On 06/11/2010 05:56 AM, Riccardo Veraldi wrote:

Hello, when using EAP-TLS I would like to check the DN of hte user certificate and in particulare I need to check the Locality (L) string to matcha particular string.

Is it possible in some way ?

My recollection is that the certificate validation is hard coded so there isn't a configurable way to change the validation logic, instead you would need to modify the source and rebuild the module. -- John Dennis <jdennis@redhat.com> Looking to carve out IT costs? www.redhat.com/carveoutcosts/