From: Matthew Newton <matthew-git@newtoncomputing.co.uk>
Date: Fri, 15 Sep 2017 13:01:12 +0000 (+0100)
Subject: people try to use client certificates, and it generally doesn't work
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=df2b326ba7e096c1e70342041a44428c7fbfdfd7;p=thirdparty%2Ffreeradius-server.git

people try to use client certificates, and it generally doesn't work
---

diff --git a/raddb/mods-available/eap b/raddb/mods-available/eap
index d7200515148..6c8f6b4bea8 100644
--- a/raddb/mods-available/eap
+++ b/raddb/mods-available/eap
@@ -851,6 +851,10 @@ eap {
 		#
 		#  in the control items for a request.
 		#
+		#  Note that the majority of supplicants do not support using a
+		#  client certificate with EAP-TTLS, so this option is unlikely
+		#  to be usable for most people.
+		#
 #		require_client_cert = yes
 	}
 
@@ -974,6 +978,10 @@ eap {
 		#
 		#  in the control items for a request.
 		#
+		#  Note that the majority of supplicants do not support using a
+		#  client certificate with PEAP, so this option is unlikely to
+		#  be usable for most people.
+		#
 #		require_client_cert = yes
 	}