PEAP correct client certificate

[Alan DeKok]

On Nov 23, 2017, at 5:19 PM, Oliver Tollning <oliver at tollning.com> wrote:
> Now the client gets rejected, thats good.

  That's good...

> I installed a client certificate on the client but he still gets rejected :mhmhmh:

  The debug output will *mostly* tell you why.  Sometimes the client just stops EAP without any message.

  But in this case, it's likely that the debug output will tell you what's going on.

> Its either
> 1) I accidently did something else stupid somewhere in the config files
> 2) the radius server cant access the CA file, even though he correctly starts
> or
> 3) The client didnt handle the certificate correty, read as: I did something wrong.
> 
> 
> I'm leaning heavily towards 3), seems to me its a client problem.

  If the client is Windows, it won't do PEAP with client certificates

  Alan DeKok.