Re: SSL Certificates for PEAP/TTLS

2004-04-16 Thread Bob McCormick
Thanks man! That helps me out a lot! On Apr 15, 2004, at 5:54 PM, Steve OBrien wrote: Is it easy convert?   I did a google search to find out about converting IIS certificates to Apache and all the results I got back made it sound like rocket science. The documentation on it is not very good,

SSL Certificates for PEAP/TTLS

2004-04-15 Thread Bob McCormick
Has anyone on this list purchased an SSL certificate from a Certificate Authority (like Thawte or Verisign) for doing PEAP or EAP-TTLS? The scripts that come with Freeradius for generating a self-signed certificate include a special ExtendedKeyUsage attribute. I'm wondering how hard it'll be

Re: SSL Certificates for PEAP/TTLS

2004-04-15 Thread Steve OBrien
Has anyone on this list purchased an SSL certificate from a Certificate Authority (like Thawte or Verisign) for doing PEAP or EAP-TTLS? The scripts that come with Freeradius for generating a self-signed certificate include a special ExtendedKeyUsage attribute. What I have done is generated a

Re: SSL Certificates for PEAP/TTLS

2004-04-15 Thread Bob McCormick
Is it easy convert? I did a google search to find out about converting IIS certificates to Apache and all the results I got back made it sound like rocket science. Anyway, what's special about the cert is that Winblows XP clients require it to have a special extended key usage attribute.

Re: SSL Certificates for PEAP/TTLS

2004-04-15 Thread Steve OBrien
Is it easy convert? I did a google search to find out about converting IIS certificates to Apache and all the results I got back made it sound like rocket science. The documentation on it is not very good, it is actually surprisingly simple. 1.) on Unix box w/openssl : # openssl genrsa