Freeradius2: WLAN with certificates

[lolman]

Hello,
I have two questions.

Is this szenario able to do:
I want to secure my WLANs with certificates. I have 50 pfsense boxes.

I have a root CA on the clients and on the pfsense boxes. Every client has a client certificate signed by the root CA. (client certificates not covered in the pfsense boxes)
Is there a way to tell freeradius to authenticate all users with a valid certificate signed by the root CA?
No username/password needed. Or only one user/password combination for all.

If a client is stolen or something - I only want to put his certificate on the CRL and he dont get access anymore to the WLANs.

Second one: Can I create a task to automatically download and update the CRLs in my pfsense boxes? I publish them on a website.

Thanks for your help :)

[lolman]

No one an idea?