Help with configuring client certificates for peap or ttls

Matthew Newton mcn at freeradius.org
Fri Sep 15 09:15:34 CEST 2017


On 15 September 2017 07:30:58 BST, Vacheslav <m_zouhairy at skno.by> wrote:
>I have free radius 3.0.14 and I managed to authenticate using peap and
>ttls
>using the self signed server certificate. I tried to push it further
>with
>requiring client certificates but that didn't work. 

Pretty much no supplicants support using client certificates with PEAP or EAP-TTLS, so unfortunately it won't work. I think wpa-supplicant is the only one that will.

For client certificates on Windows you have to use EAP-TLS.

-- 
Matthew



More information about the Freeradius-Users mailing list