On 21 Jun 2010, at 19:53, John Dennis wrote: > A (FreeRADIUS) virtual server does not have a different IP address nor would > it have different subject names nor subject alt names. > > I'm not getting the feeling you understand how PKI works, it might be > worthwhile to read up on it.
When testing a new server certificate with a different chain to a new root CA, I set up a separate eap module with different certificates. The two EAP modules were selected using the realm in the username -- [email protected] gave the normal certificates and [email protected] gave the new ones but used the same backend SQL lookup to find account information. - Bob - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

