Involved components Involved certificates/CAs CAs Certificates Preparations/configuration for android clients Exporting/Importing certificates In order to make the OPNsense CAs/certificates usable by android devices, they require some minor tweaks: The exported CA certificate needs to be converted to DER format: Client certificates/keys need to be in PKCS12 format (and protected by password, otherwise android devices will […]
Category: radius
As soon as the radius daemon on my OPNsense box was responding properly I decided to add radsecproxy. But before doing so I had to get an idea how things work together. So keep in mind, all I have right now is a basic freeradius setup that can authenticate users against LDAP (at least with […]
The main challenge to do so, is to make this change permanent (as the OPNsense web frontend does not support that kind of config modification). So here’s a short wrap up of the things required: Now edit custom.users: Rebuild the template files and restart freeradius: And the tests results look like this: In my case […]
Due to some hardware problems with my switches (cheap Chinese ones) I recently decided to switch my core home network to Ubiquity systems. Only 3 weeks later I had to realize that my old FritzBox had lost its 2.4 GHz WiFi (seems to be quite common and may obviously go unnoticed for a long time […]