EAP-TTLS/EAP-TLS with freeRADIUS

[Mr Dash Four]

>> After reading various howto's and documentation as well as looking at
>> numerous sources on the Internet, I can't see a way in which the AP is
>> authenticated to the RADIUS server by using only its certificate
>> attributes (CN, Subject, Issuer etc) - it seems that freeRADIUS always
>> needs some sort of "password" or "shared secret" specified.
>>
>>     
> so it is, you can only protect your AP client with the shared secret key.
>   
In other words, EAP-TTLS/EAP-TLS isn't actually supported in freeRADIUS?