March 2017 - Freeradius-Devel - lists.freeradius.org

TTLS vs PEAP
by Khali Singh 02 Mar '17

02 Mar '17

Dear devs I am trying to understand the difference between the various flavors of TTLS and PEAP. Please comment and/or correct the following observations: 1 .Both TTLS and PEAP use TLS for server side authentication and then use an inner authentication method to authenticate the client. 2. TTLS has a little more flexibility when it comes to choosing the inner authentication method than PEAP. 3. TTLSv0 is standardized as an RFC and is commonly found in implementations. TTLSv1 is only specified as a draft and not commonly implemented. TTLSv1 relies on a non-standard TLS extension called "Inner Authentication" which binds the inner and outer authentication to provide better security and protection. 4. Microsoft only implements and acknowledges PEAPv0. PEAPv1 was specified by Cisco to add support for EAP-GTC as an inner authentication method. How big is the difference between PEAPv0 and PEAPv1? 5. What is the difference between PEAPv2 specified in the later versions of the draft: https://tools.ietf.org/html/draft-josefsson-pppext-eap-tls-eap-10 and the previous versions? BR Khali

2 1

Commit report for v4.0.x branch
by announce＠freeradius.org 28 Feb '17

28 Feb '17

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJYtb1pAAoJEH0Oec13Yh7N7dcH/jSNlmpAe8Nl6aoHq3sZMYCT Be2zH7rpSLxbG3xPRF9aOpTjpTLS4FNHDJMA9cWi6faqUeJKzBWZiYP9OLyNxrwl 9cgsxU1TRqHcc5bRljvASHZZMipYl1vimSAEFeiHtbOC80rdW+a4ivoecMo2+qDs O71gtPXwHULzpwq5uPnGQTnbqFp+DxDEeT8Yq5CMPjEYvcJJgoKvmF1EGwky+ffI DsHyswNrSTgzhNjqYoH6SVqVwsuwjrjiCF5m4XtuUl9aet0X/CrdNWU9+YigSAMv V0Bx8YBYz0487VcNAb3CVNhPMVeJQdoLN3CltQIuO05FC6KTfkxOV/rlgRI9plc= =mLb9 -----END PGP SIGNATURE----- manually pull patch from v3.0.x Alan T. DeKok@2017-02-28T18:11:46Z Files modified: * src/lib/inet.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/dd4e87b70c7b1ba23609… ====== Merge pull request #1924 from alessandrotrisolini/v4.0.x ARP table not updated due to bad parameters order Alan DeKok (via GitHub)@2017-02-28T14:35:31Z Files modified: * src/modules/proto_dhcp/proto_dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8abb447b02bad09479fd… ====== Merge branch 'fix-parameters-order' into v4.0.x Alessandro Trisolini@2017-02-28T13:43:38Z Files modified: * src/modules/proto_dhcp/proto_dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/99144ed6ed25a6535934… ====== Fixed parameters order in fr_pair_find_by_num() This commit fixes the parameters passing order in function fr_pair_find_by_num(). In the original version, the variable hwvp was always NULL due to a failure of function fr_pair_find_by_num() caused by the bad order of parameters. This bug avoids the update of the ARP table when DHCP offers are sent unicast. Alessandro Trisolini@2017-02-28T13:30:53Z Files modified: * src/modules/proto_dhcp/proto_dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9d99a3eb203f78212c93… ====== -- This commit summary was generated @2017-03-01T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 28 Feb '17

28 Feb '17

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJYtcAlAAoJEH0Oec13Yh7NJqEH/3KRaUsa5tKyxmUaPaFIC+AI CA16JLP1Blf12S6M6SaTYUtSolyLuZVQtAYKGGA3CXN4g7SZT9KuNl/qDLbBRKwb Jagi2DPBknemiLKv75HiQfR/HEBtAWD51cZJTWmUzIvvKEWGJSVkBQpy654dKzSw cbYoS6HOn19kGpcSrWqCUjoKu6PHHuqT1J37jZn1IRGyzK9nrVTjXPqDtY/+w4ml eZRVfxkI65qjMGtLRlRP9D+/fufGXLf09W4QwFWmE2X4x5JsM7hPOMO8LAMTcB1t 5W9CcdYoHQJ7Ak38i41zZI3ueb04cYzPkFatYvkicoMMErsxu42XQSRzMIlA/E8= =dIgH -----END PGP SIGNATURE----- document IPv6 addresses Alan T. DeKok@2017-02-28T18:23:26Z Files modified: * man/man1/radclient.1 Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b9eea764a3e920b216f5… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJYtb1aAAoJEH0Oec13Yh7N4zAH/j6L1jrVWbTWaahjqySvkjpi 0Oc9arVrW60jB6UEkMDx88ZFb7OWNwjNz27LWONXY/k8pN7Z7EMPX7mJHGUlfh8V McgzAafhqDYLQHCuiIICAHHsJOfCDS3eX44HAmVoSgFMMcZuK1KyCX3z1ADuzq/k tESBidgvmerJS0h9Z4QPoKFfJv2TUPilMwQhmiLjfVhu22zjah52j8v+C4VAKBeP YyhQAEm7bG6ep+Sk0lEpMvC0BZ91rPItV6UYfLLcM/4TXkdsQE+Gi+mEsPLlij3h BO7CZkbbO0AVLvD1env5uU7EZOF1HtvaW0vq56h4DlTYxq6vgzfi97doollHnnc= =IsL1 -----END PGP SIGNATURE----- quiet compiler Alan T. DeKok@2017-02-28T18:11:31Z Files modified: * src/lib/misc.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3ecddb52bf4016aeb74d… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJYtb0QAAoJEH0Oec13Yh7N9Y4H+gOkLkS9UBcUBrZwlXNjdU63 72KhKCFKXSHdXo63xociHiEoRwyELIQt9sNBPhTyC9J+IVLN9BuKHgzqFBhIp1eQ gLo4KUNyheEzaTIYXprbqQzR03q28KkvrEhnY9msme/E+sfNIZFxKCyRpiVxtw7j Z2fesyqCJezvXGRqyelZXNG1NBYJ4g5IcsjI0iovJr1a1dz9vEuJm3yT9EdnlHIj RjTtmUopbtCmwZlO9XTO7PK7LwWTubG/kaptyL5xPD18/WLebBUq8zKC+B63AKR8 gsyWsHKKe7yU/VSgDSk/fp+6WtsYXF/QphYqP1U4pibLcWfgBDgkpRseAL2Aksk= =IwVx -----END PGP SIGNATURE----- Fix buffer overflow in fr_pton_port Nikolai Kondrashov (via Alan T. DeKok)@2017-02-28T18:10:24Z Files modified: * src/lib/misc.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ed979270941e3fe97d30… ====== -- This commit summary was generated @2017-03-01T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0