Statement on OpenSSL security bug

[Alan DeKok]

Dave Duchscher wrote:
> Do you know if we will see this message:
> 
>  Invalid ACK received: 24
> 
> with freeradius using openssl 1.0.1g when a heartbleed attack is attempted?

  No.  Because OpenSSL will discard the bad data, and not give it to
FreeRADIUS.

  Alan DeKok.