...
6. Create the directory /etc/radsecproxy.d/certs/ca/. The template configuration file requires this directory to contain the accredited CA root certificates and the corresponding Certificate Revocation Lists (CRLs) in their OpenSSL hash form. See the section radsec certificates\radsecproxy-installation for information about the CA download.
...