Hi Gopal: I am copying this email to the freeRADIUS community to see if more people can help you with this: here are my 2 cents... you'll need to have your own certificates - normally the organization has mandates on what type of certificates to use and stuff, we have our own CA that issues certificates - your organization could also have one in place, if not then you'll have to set up a CA and create server certs and client certs to be used that'll be signed by your CA. for more information read openssl documentation on how to setup your own CA and issue certs. Also, freeRADIUS contains sample test certs in the raddb config dir for testing only!!! If you want to authenticate win 2000/xp clients then the best documentation out on the net is: www.impossiblereflex.com/8021x/eap-tls-HOWTO.htm and it also contains details on how to create certs for use with windows clients. ms requires some special oids and this site also provides details on that and on setting up the ca for issuing the right type of certs. there is another source (tinyca) http://tinyca.sm-zone.net/ that helps creating and issuing certs (though i've never used it but i am surely going to try it once i get some free time :-) hope this helps and gets you started with eap-tls....
regards, mohammed. Mohammed H. Petiwala Senior Staff Engineer, iDEN-WLAN Motorola Inc. --- Gopal Varshney wrote: > Hi Mohammed, > > I am Gopal Varshney, currently developing and > testing 802.1X > Authenticator. I got your mailid from > freeradius.org mail > list. > > > I want to establish 802.1X session using EAP-TLS as > authentication > method, but I do not know how to get the > certificates. > > I am using win 2000 and freeradius server for my > testing. > > I dont know, should I have to download the > certificate from net, > or do I have to generate the certificate? > > Is there any specific certificate to be used for > testing, can you > please name one or two? > > How do I get the certificate for radius server? > Is it possible to change the username and password > information in > the > certificate? > > > Regards > Gopal Varshney > > > > > __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
