certificate with mschapv2 in peap

[Alan DeKok]

alfonso.lazaro at eresmas.com wrote:
> 	i have added 
> 
> 	DEFAULT EAP-TLS-Require-Client-Cert := Yes
> 
> 	in the users file
> 
> 	but the supplicant (windows XP) do not send the certificate ...

  That configuration tells the server to reject the clinet UNLESS it
sends the certificate.  It doesn't tell the client to send the
certificate.

  You still have to manually create a client cert, add it to the
client, and then tell the client to use it.

  Alan DeKok.