I'd like to run FreeRADIUS for EAP TLS authentication but instead of running my own Certification Authority I'd like to use StartSSL.
I've setup EAP TLS with StartCom as the only Trusted Root CA and that works ok, but means anyone with a StartSSL Certificate could connect to my network.
I would like to allow access based on the client certificate Common Name something like
check_cert_cn = *@example.com but I don't seem to be able to use a wild card in the
Is there a way to achieve this? I might be approaching this problem the wrong way, should I be looking at realms or something? or just accept it and run my own CA.