per client certificate

[Alan DeKok]

Tomoki Taniguchi wrote:
> Is there a way to setup freeradius with EAP so that each wifi-client
> has their own certificate to connect to the wifi network?

  This is EAP-TLS.  See the EAP-TLS howto on the web site.

> i want to be able to just disable a specific certificate if one one
> the laptops is stolen or lost.
> but the howtos i have come across so seem to be a setup where all
> wifi-clients use the same certificate to authenticate against an
> access point.

  Each client needs the same *server* certificate.  This is to identify
the server.  They can have unique *client* certificates.

  Alan DeKok.