eap-tls certificates
Hi. I'm in the process of setting up freeradius 2.1.9 on debian lenny/sparc. I've got everything working for eap tls with the self signed certificates that come with freeradius. This is working well for macs and some smartphones but I'm having trouble with windows machines. My research indicates that buying a certificate from a known CA will solve my problems (or I believe I could import a certificate into the windows devices but with up to 1000 clients I'd prefer not to have to do this). Can anyone confirm if this is the case? If so, is there a specific type of certificate I need to buy that would include some 'extensions' that I'm told windows clients require. Cheers -- Pete
2010. 09. 27, hétfő keltezéssel 11.55-kor Peter McEvoy ezt írta:
I'm in the process of setting up freeradius 2.1.9 on debian lenny/sparc. I've got everything working for eap tls with the self signed certificates that come with freeradius. This is working well for macs and some smartphones but I'm having trouble with windows machines. My research indicates that buying a certificate from a known CA will solve my problems (or I believe I could import a certificate into the windows devices but with up to 1000 clients I'd prefer not to have to do this). Can anyone confirm if this is the case? If so, is there a specific type of certificate I need to buy that would include some 'extensions' that I'm told windows clients require.
You can deploy your CA to Windows clients using group policy. Regards, Andras
Hi. Thanks for you answer, unfortunately we're not using active directory or in a position to apply policies to our users computers. The wireless users will just be authenticating to a flat users file, which currently works great except for these certificate problems I have encountered with windows. Thanks again. -- Pete On 27 September 2010 14:53, Andras Dosztal <andras.dosztal@gmail.com> wrote:
You can deploy your CA to Windows clients using group policy.
Regards, Andras
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (2)
-
Andras Dosztal -
Peter McEvoy