EAP-TLS suddenly broken

[Alan DeKok]

On Feb 13, 2016, at 9:26 PM, John Mok <a9121431 at gmail.com> wrote:
> I had been using EAP-TLS authentication with FreeRADIUS  2.1.12 on
> Debian Wheezy (OpenSSL 1.0.1e) and it worked fine, until I upgraded
> the Debian Wheezy packages (using apt-get dist-upgrade) several weeks
> ago. Then, the EAP-TLS authentication suddenly failed and became
> broken (see attached log).
> 
> Is there anyone knows what go wrong ?

  If an upgrade breaks the system... revert the upgrade.

  OpenSSL has had a number of released which broke inter-operability.

  I suggest using a modern version of FreeRADIUS.

  Alan DeKok.