diff options
| author | Alexander Wilke <nachtfalkeaw@web.de> | 2011-12-23 16:27:28 +0000 |
|---|---|---|
| committer | Alexander Wilke <nachtfalkeaw@web.de> | 2011-12-23 16:27:28 +0000 |
| commit | e5d1c85b5f4e79ac50fbda51850dbfcf073996a3 (patch) | |
| tree | bf59412ee28d15fb4313b393d03261659912b216 /config/freeradius2/freeradiuscerts.xml | |
| parent | 32fd2a716b6619debba6b6a5e5775f71b7432449 (diff) | |
| download | pfsense-packages-e5d1c85b5f4e79ac50fbda51850dbfcf073996a3.tar.gz pfsense-packages-e5d1c85b5f4e79ac50fbda51850dbfcf073996a3.tar.bz2 pfsense-packages-e5d1c85b5f4e79ac50fbda51850dbfcf073996a3.zip | |
Integrated pfsense Cert Manager in freeradius package (Thanks to jimp and sullrich). Now it is possible to create certificates in pfsense Cert manager and use them for freeradius.
The freeradius cert builder script is still present because freeradius needs some default ca and cert to start the service.
Diffstat (limited to 'config/freeradius2/freeradiuscerts.xml')
| -rw-r--r-- | config/freeradius2/freeradiuscerts.xml | 8 |
1 files changed, 5 insertions, 3 deletions
diff --git a/config/freeradius2/freeradiuscerts.xml b/config/freeradius2/freeradiuscerts.xml index a0b4ac0f..9cdf656a 100644 --- a/config/freeradius2/freeradiuscerts.xml +++ b/config/freeradius2/freeradiuscerts.xml @@ -98,7 +98,7 @@ <b>Important:</b><br> If you like to use certs created on another PC just disable this and click save.]]></description> <type>select</type> - <default_value>yes</default_value> + <default_value>no</default_value> <options> <option><name>Yes</name><value>yes</value></option> <option><name>No</name><value>no</value></option> @@ -113,7 +113,7 @@ This page uses the freeradius2 built-in script called "bootstrap" to create CA and certs. The disatvantage of this script is that nothing of your changes will be saved in the global config.xml file. So after a systemcrash or reinstallation of freeradius2 package all your CA and certs will be lost. If you have a backup of all these files on an USB stick or another server than you can copy them back in the freeradius certs folder.<br><br> - <b>The better way is to use the pfsense built-in Cert Manager (SYSTEM-> Cert Manager).</b> The CA-Cert and Server-Cert you created there you just have to copy to the freeradius certs folder and pointing to these certs in eap. + <b>The better way is to use the pfsense built-in Cert Manager (SYSTEM-> Cert Manager).</b> The CA-Cert and Server-Cert you created there you just have to choose in EAP. The advantage of this is that all your CA and certs will be saved in global config.xml and can be restored.]]></description> <type>input</type> <required/> @@ -247,7 +247,7 @@ <b>Limitations:</b><br> - There is no CRL at the moment. Deleting of existing certs from the database (../certs/index.txt) isn't possible from GUI.<br> + There is no CRL. Deleting of existing certs from the database (../certs/index.txt) isn't possible from GUI.<br> If you choose a Common Name which already exists in the database (check view config) the .crt will be zero bytes.<br> Choose other Common Name and create a new Client-Cert. ]]></description> @@ -275,8 +275,10 @@ </fields> <custom_delete_php_command> freeradius_allcertcnf_resync(); + freeradius_eapconf_resync(); </custom_delete_php_command> <custom_php_resync_config_command> freeradius_allcertcnf_resync(); + freeradius_eapconf_resync(); </custom_php_resync_config_command> </packagegui>
\ No newline at end of file |