GnuTLS and FreeRADIUS

Alan DeKok aland at deployingradius.com
Fri Apr 17 11:09:49 CEST 2009


LATZE Carolin wrote:
> Unfortunately it seems that we don't have any choice. We need TLS 1.2
> which seems not to be supported in OpenSSL. So, we will start with
> modifying the EAP-TLS module in order to use GnuTLS. I know it is a
> terrible solution to have both TLS libraries in FreeRADIUS, but at the
> moment, we don't have the resources to try to migrate FreeRADIUS
> completely. I hope that we won't see side effects when migrating one
> module - we'll see... Is there already any known problem with that approach?

  No.  My suggestion is to use "git" for revision control.  This will
make it easy to merge any changes.

  Then, just butcher the source code until it works. :)

  Alan DeKok.



More information about the Freeradius-Devel mailing list