[c-nsp] EAP SSL certificates - how to?

[A.L.M.Buxey at lboro.ac.uk]

Hi,
> What's the magic to getting an EAP SSL cert (WLCs using RADIUS for WPA 
> Enterprise) to work with machines without getting cert warnings?
> 
> I've used a self-signed one and got unknown root errors (expected) and 
> took a GeoTrust cert off a webserver and got unknown trust settings in 
> OSX.  In either case, going into the OS certificate store and setting 
> the trust settings gets me past that but I'd rather not confuse users.

the root CA that signed the cert needs to be in the store of the client.
for self-signed this means you must put the CA onto the client..

alan