>However, there may be multiple servers, each with its own cert. Why >should a client cert be signed by one server when it may be used with >other servers? >
(radius) Server certificate doesn't have to be unique. You can copy the same certificate to all the radius servers that will be accepting clients issued by that certificate. Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

