Todo #15563
closed
Remove unsupported dh_file configuration in FreeRADIUS
Added by Markus * 28 days ago.
Updated 26 days ago.
Plus Target Version:
24.08
Description
According to FreeRADIUS, the use of dh_file is no longer necessary as of OpenSSL Version 1.1.1.
- Status changed from New to In Progress
- Assignee set to Marcos M
- Target version set to 2.8.0
- Plus Target Version set to 24.08
FreeRADIUS fails to start now if the configuration contains dh_file:
/usr/local/etc/raddb/mods-enabled/eap: dh_file = ${certdir}/dh
Logs reversed:
Jun 21 08:33:55 radiusd 71302 /usr/local/etc/raddb/mods-enabled/eap[2]: Instantiation failed for module "eap"
Jun 21 08:33:55 radiusd 71302 rlm_eap (EAP): Failed to initialise rlm_eap_tls
Jun 21 08:33:55 radiusd 71302 rlm_eap_tls: Failed initializing SSL context
Jun 21 08:33:55 radiusd 71302 /usr/local/etc/raddb/mods-enabled/eap[18]: Failed parsing configuration item "dh_file"
Jun 21 08:33:55 radiusd 71302 Unable to check file "/usr/local/etc/raddb/certs/dh": No such file or directory
Jun 21 08:33:55 radiusd 70664 Debugger not attached
Commenting out the line allows it to start.
Fixed in commit:8fd06af0cf875e08cb9b67711de3de8ae1e57ad8.
- Status changed from In Progress to Resolved
- Subject changed from Remove dh_file configuration item to Remove unsupported dh_file configuration in FreeRADIUS
Also available in: Atom
PDF
Updated by