Discussion:
Compiling with OpenSSL 1.1.1
Doug Wussler
2018-10-18 14:09:54 UTC
Permalink
Compiling FreeRADIUS v 3.0.15 with OpenSSL 1.1.1 works just fine.
Just thought you might like to know the debug info reports an UNKNOWN TLS VERSION:


(2) fsu-eap: Peer sent packet with method EAP PEAP (25)

(2) fsu-eap: Calling submodule eap_peap to process data

(2) eap_peap: Continuing EAP-TLS

(2) eap_peap: Peer indicated complete TLS record size will be 151 bytes

(2) eap_peap: Got complete TLS record (151 bytes)

(2) eap_peap: [eaptls verify] = length included

(2) eap_peap: (other): before SSL initialization

(2) eap_peap: TLS_accept: before SSL initialization

(2) eap_peap: TLS_accept: before SSL initialization

(2) eap_peap: <<< recv UNKNOWN TLS VERSION ?0304? [length 0092]

(2) eap_peap: TLS_accept: SSLv3/TLS read client hello

(2) eap_peap: >>> send TLS 1.2 [length 005d]

(2) eap_peap: TLS_accept: SSLv3/TLS write server hello

(2) eap_peap: >>> send TLS 1.2 [length 088b]

(2) eap_peap: TLS_accept: SSLv3/TLS write certificate

(2) eap_peap: >>> send TLS 1.2 [length 0095]

(2) eap_peap: TLS_accept: SSLv3/TLS write key exchange

(2) eap_peap: >>> send TLS 1.2 [length 0004]

(2) eap_peap: TLS_accept: SSLv3/TLS write server done

(2) eap_peap: TLS_accept: Need to read more data: SSLv3/TLS write server done

(2) eap_peap: In SSL Handshake Phase

(2) eap_peap: In SSL Accept mode

(2) eap_peap: [eaptls process] = handled

Doug Wussler
Florida State University

-
List info/subscribe/unsubscribe? See
Alan DeKok
2018-10-18 15:00:06 UTC
Permalink
Post by Doug Wussler
Compiling FreeRADIUS v 3.0.15 with OpenSSL 1.1.1 works just fine.
Upgrade to 3.0.17.

Alan DeKok.


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/us
Continue reading on narkive:
Loading...