On Mon Jul 27 2015 01:27:57 CDT, Jason Cook <[email protected]> wrote: > > Also seems worth noting that certs will need to be 1024bit. Our certs are > 1024 so expecting that to be ok for us > http://superuser.com/questions/935756/mac-os-el-capitan-10-11-not-able-to-connect-to-wifiwpa-2-enterprise >
Note that the certificate bit length is different from the Diffie-Hellman group bit length; the latter is what is referred to in that document. Also worth noting is that there are other Apple documents that say that OS X 10.10.4 and iOS 8.4 require a 2048-bit DH group, so there appears to be some discrepancy at least in the docs. We had to upgrade both ClearPass (6.5.2 plus a patch) and our Aruba controller code (6.4.2.9) to get both iOS 9 and OS X 10.11 to work with our 802.1X network. -- Julian Y. Koh Associate Director, Telecommunications and Network Services Northwestern University Information Technology (NUIT) 2001 Sheridan Road #G-166 Evanston, IL 60208 847-467-5780 NUIT Web Site: <http://www.it.northwestern.edu/> PGP Public Key:<http://bt.ittns.northwestern.edu/julian/pgppubkey.html> ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
