The OP in this thread: Why is a CA certificate required for EAP-TLS clients?
said " My RADIUS server uses wifi-server-cert as the SSL certificate, and uses the wifi-client-ca certificate authority for validating client certificates."
Can someone tell me:
!/ Is it necessary (or advantageous) to use both a Server certificate and a CA Certificate on a Radius Server.(or do I have my wires crossed!)
2/ And if so how is it arranged?
At the moment I'm trying to set up an iPad to connect via WPA 2 Enterprise EAP-TLS.
I'm using a Qnap Network Attached Storage unit that has a radius server option. It will accept a certificate and key, plus an intermediate certificate - all in ascii format.
I'm using Openssl via XCA gui to create self signed certificates.
So far the only way I can find to get it to work is to have Root CA on the Radius Server. Client Certificate and key (p.12 Chained) plus Root CA certificate (.cer) in the Apple ios profile for the iPad.
3/ So also is it a security risk to use the root CA on the Radius Server?