distinguish between revoked and expired certificates

Alan DeKok aland at deployingradius.com
Fri Sep 7 12:07:00 CEST 2012

Wegener, Norbert wrote:
> Is it possible to distinguish between expired and revoked certificates
> and assign a special vlan in the first case while rejecting the user in
> the second one?
> As in both cases the certificate is invalid, I suppose the answer is no.

  Both will cause Access-Reject. :)

> The probably best way  would be to organize the the renewal of
> certificates appropriately.

  Yes.  And that can be hard.

  Alan DeKok.

More information about the Freeradius-Users mailing list