Re: peap without client side certificate

2008-09-07 Thread Jelle Langbroek
But please do give the client the radius-server-cerificate so it knows which server to authenticate with. If you don't use that certificate anybody can set up a (intermediate) radius-server and make you authenticate with that (without you knowing it). After that, all your data will flow though

Re: peap without client side certificate

2008-09-07 Thread tnt
No, not server certificate but CA certificate. Client uses CA certificate to validate server certificate end eliminate rogue servers. It is true that if Validate server certificate box isn't ticked credentials can end up on a rouge server. Ivan Kalik Kalik Informatika ISP Dana 7/9/2008, Jelle

peap without client side certificate

2008-09-06 Thread Ahmet DÜLGAR
Dear All, Finally i run freeradius 2.0.5 + mysql +wpa with peap mode by your helps i choose peap because in documents says peap doesnt need clint side ceritficate still i cant understand the certificate types i create it by /etc/raddb/certs make is there other way to build only server side

Re: peap without client side certificate

2008-09-06 Thread Alan DeKok
Ahmet DÜLGAR wrote: Finally i run freeradius 2.0.5 + mysql +wpa with peap mode by your helps i choose peap because in documents says peap doesnt need clint side ceritficate Yes. still i cant understand the certificate types i create it by /etc/raddb/certs make is there other way to build