Question about certs and Microsoft

2012-03-14 Thread Scott McLane Gardner 
In the beginning of the cert documentation, it says:

  The Microsoft XP Extensions will be automatically included in the
server certificate.  Without those extensions Windows clients will
refuse to authenticate to FreeRADIUS.


But I use a certificate authority, so later on in the documentation, it
says:



  If you have an existing certificate authority, and wish to create a
  certificate signing request for the server certificate, edit
  server.cnf as above, and type the following command.

$ make server.csr

  You will have to ensure that the certificate contains the XP
  extensions needed by Microsoft clients.



How do I go about ensuring this? Do I have to request them to be added
from the CA?

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Question about certs and Microsoft

2012-03-14 Thread Alan DeKok 
Scott McLane Gardner wrote:
 But I use a certificate authority, so later on in the documentation, it
 says:
 
   If you have an existing certificate authority, and wish to create a
   certificate signing request for the server certificate, edit
   server.cnf as above, and type the following command.
 
 $ make server.csr
 
   You will have to ensure that the certificate contains the XP
   extensions needed by Microsoft clients.

  The default configuration includes the XP extensions.

 How do I go about ensuring this? Do I have to request them to be added
 from the CA?

  The default configuration does this.  You shouldn't need to do anything.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Question about certs and Microsoft

2012-03-14 Thread Scott McLane Gardner 
Excellent, thank you.

  The default configuration does this.  You shouldn't need to do anything.

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html