...
Code Block |
---|
... [ CA_default ] ... default_days = 732 ... crlDistributionPoints = URI:http://server.test.av/test_ca.crl [ req ] ... input_password = password # Replace with an actual password, different from the one in server.cnf output_password = password # Replace with an actual password, should be same as input_password [server] countryName = IN stateOrProvinceName = Tamil Nadu localityName = Auroville organizationName = Test emailAddress = admin@test.av commonName = "Test Server Certificate" [v3_ca] ... crlDistributionPoints = URI:http://server.test.av/test_ca.crl ... |
Modify /etc/freeradius/3.0/certs/xpextensions, set the following settings:
Code Block |
---|
...
[ xpclient_ext]
...
crlDistributionPoints = URI:http://server.test.av/test_ca.crl
...
[ xpserver_ext]
...
crlDistributionPoints = URI:http://server.test.av/test_ca.crl
... |
Code Block |
---|
cd /etc/freeradius/3.0/certs rm -f *.pem *.der *.csr *.crt *.key *.p12 serial* index.txt* # This step is probably not needed, make ca.pem make ca.der make server.pem make server.csr chown freerad:freerad * chmod o-rwx * rm bootstrap rm passwords.mk # Delete all other files in the folder except: server.cnf, ca.cnf, xpextensions, Makefile, README, dh, ca.pem, server.pem, server.key |
...