Trusted CA, Signed Certs and Verification

[Sam Fakhreddine]

I have installed the Digicert certificate and the Trusted root certifcate on a windows device, and still get the error.

Do we need to install the SSL server cert on every device? We were hoping that by signing it publicly we would not have our users go through that extra step.
________________________________________
From: freeradius-users-bounces+sam.fakhreddine=ledcor.com at lists.freeradius.org [freeradius-users-bounces+sam.fakhreddine=ledcor.com at lists.freeradius.org] on behalf of Alan DeKok [aland at deployingradius.com]
Sent: Thursday, April 03, 2014 8:03 PM
To: FreeRadius users mailing list
Subject: Re: Trusted CA, Signed Certs and Verification

Sam Fakhreddine wrote:
> What i mean is that they are in the certs directory and the eap config
> is setup to use.
>
> I have a PEM that contains server key, server crt, digicert root cert
> and the trusted root.

  That's nice, but not enough.  Are the proper certs on the devices, too?

  EAP and TLS are complicated.  Configuring FreeRADIUS is just one part
of the problem.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html