Security issues with public CA and signing certificates?

[Alan DeKok]

On Mar 9, 2019, at 10:07 AM, June Murderer <june.murderer at yandex.com> wrote:
> 
> I see, thanks. 
> 
> So, as you stated two years ago, the only way to work on pre-configured clients would be to pay $3k or so to get the signing certificate signed with the private key of the CA (assuming the supplicant tracks only the CA certificate)?

  If the client can't load new CA certificates, yes.

  Alan DeKok.