Project

General

Profile

Actions
Copy link

Todo #15563

closed

Remove unsupported dh_file configuration in FreeRADIUS

Added by Markus * 11 days ago. Updated 9 days ago.

Status:
Resolved
Priority:
Normal
Assignee:
Marcos M
Category:
FreeRADIUS
Target version:
pfSense - 2.8.0
Start date:
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
24.08

Description

According to FreeRADIUS, the use of dh_file is no longer necessary as of OpenSSL Version 1.1.1.

Actions
Copy link
 #1

Updated by Marcos M 9 days ago

  • Status changed from New to In Progress
  • Assignee set to Marcos M
  • Target version set to 2.8.0
  • Plus Target Version set to 24.08

FreeRADIUS fails to start now if the configuration contains dh_file:

/usr/local/etc/raddb/mods-enabled/eap: dh_file = ${certdir}/dh

Logs reversed:

Jun 21 08:33:55     radiusd     71302     /usr/local/etc/raddb/mods-enabled/eap[2]: Instantiation failed for module "eap" 
Jun 21 08:33:55     radiusd     71302     rlm_eap (EAP): Failed to initialise rlm_eap_tls
Jun 21 08:33:55     radiusd     71302     rlm_eap_tls: Failed initializing SSL context
Jun 21 08:33:55     radiusd     71302     /usr/local/etc/raddb/mods-enabled/eap[18]: Failed parsing configuration item "dh_file" 
Jun 21 08:33:55     radiusd     71302     Unable to check file "/usr/local/etc/raddb/certs/dh": No such file or directory
Jun 21 08:33:55     radiusd     70664     Debugger not attached

Commenting out the line allows it to start.

Fixed in commit:8fd06af0cf875e08cb9b67711de3de8ae1e57ad8.

Actions
Copy link
 #2

Updated by Marcos M 9 days ago

  • Status changed from In Progress to Resolved
Actions
Copy link
 #3

Updated by Marcos M 9 days ago

  • Subject changed from Remove dh_file configuration item to Remove unsupported dh_file configuration in FreeRADIUS
Actions
Copy link

Also available in: Atom PDF