On Wed, Jan 6, 2010 at 3:37 AM, John Dennis <[email protected]> wrote:
> 2) The certificates created are *temporary* and *not* intended for
> production use. As such it's always a good idea to bring this crucial fact
> to the attention of the person installing the server. No better way to make
> them aware of this than forcing them to perform a manual step. Otherwise
> they'll blindly think everything is hokey-dokey and deploy the server with
> temporary self-signed certs.

RHEL's mod_ssl RPM creates and uses self-signed certs by default. For
consistency reasons, both freeradius and mod_ssl should have the same
behaviour regarding self-signed certs.

-- 
Fajar
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to