Question about certs and Microsoft

Alan DeKok aland at deployingradius.com
Wed Mar 14 20:42:56 CET 2012


Scott McLane Gardner wrote:
> But I use a certificate authority, so later on in the documentation, it
> says:
> 
>   If you have an existing certificate authority, and wish to create a
>   certificate signing request for the server certificate, edit
>   server.cnf as above, and type the following command.
> 
> $ make server.csr
> 
>   You will have to ensure that the certificate contains the XP
>   extensions needed by Microsoft clients.

  The default configuration includes the XP extensions.

> How do I go about ensuring this? Do I have to request them to be added
> from the CA?

  The default configuration does this.  You shouldn't need to do anything.

  Alan DeKok.


More information about the Freeradius-Users mailing list