Freeradius TLS cetificate(win 7 and previous)

Question

I'm configuring FreeRADIUS 2.2.6. I use TLS because TTLS is not supported by windows 7.

With Windows 8.1 the WiFi connection works very well without installing certificate
With Windows 7 and previous the connection doesn't work without certificate

I need to make it easy to connect for the user. Is it possible for users to authenticate without the certificate?

score 1 · Answer 1 · answered Apr 11 '15 at 02:00

1

No the primary use case for EAP-TLS it to perform mutual authentication using certificates. Both the supplicant and server must provide a certificate.

If you want to use password based authentication, EAP-PEAPv0 has been available on the Windows platform since Windows 2000 SP4. For that to work, you'll need the NT-Password or Cleartext password of the user stored in a directory or database.

answered Apr 11 '15 at 02:00

Arran Cudbard-Bell

1,514
1
9
18

thanks for the reply . I set PEAPv0 / EAP - MSCHAPv2 , but I still have problems certificate. – Riccardo Locatelli Apr 13 '15 at 16:08
You don't make it clear which certificate you're having problems with, the client certificate or the server certificate? – Arran Cudbard-Bell Apr 13 '15 at 16:11
client................ – Riccardo Locatelli Apr 17 '15 at 10:07
....... What you're saying doesn't make sense, you can't use client certificates with PEAPv0, so you can't still have issues with a client certificate. – Arran Cudbard-Bell Apr 17 '15 at 12:09
i use PEAPv0 with EAP-MSCHAPv2 – Riccardo Locatelli Apr 17 '15 at 13:55

Freeradius TLS cetificate(win 7 and previous)

1 Answers1