Re: Real server certificate for PEAP

2013-04-03 Thread Phil Mayers
On 04/03/2013 05:32 AM, Muhammad Nuzaihan Kamal Luddin wrote: Hi, You will need to purchase a Unified Communications certificate from a CA. They don't all call it the same thing. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Real server certificate for PEAP

2013-04-02 Thread Rudolf Henze
Hi, Iam using freeradius 2.1.10 with a self-signed certificate with PEAP and mschapv2 and LDAP-authentification. Ive copied my CA-Certificate to all clients to be sure that Iam using really the right network and not a fake SSID. But this is a little inconvenient. Is it possible to use a real

Re: Real server certificate for PEAP

2013-04-02 Thread Alan Buxey
A self-signed is real. It's just that you are the CA...which actually gives you greater security and keeps your authentication under your own destiny control. If you believe that having a RADIUS server signed by a CA that is in the OS of your clients is the way you want to go, then simply go

Re: Real server certificate for PEAP

2013-04-02 Thread Phil Mayers
On 02/04/2013 15:22, Rudolf Henze wrote: Hi, Iam using freeradius 2.1.10 with a self-signed certificate with PEAP and mschapv2 and LDAP-authentification. Ive copied my CA-Certificate to all clients to be sure that Iam using really the right network and not a fake SSID. But this is a little

Re: Real server certificate for PEAP

2013-04-02 Thread Muhammad Nuzaihan Kamal Luddin
Hi, You will need to purchase a Unified Communications certificate from a CA. To generate the CSR, here is the guide: http://langui.sh/2009/02/27/creating-a-subjectaltname-sanucc-csr/ Regards, Muhammad Nuzaihan Bin Kamal Luddin On Tue, 2013-04-02 at 16:22 +0100, Phil Mayers wrote: On