Todo #15563: Remove unsupported dh_file configuration in FreeRADIUS - pfSense Packages - pfSense bugtracker

Actions

Copy link

Todo #15563

closed

Remove unsupported dh_file configuration in FreeRADIUS

Added by Markus * 5 months ago. Updated about 2 months ago.

Status:

Resolved

Priority:

Normal

Assignee:

Marcos M

Category:

FreeRADIUS

Target version:

Start date:

Due date:

% Done:

Estimated time:

Plus Target Version:

Description

According to FreeRADIUS, the use of dh_file is no longer necessary as of OpenSSL Version 1.1.1.

Actions

Copy link

Updated by Marcos M 5 months ago

Status changed from New to In Progress
Assignee set to Marcos M
Target version set to 2.8.0
Plus Target Version set to 24.08

FreeRADIUS fails to start now if the configuration contains dh_file:

/usr/local/etc/raddb/mods-enabled/eap: dh_file = ${certdir}/dh

Logs reversed:

Jun 21 08:33:55     radiusd     71302     /usr/local/etc/raddb/mods-enabled/eap[2]: Instantiation failed for module "eap" 
Jun 21 08:33:55     radiusd     71302     rlm_eap (EAP): Failed to initialise rlm_eap_tls
Jun 21 08:33:55     radiusd     71302     rlm_eap_tls: Failed initializing SSL context
Jun 21 08:33:55     radiusd     71302     /usr/local/etc/raddb/mods-enabled/eap[18]: Failed parsing configuration item "dh_file" 
Jun 21 08:33:55     radiusd     71302     Unable to check file "/usr/local/etc/raddb/certs/dh": No such file or directory
Jun 21 08:33:55     radiusd     70664     Debugger not attached

Commenting out the line allows it to start.

Fixed in commit:8fd06af0cf875e08cb9b67711de3de8ae1e57ad8.

Actions

Copy link