Problems with bootstrapping certificates

Alan Buxey A.L.M.Buxey at lboro.ac.uk
Wed Oct 14 20:07:59 CEST 2009


Hi,

> I have a question regarding bootstrapping default certificates using
> bootstrap script in raddb/certs directory.

Ideally once you've used the bootstrap you would remove the script that
makes them from the eap.conf and then thats done.

even better, you dont use the boostrap script at all and instead install
a proper CA, server.crt file etc 

the boostrap is really only there to get a test server up and running
quickly - you wouldnt want a snakeoil and very low timescale certificate
to be used in production :-)

alan



More information about the Freeradius-Users mailing list