EAP-TLS working but asking for cert

Chevalier Violet chevalier.violet at gmail.com
Mon Sep 25 23:20:12 CEST 2017


Thanks all--I have tried the 802.1x-config site. From what I'm seeing, with
just a basic EAP-TLS config, it says it's not compatible with iOS. Correct
me if I'm wrong?

And thanks--to know that there's not many ways to make a mobileconfig is
good to know!

On Mon, Sep 25, 2017 at 4:40 PM, Alan DeKok <aland at deployingradius.com>
wrote:

> On Sep 25, 2017, at 4:31 PM, Chevalier Violet <chevalier.violet at gmail.com>
> wrote:
> >
> > I mean, I can manually ask Linux to use the CA that I set, so I guess
> > that's all right.
> >
> > For the iPhone, are there any instructions for how to make the proper
> certs
> > via make client, etc. in the /etc/freeradius/certs directory? I thought
> the
> > .p12 certs were made for mobile devices like the iPhone. If you're
> telling
> > me to run some kind of mobileconfig command, I'm not sure what it is.
>
>   The point is you have to create a "mobileconfig" file for OSX.  That
> file contains information about the certificate, SSID, EAP method to use,
> etc.
>
>   Right now, there aren't really many tools to create such files.  See
> http://802.1x-config.org/ for one example.
>
>   Alan DeKok.
>
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/
> list/users.html
>



-- 
"Do not speak, unless it improves on silence."  -- Buddha


More information about the Freeradius-Users mailing list