cert bootstrap bug? (was Re: definitively, I have a problem with eap-tls)

[Alan DeKok]

Reveal MAP wrote:
> Yes, Alan, we already now that thedefault config do works! my mind:
> freeradius (in our case, sergio and me) is correctly configured. But, we
> encounterd a problem showing no error message. so to make the log
> slimmer, why not deactivate some non mandatory module in our scenario??
> so the output will show the strict necessary information...

  Because editing the config files when you don't know what they do is
almost always a bad idea.  Recommending that *other* people edit the
config files when you don't know what they do is *very* much a bad idea.
 You are actively confusing people, and making it harder for them to
solve their problems.

> eg: PAPi don't need PAP module at all to figure out the problem of
> PEAP/mschapv2 and Active Directory.
> 
> and Another question Alan: did you test the bootstrap scrip in windows
> and can you tell us how it works at your side please? how do you find
> the certificatuion chain!!!

  It works for me.

  Alan DeKok.