eap-tls certificates

[Andras Dosztal]

2010. 09. 27, hétfő keltezéssel 11.55-kor Peter McEvoy ezt írta:
> I'm in the process of setting up freeradius 2.1.9 on debian
> lenny/sparc. I've got everything working for eap tls with the self
> signed certificates that come with freeradius. This is working well
> for macs and some smartphones but I'm having trouble with windows
> machines. My research indicates that buying a certificate from a known
> CA will solve my problems (or I believe I could import a certificate
> into the windows devices but with up to 1000 clients I'd prefer not to
> have to do this). Can anyone confirm if this is the case? If so, is
> there a specific type of certificate I need to buy that would include
> some 'extensions' that I'm told windows clients require.


You can deploy your CA to Windows clients using group policy.

Regards,
Andras