From: aland <aland>
Date: Wed, 31 Aug 2005 16:55:08 +0000 (+0000)
Subject: 	Added note on OID for machine authentication
X-Git-Tag: release_2_0_0_pre1~1076
X-Git-Url: http://www.project-moonshot.org/gitweb/?p=freeradius.git;a=commitdiff_plain;h=08c375103bcc0ee7439a5f01b71ba6ad5b0ae1e2

	Added note on OID for machine authentication
---

diff --git a/scripts/xpextensions b/scripts/xpextensions
index 4a1f01f..f422167 100644
--- a/scripts/xpextensions
+++ b/scripts/xpextensions
@@ -6,3 +6,15 @@ extendedKeyUsage = 1.3.6.1.5.5.7.3.2
 
 [ xpserver_ext]
 extendedKeyUsage = 1.3.6.1.5.5.7.3.1
+
+#
+#  Add this to the PKCS#7 keybag attributes holding the client's private key
+#  for machine authentication.
+#
+#  the presence of this OID tells Windows XP that the cert is intended
+#  for use by the computer itself, and not by an end-user.
+#
+#  The other solution is to use Microsoft's web certificate server
+#  to generate these certs.
+#
+# 1.3.6.1.4.1.311.17.2