Chained intermediate certificate usage
Hi, I am planning to use chained certificates for my testing. So i am keeping all the certificates like Root Certificate/Manufacture/Sub-Manufacture certificate / device in the certs/ directory. I am setting auto-chain as yes. In 'eap' config file I am setting root.pem and device.pem . Where do I need to place the intermediate certificates.? Regards Sumant
On May 1, 2018, at 8:51 AM, Sumant Gupta <sumantgupta@gmail.com> wrote:
I am planning to use chained certificates for my testing. So i am keeping all the certificates like Root Certificate/Manufacture/Sub-Manufacture certificate / device in the certs/ directory.
I am setting auto-chain as yes. In 'eap' config file I am setting root.pem and device.pem . Where do I need to place the intermediate certificates.?
In the "certs" directory, along with the other certs. Alan DeKok.
Hi Alan, Sorry may be my query was not so accurate ..So where I need to mention in config file to use the intermediate certificates. I will place those intermediate certificates in certs directory. Since in config file we have placeholder for Root and device certificate only. Sumant On Tue 1 May, 2018, 6:29 PM Alan DeKok, <aland@deployingradius.com> wrote:
On May 1, 2018, at 8:51 AM, Sumant Gupta <sumantgupta@gmail.com> wrote:
I am planning to use chained certificates for my testing. So i am keeping all the certificates like Root Certificate/Manufacture/Sub-Manufacture certificate / device in the
certs/
directory.
I am setting auto-chain as yes. In 'eap' config file I am setting root.pem and device.pem . Where do I need to place the intermediate certificates.?
In the "certs" directory, along with the other certs.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On May 1, 2018, at 9:14 AM, Sumant Gupta <sumantgupta@gmail.com> wrote:
Hi Alan, Sorry may be my query was not so accurate ..So where I need to mention in config file to use the intermediate certificates. I will place those intermediate certificates in certs directory. Since in config file we have placeholder for Root and device certificate only.
See "ca_path". It's the directory where all certificates should be stored. If you have put the certificates there already, it should just work. Start up the server and test it. Alan DeKok.
If we place multiple certificates which are chained like Device --intermediate 1 -- intermediate 2--root certificate Does Openssl iterate through all the , certificates in ca _cert directory and create the appropriate chains and send the certificates in server hello message. Sumant On Tue 1 May, 2018, 6:51 PM Alan DeKok, <aland@deployingradius.com> wrote:
On May 1, 2018, at 9:14 AM, Sumant Gupta <sumantgupta@gmail.com> wrote:
Hi Alan, Sorry may be my query was not so accurate ..So where I need to mention in config file to use the intermediate certificates. I will place those intermediate certificates in certs directory. Since in config file we have placeholder for Root and device certificate only.
See "ca_path". It's the directory where all certificates should be stored.
If you have put the certificates there already, it should just work. Start up the server and test it.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On May 1, 2018, at 10:46 AM, Sumant Gupta <sumantgupta@gmail.com> wrote:
If we place multiple certificates which are chained like
Device --intermediate 1 -- intermediate 2--root certificate
Does Openssl iterate through all the , certificates in ca _cert directory and create the appropriate chains and send the certificates in server hello message.
OpenSSL has documentation. Read it. Or as I said, *try it*. You're much better off learning things by example than giving up and hoping that someone else does your thinking for you. Alan DeKok.
participants (2)
-
Alan DeKok -
Sumant Gupta