[RADIATOR] Radius Certificate - Self Signed?

[Alexander.Hartmaier at t-systems.com]

This Wiki entry is a great source of information in one place!
Thank you very much!

T-SYSTEMS AUSTRIA GESMBH
PU Cyber Security
Network Architecture
Operation Manager Authentication
Rennweg 97-99, A-1030 Vienna
+43 57057 4320 (phone)
+43 676 8642 4320 (mobile)
E-mail: alexander.hartmaier at t-systems.com
Internet: www.t-systems.at
Blog: blog.t-systems.at
Social Media: Facebook, Linkedin, Twitter

BIG CHANGES START SMALL – CONSERVE RESOURCES BY NOT PRINTING EVERY E-MAIL.

****************************************************************************************************************
T-Systems Austria GesmbH, Rennweg 97-99, A-1030 Vienna
Commercial Court Vienna, FN 79340b
****************************************************************************************************************
Notice: This transmittal and/or attachments may be privileged or confidential. It is
intended solely for the addressee named above. If you received this transmittal in error,
please notify us immediately by reply and delete this message and all its attachments.
Thank you.
****************************************************************************************************************
________________________________
Von: radiator <radiator-bounces at lists.open.com.au> im Auftrag von Dubravko Penezic <dpenezic at srce.hr>
Gesendet: Dienstag, 23. November 2021 08:54
An: Ullfig, Roberto Alfredo <rullfig at uic.edu>; radiator at lists.open.com.au <radiator at lists.open.com.au>
Betreff: Re: [RADIATOR] Radius Certificate - Self Signed?

Hi Roberto,

maybe following link may help you with your decision :

https://wiki.geant.org/display/H2eduroam/EAP+Server+Certificate+considerations

it is connected to eduroam authentication system, but may be applied to
any other 802.1x authentication.

Regards,
Dubravko Penezic
Srce

On 11/22/21 11:08 PM, Ullfig, Roberto Alfredo wrote:
> Wouldn't it make a lot more sense to use a self-signed certificate for
> Radius seeing that the user will always have to explicitly trust it
> anyway? What's the point of the CA in that case? We can only get 1 year
> signed certificates, with self-signed we could make it 10 years or
> something like that.
>
> ---
> Roberto Ullfig - rullfig at uic.edu
> Systems Administrator
> Enterprise Applications & Services | Technology Solutions
> University of Illinois - Chicago
>
> _______________________________________________
> radiator mailing list
> radiator at lists.open.com.au
> https://lists.open.com.au/mailman/listinfo/radiator
>
_______________________________________________
radiator mailing list
radiator at lists.open.com.au
https://lists.open.com.au/mailman/listinfo/radiator
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.open.com.au/pipermail/radiator/attachments/20211125/5dc1eb84/attachment.html>