Resolution (was: Re: "WARNING: !! EAP session for state ... did not finish!", And Other Warnings)

Nick Lowe nick.lowe at
Wed Oct 7 16:41:49 CEST 2015

You really should have a SAN present. Some clients reject X.509
certificates that miss this.

Google, for example, have plans to stop supporting CNs at all in very
short order - they'll just ignore them completely, relying only on
SANs. If there's no match against them, they will consider the
certificate invalid.



More information about the Freeradius-Users mailing list