RE: [WIRELESS-LAN] wild card certs and PEAP

2017-02-06 Thread Cappalli, Tim (Aruba)
You’re right. I should have clarified and said a SAN/multi-domain certificate. Nearly all certs now come with the CN as a SAN. From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Hunter Fuller Sent: Monday, February 6, 2017

Re: [WIRELESS-LAN] wild card certs and PEAP

2017-02-06 Thread Hunter Fuller
Are you sure you have no SAN? In my experience, it is almost impossible to get a cert issued by one of the big issuers that has zero SANs. If you request a single domain cert, you get a cert with one SAN, which is the same as the domain you requested. (There is also, of course, a CN containing

Re: [WIRELESS-LAN] wild card certs and PEAP

2017-02-06 Thread Jake Snyder
To reiterate, SANs are not needed on some platforms. Please consult your documentation. Sent from my iPhone > On Feb 6, 2017, at 6:00 AM, Osborne, Bruce W (Network Operations) > wrote: > > We use SANs on our RADIUS certificate so we can use the same certificate for >

RE: [WIRELESS-LAN] wild card certs and PEAP

2017-02-06 Thread Brian Helman
Thanks everyone. I was trying to avoid purchasing a cert for our test server, but it looks like I’ll have to do that. -Brian From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Jake Snyder Sent: Friday, February 03, 2017 4:50

RE: wild card certs and PEAP

2017-02-06 Thread Osborne, Bruce W (Network Operations)
We use SANs on our RADIUS certificate so we can use the same certificate for https on those servers. I agree with Tim, though. SANs are not needed and we have run our RADIUS certificate for several years on multiple servers without any SANs. Bruce Osborne Senior Network Engineer Network