EAP-TLS working but asking for cert

[Alan Buxey]

Apple provide a tool to make mobileconfig profiles

alan

On 25 Sep 2017 10:21 pm, "Chevalier Violet" <chevalier.violet at gmail.com>
wrote:

> Thanks all--I have tried the 802.1x-config site. From what I'm seeing, with
> just a basic EAP-TLS config, it says it's not compatible with iOS. Correct
> me if I'm wrong?
>
> And thanks--to know that there's not many ways to make a mobileconfig is
> good to know!
>
> On Mon, Sep 25, 2017 at 4:40 PM, Alan DeKok <aland at deployingradius.com>
> wrote:
>
> > On Sep 25, 2017, at 4:31 PM, Chevalier Violet <
> chevalier.violet at gmail.com>
> > wrote:
> > >
> > > I mean, I can manually ask Linux to use the CA that I set, so I guess
> > > that's all right.
> > >
> > > For the iPhone, are there any instructions for how to make the proper
> > certs
> > > via make client, etc. in the /etc/freeradius/certs directory? I thought
> > the
> > > .p12 certs were made for mobile devices like the iPhone. If you're
> > telling
> > > me to run some kind of mobileconfig command, I'm not sure what it is.
> >
> >   The point is you have to create a "mobileconfig" file for OSX.  That
> > file contains information about the certificate, SSID, EAP method to use,
> > etc.
> >
> >   Right now, there aren't really many tools to create such files.  See
> > http://802.1x-config.org/ for one example.
> >
> >   Alan DeKok.
> >
> >
> > -
> > List info/subscribe/unsubscribe? See http://www.freeradius.org/
> > list/users.html
> >
>
>
>
> --
> "Do not speak, unless it improves on silence."  -- Buddha
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/
> list/users.html