TLS certificates authorities.

Alan DeKok aland at deployingradius.com
Thu Sep 8 15:30:18 CEST 2016


On Sep 8, 2016, at 1:56 AM, Bogdan Rudas via Freeradius-Users <freeradius-users at lists.freeradius.org> wrote:
> 
> I'm using EAP-TTPS+PAP for authentication. Are there any way to prevent
> WiFi SSID spoofing without distributing my own CA certificate?

  No.

> Does it make
> a sense to sign my server key with any of the public CA and what should I
> supply as CN for such key?

  You should use a self-signed CA.  It's just better.

  Alan DeKok.




More information about the Freeradius-Users mailing list