Re: [PacketFence-users] Need advice on server certificates

2018-06-14 Thread Tobias Friede via PacketFence-users
Hi,

Have a look at the packetfence documentation.
You can implement your own certificates for the radius server.

https://packetfence.org/doc/PacketFence_Installation_Guide.html#_pki_integration

For example we use a Windows Server CA and we deploy the certificates via
Group Policy to our clients. For the radius server I requested a
certificate on our CA and replaced the default certificates of packetfence
by our own certificates like described in this manual.

Greetings
Tobias


Steve Pfister via PacketFence-users 
schrieb am Di., 12. Juni 2018, 17:46:

> I have a test setup of PacketFence working now. I need some advice on
> server certificates. Windows tries to validate the certificate by
> default, so I can only get a connection to work if I turn off
> validation.  I'm trying to understand what the best practice is for our
> users, some of whom may be guests. I'm thinking, either...
>
> - use our wildcard certificate from Network Solutions -- this doesn't
> work too well for 802.1x, is this correct?
>
> - have the users turn off certificate validation
>
> - have the user install the root CA from the PF server
>
> What is our best option?
>
>
>
> --
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> ___
> PacketFence-users mailing list
> PacketFence-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users


[PacketFence-users] Need advice on server certificates

2018-06-12 Thread Steve Pfister via PacketFence-users
I have a test setup of PacketFence working now. I need some advice on 
server certificates. Windows tries to validate the certificate by 
default, so I can only get a connection to work if I turn off 
validation.  I'm trying to understand what the best practice is for our 
users, some of whom may be guests. I'm thinking, either...


- use our wildcard certificate from Network Solutions -- this doesn't 
work too well for 802.1x, is this correct?


- have the users turn off certificate validation

- have the user install the root CA from the PF server

What is our best option?


--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users