SSL renegotiation ?

John elmer_radius at yahoo.com.cn
Thu Nov 12 04:01:44 CET 2009


Hi,
I found  a new man-in-the-middle attack with SSL.  http://www.sslshopper.com/article-ssl-and-tls-renegotiation-vulnerability-discovered.html
 
I am afraid if freeRADIUS use SSL renegotiation?  The freeRADIUS version is 1.1.6. We use EAP-TLS and the backend OpenLDAP server with TLS connection. 
Does  freeRADIUS use SSL renegotiation ?
 
Thanks.
John


      ___________________________________________________________ 
  好玩贺卡等你发,邮箱贺卡全新上线! 
http://card.mail.cn.yahoo.com/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20091112/e7a9b9df/attachment.html>


More information about the Freeradius-Users mailing list