Support for check_cert_subjectAltName?

Graham Leggett minfrin at
Sun Jan 8 15:04:15 CET 2012

Hi all,

When using client certificates in EAP-TLS, the check_cert_cn option exists that allows you to check that the username matches the CN. Is there a corresponding option somewhere that will allow you to verify the User-Name against the subjectAltName instead?


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4365 bytes
Desc: not available
URL: <>

More information about the Freeradius-Users mailing list