Advanced usage of Radsec and PKI integration?

[Alan DeKok]

On Apr 18, 2025, at 7:56 AM, Yoann Gini <yoann.gini at gmail.com> wrote:
> I’m looking at the following Radsec documentation for FreeRadius and I’m lacking some details, maybe someone here can share some guidance?
...
> My goal here is to simplify the use of FreeRadius by solely relying on Certificate Based Authentication for the client, and so, finding a way to configure FreeRadius to accept all client, regardless of their IP, if they can authenticate with a certificate coming from a specific PKI and that is currently not revoked in the PKI’s CRL.

  See raddb/clients.conf.  You can use a network and prefix for the clients:

	ipaddr = 0/0

  Alan DeKok.