query on files under /etc/raddb/certs

[Alan DeKok]

> On Nov 12, 2020, at 1:43 PM, SIMON BABY <simonkbaby at gmail.com> wrote:
> 
> Hello,
> 
> I see the files below are generated under /etc/raddb/certs directory. Can
> someone  explain to me the usage of these files? Our system is very secure
> and did not want to create certs and keys dynamically.

  There's a README in that directory which explains how to create certificates.  It also explains what the various files are for.

> -rw-r--r-- 1 root 0 4393 Nov  5 18:47 01.pem
> -rw-r--r-- 1 root 0 4370 Nov  5 18:47 02.pem
> -rw-r----- 1 root 0 6155 Nov  5 18:42 Makefile
> -rw-r----- 1 root 0 8714 Nov  5 18:42 README

  Oh look, a "README".  Perhaps it should be read?

  As for you "do not want to create certs and keys dynamically", well, the server doesn't randomly create certificates and keys.  It only does so when you tell it to.

  So.... if you don't want to create certs and keys, then don't create the certs and keys.  It's that simple.

  Alan DeKok.