certificate with mschapv2 in peap

Alan DeKok aland at nitros9.org
Tue Apr 25 17:07:58 CEST 2006


alfonso.lazaro at eresmas.com wrote:
> 	i have added 
> 
> 	DEFAULT EAP-TLS-Require-Client-Cert := Yes
> 
> 	in the users file
> 
> 	but the supplicant (windows XP) do not send the certificate ...

  That configuration tells the server to reject the clinet UNLESS it
sends the certificate.  It doesn't tell the client to send the
certificate.

  You still have to manually create a client cert, add it to the
client, and then tell the client to use it.

  Alan DeKok.




More information about the Freeradius-Users mailing list