, Tim
On Jan 6, 2015, at 2:36 PM, Tim Reimers <treimers@ashevillenc.gov> wrote:
I’m looking for any tips from someone who has configured Freeradius 3.01 to use certificates created by a Microsoft 2008R2 CA server.
Configuring FreeRADIUS to use the certificates is easy. Creating the *correct* certificates may be harder.
I’m trying to follow the guidelines here from way back in 2006, and getting some of the same issues someone else posted about, where the certificate template isn’t specified and causes the CA server to barf at importing the request. http://lists.freeradius.org/pipermail/freeradius-users/2006-October/013613.h...
That message doesn’t contain anything about certificate templates that I can see. Could you be more specific?
Is there anyone who has documented their steps on setting up certificates from Centos/Freeradius to a Windows 2008 CA ?
You should be able to create the certificate signing request on the FreeRADIUS machine, and then have the CA server sign them. Alan DeKok.
On Tue, Jan 06, 2015 at 03:44:43PM -0500, Alan DeKok wrote:
On Jan 6, 2015, at 2:36 PM, Tim Reimers <treimers@ashevillenc.gov> wrote:
Is there anyone who has documented their steps on setting up certificates from Centos/Freeradius to a Windows 2008 CA ?
You should be able to create the certificate signing request on the FreeRADIUS machine, and then have the CA server sign them.
That's what we did. It works. Matthew -- Matthew Newton, Ph.D. <mcn4@le.ac.uk> Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk>
participants (3)
-
Alan DeKok -
Matthew Newton -
Tim Reimers