PEAP using different CA?

[Alan DeKok]

Fernando Hammerli wrote:
> To avoid the need of installing our CA certificate on every Windows
> machine, we´ll buy the server certificate from a public CA.
> Can Freeradius allow me to have both methods at the same time, ie, the
> PEAP with the public CA and certificate users with our 'self-signed' CA?

  Just put both CAs in the directory pointed to by CA_path.

  And using a public CA is usually not a good idea.  It means that your
users will trust *any* certificate signed by that CA, not just your
certificate.

  Alan DeKok.