how to turn on client certificate verification for PEAP?

[Arran Cudbard-Bell]

> On 18 Mar 2015, at 12:16, Jim Shi <hanmao_shi at apple.com> wrote:
> 
> Hi, Arran,
> Actually we would like to  have PEAP + MSCHAP + client certificate validation,
> 
> Looks PEAP + MSCHAP is working, we just want to additional client certificate validation.
> 
> Do you meant to add the  following
> 
>> authorize {
>> 	update control {
>> 		EAP-TLS-Require-Client-Cert = Yes
>> 	}
>> }
> 
> to site-enabled/default?

Apparently, according to the interwebs. I personally have never tested it.

-Arran

Arran Cudbard-Bell <a.cudbardb at freeradius.org>
FreeRADIUS development team

FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 872 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20150318/f49547ea/attachment.sig>