Eap-peap or eap-ttls how to

[Nachtfalke]

http://doc.pfsense.org/index.php/FreeRADIUS_2.x_package#General_EAP_configuration

[chain]

thanks for the information i will give it a try

[chain]

If you choose pfSense Cert-Manager then you have to enable it there and choose the certs from the pulldown menue. Click Save.  where would I get this?

[Metu69salemi]

System -> Cert Manager

[chain]

I have created the cert in the Certificate Authority Manager and Certificate Manager. how do I import the certs from the cert manager to the radius cert folder

[AhnHEL]

Next to each certificate in System: Certificate Authority Manager there are buttons that are marked with downward arrows.  Click on those buttons to download your created certs and keys.  Screenshot below.


[chain]

I have the certs, but not sure on to import the cert under /usr/local/etc/raddb/certs, it currently showing the default certs not the ones that I have created a CA, Client, Server Certs

[Nachtfalke]

@chain:

I have the certs, but not sure on to import the cert under /usr/local/etc/raddb/certs, it currently showing the default certs not the ones that I have created a CA, Client, Server Certs

If you created the CA cert and the server cert in SYSTEM -> Cert Manager then you have to go to freeradius -> EAP and then select the certificates you created. Then click save and the certificates are in the correct freeradius folder.

[chain]

I have checked the only area that I can add the cert under is eap-tls is this where I add the certs under?  I'm using eap-peap-mschapv2 for authentications

[Nachtfalke]

There is only one place where you can select the certificates on freeradius GUI. I attached a screenshot.
The certificates you select there can be used for EAP-TLS, EAP-TTLS, EAP-PEAP and so on. :)

[chain]

Thanks for your help its works great