(RADIATOR) Sending server certificate chain

[Mike McCauley]

Hello Jan,

thanks for the suggestion.

We have now added support for EAPTLS_CertificateChainFile wherever 
EAPTLS_CertificateFile is supported, and added support for 
TLS_CertificateChainFile wherever TLS_CertificateFile is supported. The 
ChainFile parameter specifies the name of a file containing a certificate 
chain for the Radius server certificate, with similar behaviour to 
SSLCertificateChainFile in Apach mod_ssl.

On Tuesday 19 February 2008 01:29, Jan Tomasek wrote:
> Hi,
>
> I've RADIUS server with chained certificate:
>
> Subject:C=CZ,O=CESNET,CN=publikace.cesnet.cz
> Issuer: C=BE,O=Cybertrust,OU=Educational CA,CN=Cybertrust Educational CA
>
> Subject:C=BE,O=Cybertrust,OU=Educational CA,CN=Cybertrust Educational CA
> Issuer: C=US,O=GTE Corporation,OU=GTE CyberTrust Solutions, Inc., CN=GTE
> CyberTrust Global Root
>
> GTE CyberTrust Global Root is commonly installed in clients but
> Cybertrust Educational CA is not. To get Radiator correctly working with
> OpenSSL based clients like wpa_supplicant I need way how to instruct
> Radiator to send certificate of intermediate CA "Cybertrust Educational
> CA".
>
> Apache does that by SSLCertificateChainFile directive, but Radiator
> seams to be missing something like this.
>
> FreeRadius is able to get and send intermediate CA certificate when it
> is in same file as server certificate. But Radiator seams to ignore it.
>
> Is there some way how to achieve sending intermediate CA to the client?
> And if not, is it possible to be added?
>
>
> Thanks

-- 
Mike McCauley                               mikem at open.com.au
Open System Consultants Pty. Ltd            Unix, Perl, Motif, C++, WWW
9 Bulbul Place Currumbin Waters QLD 4223 Australia   http://www.open.com.au
Phone +61 7 5598-7474                       Fax   +61 7 5598-7070

Radiator: the most portable, flexible and configurable RADIUS server 
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, 
Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS, 
TTLS, PEAP etc on Unix, Windows, MacOS, NetWare etc.

--
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.