notes on iOS 13

diff --git a/raddb/certs/README b/raddb/certs/README
index ed7cb95dfad65ddf54ec64e09dbf01f18476e19d..6288921da10a60492c75b8a1d1af588f80bf5599 100644 (file)
--- a/raddb/certs/README
+++ b/raddb/certs/README
@@ -180,6 +180,9 @@ $ openssl speed rsa2048
 The certificates created using this method are known to be compatible
 with ALL operating systems.  Some common issues are:
 
+  - iOS 13 has stringent new requirements on certificates.  See:
+    https://support.apple.com/en-us/HT210176
+
   - Windows requires certain OIDs in the certificates.  If it doesn't
     see them, it will stop doing EAP.  The most visible effect is
     that the client starts EAP, gets a few Access-Challenge packets,