3.8.5. EAPTLS_CAPath Previous topic Parent topic Child topic Next topic

For TLS based EAP types such as TLS, TTLS and PEAP, this parameter specifies the name of a directory containing CA root certificates that may be required to validate TLS client certificates. The certificates must be in PEM format, one per file. The files names are looked up by the CA 'Subject Name' hash value. Radiator looks for root certificates first in EAPTLS_CAFile, then in EAPTLS_CAPath, so there usually is no need to set both.
Special characters are supported.